[email] (85.250.171.26) save your wallet use ch3ap qual1ty meds and p i1ls
Chris
An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
ab...@netvision.net.il, postm...@netvision.net.il
Message abstract:
Message ID: <42929730.20...@yahoo.com>
Originating IP address:
85.250.171.26 (85-250-171-26.bb.netvision.net.il)
ASN: 1680
ASN Description: NetVision Ltd.
CIDR: 85.250.0.0/16
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=1680
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?85.250.171.26
- SORBS Open Relay: Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?85.250.171.26
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=85.250.171.26
http://openrbl.org/lookup?i=85.250.171.26
http://groups.google.com/groups?scoring=d&q=85.250.171.26+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: ab...@netvision.net.il
D: postm...@netvision.net.il ab...@netvision.net.il
WI: ab...@netvision.net.il, regi...@netvision.net.il
AN: ab...@netvision.net.il
RD:
AA: hostm...@arin.net
The following addresses are not reachable per remote query or
local experience:
IG:
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.
Chris Pollock <cpol...@earthlink.net>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: : 1.41 $
Last updated: : 2005/06/06 21:36:51 $
---------------------------------------------------------------------
From jdr...@yahoo.com Fri Jun 2 22:13:53 2006
X-RocketYMUMID: AFHgjkQAAKTnRIDKegz17GCituQ
X-Apparently-To: chris_...@yahoo.com via 68.142.224.81; Fri, 02 Jun 2006 16:32:10 -0700
X-YahooFilteredBulk: 85.250.171.26
X-Originating-IP: [85.250.171.26]
Return-Path: <jdr...@yahoo.com>
Authentication-Results: mta113.mail.re4.yahoo.com from=yahoo.com; domainkeys=neutral (no sig)
Received: from 85.250.171.26 (HELO artiom-ggvzr21e) (85.250.171.26) by mta113.mail.re4.yahoo.com with SMTP; Fri, 02 Jun 2006 16:32:10 -0700
Return-path: <jdr...@yahoo.com>
Received: from [169.100.153.224] (port=4450 helo=[169.100.153.224]) by yahoo.com with esmtp id vLBWI6-VwU047-15 for chris_...@yahoo.com; Fri, 02 Jun 2006 18:16:15 +0600
Reply-To: Tyler <jdr...@yahoo.com>
Message-ID: <42929730.20...@yahoo.com>
From: Tyler <jdr...@yahoo.com>
To: <chris_pollock<at>6764.yahoo.com>
Subject: save your wallet use ch3ap qual1ty meds and p i1ls
Date: Fri, 02 Jun 2006 18:16:15 +0600
MIME-Version: 1.0
Content-Type: text/html
X-Priority: 1
X-Mailer: The Bat! (v3.71.03) Professional
X-Spam: Not detected
X-FetchYahoo: version 2.10.0 MsgId 2888_950216_75302_1384_694_0_191480_-1_0
X-SenderIP: 85.250.171.26
X-ASN: ASN-1680
X-CIDR: 85.250.0.0/16
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2180" name=3DGENERATOR>
<TITLE>save your wallet use ch3ap qual1ty meds and p i1ls</TITLE>
<STYLE></STYLE>
</HEAD>
<BODY>
<P>I am happy with your visiting today Sir,</P>
Please open your mind for a simple thing<br>
Internet provided products always cheaper than others.<br>
You may agree or not, but this is a fact<br>
<a href="http://famnvp.luresevere.com/?88823711">Just compare the numbers and get the same goods for a half value</a><br>
You may agree or not, but this is a fact.<br>
<br>
</BODY>
</HTML>
---------------------------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
Chris
An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
No valid reporting addresses found
Message abstract:
Message ID: <45081565.20...@yahoo.com>
Originating IP address:
200.61.185.249 (customer185-249.iplannetworks.net)
ASN: 16814
ASN Description:
CIDR: 200.61.160.0/19
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=16814
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?85.250.171.26
- SORBS Open Relay: Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?85.250.171.26
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=200.61.185.249
http://openrbl.org/lookup?i=200.61.185.249
http://groups.google.com/groups?scoring=d&q=200.61.185.249+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: ipma...@nociplan.com.ar
D:
WI:
AN: postm...@iplannetworks.net, ab...@iplan.com.ar
RD:
AA:
The following addresses are not reachable per remote query or
local experience:
IG: ab...@iplannetworks.net postm...@iplannetworks.net ipma...@nociplan.com.ar