[email] (217.12.18.14) SOLO POR 3 DIAS $ 39.900. AUMENTE VENTAS HOY !!!

0 views
Skip to first unread message

Karsten M. Self

unread,
Mar 21, 2006, 3:00:43 AM3/21/06
to

An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:

ab...@juntadeandalucia.es, postm...@juntadeandalucia.es


Message abstract:

Message ID: <200603200448.1...@mx-roseate.atl.sa.earthlink.net>
Originating IP address:
217.12.18.14 (14.zone-217.12.18.juntadeandalucia.es)

ASN: 34285
ASN Description: Sociedad Andaluza para el Desarrollo
CIDR: 217.12.16.0/20

CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=34285

The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:

The originating IP is listed in the following spam and open
relay lookup services:

- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?217.12.18.14
- SORBS Open Relay: Spam Received See: http://www.sorbs.net/lookup.shtml?217.12.18.14

Additional resources of possible interest:

http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=217.12.18.14
http://openrbl.org/lookup?i=217.12.18.14
http://groups.google.com/groups?scoring=d&q=217.12.18.14+group:*abuse*


Among potential contact addresses found for this spam are:

IPW: andres.ferna...@juntadeandalucia.es, l...@sainco.abengoa.com
D: ab...@juntadeandalucia.es
WI:
AN: postm...@juntadeandalucia.es
RD:
AA:

The following addresses are not reachable per remote query or
local experience:

IG:

Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.

Karsten M. Self <kms...@ix.netcom.com>

+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+

Version: : 1.44 $
Last updated: : 2006/02/23 14:17:44 $

---------------------------------------------------------------------

From notre...@gmail.com Mon Mar 20 23:52:24 2006
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1FLH3Y-0008Si-00
for <karsten@localhost>; Mon, 20 Mar 2006 01:52:08 -0800
Status: U
Received: from popd.ix.netcom.com [209.86.93.119]
by localhost with POP3 (fetchmail-6.2.5.4)
for karsten@localhost (single-drop); Mon, 20 Mar 2006 01:52:08 -0800 (PST)
Received: from 14.zone-217.12.18.juntadeandalucia.es ([217.12.18.14])
by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1flgZE6nu3Nl34f0
for <kms...@ix.netcom.com>; Mon, 20 Mar 2006 04:48:09 -0500 (EST)
Received: from [200.2.196.104] (helo=User)
by mail.andaluciajunta.es with esmtpa (Exim 4.50)
id 1FLGos-0000Z2-BJ; Mon, 20 Mar 2006 10:37:00 +0100
Reply-To: <listadomai...@yahoo.es>
From: "2.060.0000 CORREOS"<notre...@gmail.com>
Subject: SOLO POR 3 DIAS $ 39.900. AUMENTE VENTAS HOY !!!
Date: Mon, 20 Mar 2006 05:47:26 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <200603200448.1...@mx-roseate.atl.sa.earthlink.net>
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
Lines: 43
X-SenderIP: 217.12.18.14
X-ASN: ASN-34285
X-CIDR: 217.12.16.0/20
X-Mozilla-Status: 0004


<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
<FONT size=5 color=#FF0000 face="Impact">&nbsp; SOLO POR 3 DIAS (20-21-22 DE MARZO)</FONT></DIV>
<DIV>
<FONT size=5 color=#FF0000 face="Impact"> PODEROSA HERRAMIENTA PUBLICITARIA</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Palace Script MT">&nbsp;</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">OFRECEMOS 2.060.000 CORREOS CHILENOS</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">ANTES $ 99.000</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">AHORA Y SOLO POR 3 DIAS </FONT><FONT size=5 color=#000080 face="Impact">$39.900</FONT></DIV>
<DIV>
<FONT color=#000000>&nbsp;</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* SOFTWARE ENVIO MASIVO</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* 750.000 CORREOS PUNTOS CL</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* 470.000 SEGMENTADOS POR RUBROS</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* 2.060.000 CORREOS CHILENOS</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* MANUAL INSTRUCCIONES</FONT></DIV>
<DIV>
<FONT color=#000000>&nbsp;</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">PARA MAS INFORMACION HAGA CLIC </FONT><A href="mailto:listadomai...@yahoo.es"><FONT size=5 color=#0000FF face="Impact"><U>AQUI</U></FONT></A></DIV>
<DIV>
<FONT color=#000000>&nbsp;</FONT></DIV>
<DIV>
<FONT color=#000000>&nbsp;</FONT></DIV>
<DIV>
<FONT size=1 color=#000000 face="Impact">SI QUIERE SER REMOVIDO RESPONDA ESTE EMAIL CON EL ASUNTO REMOVER</FONT></DIV>
<DIV>
<FONT color=#000000>&nbsp;</FONT></DIV>
</FONT>
</BODY></HTML>

---------------------------------------------------------------------

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

Karsten M. Self

unread,
Mar 21, 2006, 3:00:45 AM3/21/06
to

An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:

No valid reporting addresses found


Message abstract:

Message ID: <6be301c64c01$7b9f0aae$c2b9...@mail.com>
Originating IP address:
222.106.9.173 ()

ASN: 4766
ASN Description: KORnet Powered BY Korea Telecom
CIDR: 222.96.0.0/12

CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=4766

The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:

The originating IP is listed in the following spam and open
relay lookup services:

- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?217.12.18.14
- SORBS Open Relay: Spam Received See: http://www.sorbs.net/lookup.shtml?217.12.18.14

Additional resources of possible interest:

http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=222.106.9.173
http://openrbl.org/lookup?i=222.106.9.173
http://groups.google.com/groups?scoring=d&q=222.106.9.173+group:*abuse*


Among potential contact addresses found for this spam are:

IPW: i...@ns.kornet.net
D:
WI:
AN:
RD:
AA:

The following addresses are not reachable per remote query or
local experience:

IG: i...@ns.kornet.net n...@kornet.net

Reply all
Reply to author
Forward
0 new messages