Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] (222.129.109.22) Ä«¡¤µå¼ÒÁöÀÚ ´©±¸³ª´ë¡¤Ãâ/Á÷ÀåÀÎ¿ì´ë´ë¡¤Ãâ(ÃÖÀú±Ý¸®)

0 views

Skip to first unread message

Karsten M. Self

unread,

Feb 3, 2006, 3:04:54 PM2/3/06

An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:

ab...@cnc-noc.net chinafriends

Message abstract:

Message ID: <IKTAMVHXWFRX...@yahoo.com>
Originating IP address:
222.129.109.22 ()

ASN: 4814
ASN Description: CNCGROUP IP network―China169 Beijing Broadband Network
CIDR: 222.129.64.0/18

CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=4814

The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:

IP 222.129.109.22 () is known to SpamHaus as a source or relay of
spam.
See: http://www.spamhaus.org/

Classification(s):

- Direct UBE sources, verified spam services and ROKSO spammers.
- Illegal 3rd party exploits, including proxies, worms and trojans.

For more information on this host, see:

http://www.spamhaus.org/query/bl?ip=222.129.109.22
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL35573

Please address these issues.

- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=222.129.109.22

Additional resources of possible interest:

http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=222.129.109.22
http://openrbl.org/lookup?i=222.129.109.22
http://groups.google.com/groups?scoring=d&q=222.129.109.22+group:*abuse*

Among potential contact addresses found for this spam are:

IPW: ab...@cnc-noc.net, su...@publicf.bta.net.cn
D:
WI:
AN:
RD:
AA:

The following addresses are not reachable per remote query or
local experience:

IG: su...@publicf.bta.net.cn

Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.

Karsten M. Self <kms...@ix.netcom.com>

+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+

Version: 1.42
Last updated: 2005/06/26 16:10:48

---------------------------------------------------------------------

From byz83...@yahoo.co.kr Fri Feb 3 11:34:37 2006
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1F4oKD-00013h-00
for <karsten@localhost>; Thu, 02 Feb 2006 15:57:17 -0800
Status: U
Received: from popd.ix.netcom.com [209.86.93.119]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Thu, 02 Feb 2006 15:57:17 -0800 (PST)
Received: from 222.129.109.22 ([222.129.109.22])
by mx-nebolish.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1f4Ofj6G63Nl3491; Thu, 2 Feb 2006 18:52:24 -0500 (EST)
Received: from 168.160.76.138 by ; Thu, 02 Feb 2006 22:43:27 -0100
Message-ID: <IKTAMVHXWFRX...@yahoo.com>
From: "종합정보" <byz83...@yahoo.co.kr >
Reply-To: "종합정보" <byz83...@yahoo.co.kr >
To: hhomler<at>21363.ix.netcom.com
Subject: 카·드소지자 누구나대·출/직장인우대대·출(최저금리)
Date: Fri, 03 Feb 2006 02:46:27 +0300
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--48398769397480584646"
X-Priority: 1
X-MSMail-Priority: High
X-ELNK-Info: spv=1;
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
Lines: 47
X-SenderIP: 222.129.109.22
X-ASN: ASN-4814
X-CIDR: 222.129.64.0/18

----48398769397480584646
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

----48398769397480584646--

---------------------------------------------------------------------

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

Karsten M. Self

unread,

Feb 3, 2006, 3:05:02 PM2/3/06

An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:

No valid reporting addresses found

Message abstract:

Message ID: <200602021856.1...@mx-herron.atl.sa.earthlink.net>
Originating IP address:
81.190.171.32 (host-81-190-171-32.augustow.mm.pl)

ASN: 30824
ASN Description: Multimedia Polska Sp.z o.o.
CIDR: 81.190.170.0/23

CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=30824

- Direct UBE sources, verified spam services and ROKSO spammers.
- Illegal 3rd party exploits, including proxies, worms and trojans.

For more information on this host, see:

http://www.spamhaus.org/query/bl?ip=222.129.109.22
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL35573

Please address these issues.

- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=222.129.109.22

Additional resources of possible interest:

http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=81.190.171.32
http://openrbl.org/lookup?i=81.190.171.32
http://groups.google.com/groups?scoring=d&q=81.190.171.32+group:*abuse*

Among potential contact addresses found for this spam are:

IPW: l...@multimedia.pl, m.sa...@multimedia.pl
D:
WI: bi...@nazwa.pl
AN: ab...@multimedia.pl, ab...@cdp.pl, postm...@mm.pl, postm...@cdp.pl
RD:
AA:

The following addresses are not reachable per remote query or
local experience:

IG: ab...@mm.pl postm...@mm.pl l...@multimedia.pl m.sa...@multimedia.pl bi...@nazwa.pl

0 new messages