An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
ab...@comcast.net
Message abstract:
Message ID: <KFRKQJKLQGHJJZPILTU...@yahoo.com>
Originating IP address:
24.218.59.18 (h00a0cc612f8c.ne.client2.attbi.com)
ASN: 7015
ASN Description:
CIDR: 24.218.0.0/16
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=7015
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
attbi.com does not support abuse@domain mail.
attbi.com does not support postmaster@domain mail.
IP 24.218.59.18 (h00a0cc612f8c.ne.client2.attbi.com) is known to
SpamHaus as a source or relay of spam.
See: http://www.spamhaus.org/
Classification(s):
- Illegal 3rd party exploits, including proxies, worms and trojans.
For more information on this host, see:
http://www.spamhaus.org/query/bl?ip=24.218.59.18
Please address these issues.
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?24.218.59.18
- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=24.218.59.18
- SPEWS Level 1: ! [1] comcast/attbi, see http://spews.org/ask.cgi?S2963
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=24.21...
http://openrbl.org/lookup?i=24.218.59.18
http://groups.google.com/groups?scoring=d&q=24.218.59.18+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: ab...@comcast.net, cips_ip-registrat...@cable.comcast.com
D:
WI:
AN: ab...@attbi.com
RD: ab...@comcast.com, postmas...@comcast.com
AA:
The following addresses are not reachable per remote query or
local experience:
IG: ab...@attbi.com cips_ip-registrat...@cable.comcast.com postmas...@attbi.com
Full unmunged headers and body follow.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: 1.32
Last updated: 2004/10/10 03:43:37
---------------------------------------------------------------------
From bmccmmr...@hotmail.com Tue Nov 2 07:24:21 2004
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1COwD2-0008JE-00
for <karsten@localhost>; Tue, 02 Nov 2004 02:48:16 -0800
Status: U
Received: from popd.ix.netcom.com [207.217.120.161]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Tue, 02 Nov 2004 02:48:16 -0800 (PST)
Received: from h00a0cc612f8c.ne.client2.attbi.com ([24.218.59.18])
by mx-a065a10.pas.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1coWcj3OS3NZFpB0
Tue, 2 Nov 2004 02:47:28 -0800 (PST)
Received: from 76.72.56.224 by 24.218.59.18; Tue, 02 Nov 2004 09:50:57 -0100
Message-ID: <KFRKQJKLQGHJJZPILTU...@yahoo.com>
From: "Ferdinand Mcleod" <bmccmmr...@hotmail.com>
Reply-To: "Ferdinand Mcleod" <bmccmmr...@hotmail.com>
To: kmself<at>28527.ix.netcom.com
Subject: 100% natural viagra, get it and get hard!
Date: Tue, 02 Nov 2004 07:45:57 -0300
X-Mailer: AOL 9.0 for Windows US sub 185
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--958717910835841359"
X-Priority: 3
X-MSMail-Priority: Normal
X-IP:92.144.176.171
X-ELNK-AV: 0
Lines: 22
X-SenderIP: 24.218.59.18
X-ASN: ASN-7015
X-CIDR: 24.218.0.0/16
X-Mozilla-Status: 0004
----958717910835841359
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<title>TiberiusErectus</title>
</head>
<body>
<a href=3D"http://dreamcast-bba.info/index.php?id=3D173&affid=3D6893"><img=
src=3D"http://dreamcast-bba.info/ads/bigad2te.jpg" border=3D"0" width=3D"=
500" height=3D"600"></a><p><font color=3D"#000000" size=3D"2" face=3D"aria=
l, helvetica, sans-serif">cli<!--%RANDOM_WORD-->ck
<a href=3D"http://dreamcast-bba.info/gone.php">here</a> if you would not =
like to receive future mai<!--%RANDOM_WORD-->lings.</font></p>
</body>
</html>
----958717910835841359--
---------------------------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
<URL:http://www.killfile.org/~tskirvin/nana/>
