Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[Possible SPAM] [email] (202.157.3.127) Do you need help falling asleep? AMBIEN!

0 views
Skip to first unread message

Chris

unread,
Jun 13, 2007, 11:30:20 PM6/13/07
to

An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:

postm...@kcn-tv.ne.jp


Message abstract:

Message ID: <000701c7ae14$41c42120$439f...@light.com.br>
Originating IP address:
202.157.3.127 (gd202157003127.u13.kcn-tv.ne.jp)

ASN: 23790
ASN Description: Kumamoto Cable Network Corporation
CIDR: 202.157.0.0/18

CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=23790

The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:

kcn-tv.ne.jp does not support abuse@domain mail.


IP 202.157.3.127 (gd202157003127.u13.kcn-tv.ne.jp) is known to
SpamHaus as a source or relay of spam.
See: http://www.spamhaus.org/

Classification(s):

- Illegal 3rd party exploits, including proxies, worms and trojans.

For more information on this host, see:

http://www.spamhaus.org/query/bl?ip=202.157.3.127

Please address these issues.


- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=202.157.3.127

Additional resources of possible interest:

http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=202.157.3.127
http://openrbl.org/lookup?i=202.157.3.127
http://groups.google.com/groups?scoring=d&q=202.157.3.127+group:*abuse*


Among potential contact addresses found for this spam are:

IPW: hostm...@nic.ad.jp, sup...@kcn-tv.co.jp
D: postm...@kcn-tv.ne.jp
WI:
AN: postm...@kcn-tv.ne.jp
RD:
AA:

The following addresses are not reachable per remote query or
local experience:

IG: ab...@kcn-tv.ne.jp

Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.

Chris Pollock cpol...@embarqmail.com

+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+

Version: : 1.42 $
Last updated: : 2005/06/26 16:10:48 $

---------------------------------------------------------------------

From tammyg...@light.com.br Wed Jun 13 22:26:43 2007
Received: from pop.embarq.synacor.com [208.47.184.129]
by localhost.localdomain with POP3 (fetchmail-6.3.8)
for <cpollock@localhost> (single-drop); Wed, 13 Jun 2007 10:27:17 -0500 (CDT)
Received: from localhost (localhost.localdomain [127.0.0.1])
by smtp.embarq.synacor.com (Postfix) with ESMTP id A949A24013
for <cpol...@embarqmail.com>; Wed, 13 Jun 2007 11:26:20 -0400 (EDT)
X-Virus-Scanned: amavisd-new at
Old-X-Spam-Score: 5.784
Old-X-Spam-Level: *****
Old-X-Spam-Status: No, score=5.784 tagged_above=-10 required=10
tests=[BAYES_50=0.001, DATE_IN_FUTURE_06_12=1.668, DRUGS_SLEEP=0.001,
FUZZY_PRESCRIPT=3.6, PLING_QUERY=0.514]
Received: from smtp.embarq.synacor.com ([127.0.0.1])
by localhost (smtp07.embarq.synacor.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id WRFxlAlf8b6W for <cpol...@embarqmail.com>;
Wed, 13 Jun 2007 11:26:18 -0400 (EDT)
Received: from smarth-faced.atl.sa.earthlink.net (smarth-faced.atl.sa.earthlink.net [207.69.195.99])
by smtp.embarq.synacor.com (Postfix) with ESMTP id 5926624552
for <cpol...@embarqmail.com>; Wed, 13 Jun 2007 11:16:05 -0400 (EDT)
Received: from mx-laughing.atl.sa.earthlink.net ([207.69.195.179])
by smarth-faced.atl.sa.earthlink.net with smtp (Exim 3.36 #4)
id 1HyUZp-00081u-00
for cpol...@embarqmail.com; Wed, 13 Jun 2007 11:16:05 -0400
X-ELNK-Loop: cpol...@earthlink.net
Received: from noehlo.host ([127.0.0.1])
by mx-laughing.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1hYuzLsP3Nl36H5; Wed, 13 Jun 2007 11:16:01 -0400 (EDT)
Received: from 19ko6f8 ([202.157.3.127])
by mx-laughing.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1hYuzH6bC3Nl36H1; Wed, 13 Jun 2007 11:15:57 -0400 (EDT)
Message-ID: <000701c7ae14$41c42120$439f...@light.com.br>
Reply-To: "Tammy Garner" <tammyg...@light.com.br>
From: "Tammy Garner" <tammyg...@light.com.br>
To: <cpollock<at>617.earthlink.net>
Subject: Do you need help falling asleep? AMBIEN!
Date: Wed, 13 Jun 2007 19:40:42 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="windows-1250"
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
X-Antivirus: avast! (VPS 000748-5, 2007/06/13), Outbound message
X-Antivirus-Status: Clean
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
X-SenderIP: 202.157.3.127
X-ASN: ASN-23790
X-CIDR: 202.157.0.0/18

0rder all of your Favorite RX-Meds 0nline and_Save!
With fast discreet trackable FedEx shipping!
N0_-_Prescripti0n_-_Needed!
0rder Now at - 321Meds . com

---------------------------------------------------------------------

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages