Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] ¼³¹®¿¡ Âü¿©ÇϽðí ǪÁüÇÑ »çÀºÇ°µµ ¹ÞÀ¸¼¼¿ä~! gsxy ydeh u gsh

0 views
Skip to first unread message

Karsten M. Self

unread,
Feb 3, 2005, 5:13:50 PM2/3/05
to

An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:

i...@cjdream.com, kimy...@hanafos.com


Message abstract:

Message ID: <i5zu-h6$70a$3...@b7r3zr.nt.v17>
Originating IP address:
211.111.74.3 ()

ASN: 9457
ASN Description: DREAMLINE CO.
CIDR: 211.111.0.0/17

CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=9457

The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:

IP 211.111.74.3 () is known to SpamHaus as a source or relay of
spam.
See: http://www.spamhaus.org/

Classification(s):

- Illegal 3rd party exploits, including proxies, worms and trojans.

For more information on this host, see:

http://www.spamhaus.org/query/bl?ip=211.111.74.3

Please address these issues.


The originating IP is listed in the following spam and open
relay lookup services:

- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?211.111.74.3
- Composite Blocklist: Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=211.111.74.3

Additional resources of possible interest:

http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=211.111.74.3
http://openrbl.org/lookup?i=211.111.74.3
http://groups.google.com/groups?scoring=d&q=211.111.74.3+group:*abuse*

Among potential contact addresses found for this spam are:

IPW: i...@cjdream.com, i...@dreamline.co.kr, kimy...@hanafos.com
D:
WI:
AN:
RD: ab...@dns.kr, postm...@dns.kr
AA:

The following addresses are not reachable per remote query or
local experience:

IG: i...@dreamline.co.kr

Full unmunged headers and body follow.

Karsten M. Self <kms...@ix.netcom.com>

+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+

Version: 1.32
Last updated: 2004/10/10 03:43:37

---------------------------------------------------------------------

From dh...@dskfhdjejj.ro.to Thu Feb 3 14:12:42 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1CwUQa-0005nz-00
for <karsten@localhost>; Wed, 02 Feb 2005 16:00:57 -0800
Status: U
Received: from popd.ix.netcom.com [207.217.120.162]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Wed, 02 Feb 2005 16:00:56 -0800 (PST)
Received: from 207.217.125.16 ([211.111.74.3])
by mx-a065a05.pas.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1cWumW6HC3NZFpA0
for <kms...@ix.netcom.com>; Wed, 2 Feb 2005 15:57:09 -0800 (PST)
Received: from [158.25.78.72] by 207.217.125.16 id <0723495-86131>; Wed, 02 Feb 2005 20:48:20 -0300
Message-ID: <i5zu-h6$70a$3...@b7r3zr.nt.v17>
From: "설문" <dh...@dskfhdjejj.ro.to>
Reply-To: "설문" <dh...@dskfhdjejj.ro.to>
To: kmself<at>7422.ix.netcom.com
Subject: 설문에 참여하시고 푸짐한 사은품도 받으세요~! gsxy ydeh u gsh
Date: Wed, 02 Feb 05 20:48:20 GMT
X-Mailer: AOL 7.0 for Windows US sub 118
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="17758EE_4.EA"
X-Priority: 3
X-MSMail-Priority: Normal
X-ELNK-AV: 0
Lines: 39
X-SenderIP: 211.111.74.3
X-ASN: ASN-9457
X-CIDR: 211.111.0.0/17
X-Mozilla-Status: 0004

--17758EE_4.EA
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<html>

<head>
<meta http-equiv=3D"content-type" content=3D"text/html; charset=3Deuc-kr">=

<title></title>
<body bgcolor=3D"#E6E6E6" leftmargin=3D"0" marginwidth=3D"0" topmargin=3D"=
0" marginheight=3D"0">
<table cellpadding=3D"0" cellspacing=3D"0" width=3D"800" align=3D"center">=

<tr>
<td width=3D"800"><img src=3D"http://itemitem.com/hongsam/images/h=
ong2_1.gif" width=3D"800" height=3D"295" border=3D"0"></td>
</tr>
<tr>
<td width=3D"800"><img src=3D"http://itemitem.com/hongsam/images/h=
ong2_2.gif" width=3D"800" height=3D"399" border=3D"0"></td>
</tr>
<tr>
<td width=3D"800" height=3D"550"><a href=3D"http://itemitem.com/ho=
ngsam/hongsam2_b.html" target=3D"_blank"><img src=3D"http://itemitem.com/h=
ongsam/images/hong2_3b.gif" width=3D"800" height=3D"550" border=3D"0"></a>=
</td>
</tr>
<tr>
<td><a href=3D"mailto:tntlsr...@yahoo.co.kr"><img src=3D"http:=
//itemitem.com/hongsam/images/hong2_4.gif" width=3D"800" height=3D"132" bo=
rder=3D"0"></a></td>
</tr>
</table>

--17758EE_4.EA--

---------------------------------------------------------------------

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:
<URL:http://www.killfile.org/~tskirvin/nana/>

0 new messages