Mail server report.

Christian Robottom Reis kiko at async.com.br
Wed Dec 6 09:35:45 BRST 2006


Este é um informe de Spam gerado pelo spambot da Async Open Source
para distribuição nas listas spambr-new e spam at async. Uma mensagem
semelhante foi enviada ao serviço spamcop.net e ao grupo Usenet
news.admin.net-abuse.sightings. O spam parece originar do host:

  Aparentemente originado de: UNKNOWN [82.179.84.180]                   

        Total de cabecalhos: 3 
          Cabecalhos falsos: 0
       Cabecalhos ignorados: 2

Dados do whois seguem:

	[Cached]
	[whois.ripe.net]
	% This is the RIPE Whois query server #1.
	% The objects are in RPSL format.
	%
	% Note: the default output of the RIPE Whois server
	% is changed. Your tools may need to be adjusted. See
	% http://www.ripe.net/db/news/abuse-proposal-20050331.html
	% for more details.
	%
	% Rights restricted by copyright.
	% See http://www.ripe.net/db/copyright.html
	
	% Note: This output has been filtered.
	%       To receive output for a database update, use the "-B" flag.
	
	% Information related to '82.179.84.0 - 82.179.85.255'
	
	inetnum:      82.179.84.0 - 82.179.85.255
	netname:      STANKINNET
	descr:        Moscow State Technological University "Stankin"
	descr:        RU, 101472, Moscow, Vadkovsky per., 1
	country:      RU
	admin-c:      MVS53-RIPE
	tech-c:       AER2-RIPE
	status:       ASSIGNED PA
	mnt-by:       RUNNET-MNT
	source:       RIPE # Filtered
	
	person:         Maksim V Sutyagin
	address:        MSTU "Stankin"
	address:        3a, Vadkovsky per.
	address:        101472 Moscow
	address:        Russia
	remarks:        phone:        +7 095 9731056
	phone:          +7 495 9731056
	remarks:        fax-no:       +7 095 9733952
	fax-no:         +7 495 9733952
	e-mail:         MSutyagin at stankin.ru
	nic-hdl:        MVS53-RIPE
	source:         RIPE # Filtered
	remarks:        modified for Russian phone area changes
	
	person:         Alexander E Rodionov
	address:        MSTU "Stankin"
	address:        3a, Vadkovsky per.
	address:        101472 Moscow
	address:        Russia
	remarks:        phone:        +7 095 9733398
	phone:          +7 495 9733398
	remarks:        fax-no:       +7 095 9733952
	fax-no:         +7 495 9733952
	e-mail:         ARodionov at stankin.ru
	nic-hdl:        AER2-RIPE
	source:         RIPE # Filtered
	remarks:        modified for Russian phone area changes
	
	% Information related to '82.179.0.0/16AS3267'
	
	route:        82.179.0.0/16
	descr:        RUNNet
	descr:        Russian Federal University Network
	origin:       AS3267
	mnt-by:       RUNNET-MNT
	source:       RIPE # Filtered

The raw message forwarded to me follows:
------------------------------------------------------------------------

Return-Path: <sec at firstclassmoving.com>
Received: from sound ([82.179.84.180])
	by anthem.async.com.br (8.13.4/8.13.4/Debian-3ubuntu0.1) with SMTP id
	kB6ARg6h012377
	for <kiko at ASYNC-MUNGED-ME>; Wed, 6 Dec 2006 08:28:41 -0200
Message-Id: <200612061028.kB6ARg6h012377 at anthem.async.com.br>
Received: (qmail 3490 invoked by uid 0); Wed, 6 Dec 2006 13:29:25 -0000)
Received: from unknown (HELO qun) (192.168.1.24)
	by 192.168.1.49 with SMTP; Wed, 6 Dec 2006 13:29:25 -0000
Date: Wed, 6 Dec 2006 13:20:25 +0300
From: sec at firstclassmoving.com
To: kiko at ASYNC-MUNGED-ME
Subject: Mail server report.
X-Spambayes-Classification: unsure; 0.51
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=utf-8
Dear Sir/Madam,

We have logged a fraud activity from the IP-address belonging to your
computer at more than 17 Web-sites and have received abuses
from several companies.

The abuse copy is sent as an attachment to this letter. Please learn this. 

We have added our utilite that would help you to find and remove any spyware from your PC.
If you were not lucky using another software, please try this one.

Yours faithfully
Steven Cooper



More information about the Spam mailing list