Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] (222.110.1.217) SkyLife, È­ÁúÀÌ ³¡³»Áà¿ä! (SBS,KBS,MBC) °³Åë!

0 views
Skip to first unread message

Karsten M. Self

unread,
May 19, 2005, 3:00:09 AM5/19/05
to

An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:

n...@kornet.net


Message abstract:

Message ID: <v59$b8j$$bzb$$n...@hcq.qk584>
Originating IP address:
222.110.1.217 ()

ASN: 4766
ASN Description: KORnet Powered BY Korea Telecom
CIDR: 222.96.0.0/12

CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=4766

The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:

IP 222.110.1.217 () is known to SpamHaus as a source or relay of
spam.
See: http://www.spamhaus.org/

Classification(s):

- Illegal 3rd party exploits, including proxies, worms and trojans.

For more information on this host, see:

http://www.spamhaus.org/query/bl?ip=222.110.1.217

Please address these issues.


The originating IP is listed in the following spam and open
relay lookup services:

- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?222.110.1.217
- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=222.110.1.217
- DSBL Proxy: http://dsbl.org/listing?222.110.1.217

Additional resources of possible interest:

http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=222.110.1.217
http://openrbl.org/lookup?i=222.110.1.217
http://groups.google.com/groups?scoring=d&q=222.110.1.217+group:*abuse*


Among potential contact addresses found for this spam are:

IPW: i...@ns.kornet.net
D:
WI:
AN:
RD:
AA: n...@kornet.net

The following addresses are not reachable per remote query or
local experience:

IG: i...@ns.kornet.net

Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.

Karsten M. Self <kms...@ix.netcom.com>

+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+

Version: 1.38
Last updated: 2005/04/18 20:00:01

---------------------------------------------------------------------

From lt06...@hotmail.com Wed May 18 23:11:46 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1DYa6U-0000mV-00
for <karsten@localhost>; Wed, 18 May 2005 18:45:38 -0700
Status: U
Received: from popd.ix.netcom.com [209.86.93.120]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Wed, 18 May 2005 18:45:38 -0700 (PDT)
Received: from 209.86.93.227 ([222.110.1.217])
by mx-a065a10.pas.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1dysCi2D03NZFpB0
Wed, 18 May 2005 10:45:52 -0700 (PDT)
Received: from (HELO 39sc) [183.224.52.93] by 209.86.93.227 SMTP id Nj6yv9K6j9Z3SQ; Wed, 18 May 2005 16:39:59 -0100
Message-ID: <v59$b8j$$bzb$$n...@hcq.qk584>
From: "Beatrice Carr" <lt06...@hotmail.com>
Reply-To: "Beatrice Carr" <lt06...@hotmail.com>
To: kimwool<at>12074.ix.netcom.com
Subject: SkyLife, 화질이 끝내줘요! (SBS,KBS,MBC) 개통!
Date: Wed, 18 May 2005 16:39:59 -0100
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="B48A_2_F_E__..5C.E_228"
X-Priority: 3
X-ELNK-AV: 0
Lines: 60
X-SenderIP: 222.110.1.217
X-ASN: ASN-4766
X-CIDR: 222.96.0.0/12

--B48A_2_F_E__..5C.E_228
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<html>

<head>
<meta http-equiv=3D"content-type" content=3D"text/html; charset=3Deuc-kr">=

<title>=BD=BA=C4=AB=C0=CC=B6=F3=C0=CC=C7=C1</title>
<meta name=3D"generator" content=3D"Namo WebEditor v5.0">
</head>
<body oncontextmenu=3D"return false">
<body bgcolor=3D"white" text=3D"black" link=3D"blue" vlink=3D"purple" alin=
k=3D"red">

<p align=3D"center"> </p>
<table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"126" alig=
n=3D"center">
<tr>
<td width=3D"126">
<p align=3D"center"><a href=3D"http://7%67%69j%75k.o=
%72%67/n%65w%61%64m%69n/codmain.html?prod_num=3D54&pt_code=3Dpanox" onfocu=
s=3D"this.blur()"><img src=3D"http://7gijuk.co.kr/PR_imge/new_sky/sky1.gif=
" border=3D"0"></a></p>
</td>
</tr>
<tr>
<td width=3D"126">
<p align=3D"center"><a href=3D"http://7%67%69j%75k.o=
%72%67/n%65w%61%64m%69n/codmain.html?prod_num=3D54&pt_code=3Dpanox" onfocu=
s=3D"this.blur()"><img src=3D"http://7gijuk.co.kr/PR_imge/new_sky/sky2.jpg=
" border=3D"0"></a></p>
</td>
</tr>
<tr>
<td width=3D"126">
<p align=3D"center"><a href=3D"http://7%67%69j%75k.o=
%72%67/n%65w%61%64m%69n/codmain.html?prod_num=3D54&pt_code=3Dpanox" onfocu=
s=3D"this.blur()"><img src=3D"http://7gijuk.co.kr/PR_imge/new_sky/sky3.jpg=
" border=3D"0"></a></p>
</td>
</tr>
<tr>
<td width=3D"126">
<p align=3D"center"><a href=3D"http://7%67%69j%75k.o=
%72%67/n%65w%61%64m%69n/m_reject.html" onfocus=3D"this.blur()"><img src=3D=
"http://7gijuk.co.kr/PR_imge/new_sky/sky4.jpg" border=3D"0"></a></p>
</td>
</tr>
</table>

</body>

</html>

--B48A_2_F_E__..5C.E_228--

---------------------------------------------------------------------

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages