Mail server report.
Christian Robottom Reis
kiko at async.com.br
Wed Dec 6 09:35:45 BRST 2006
Este é um informe de Spam gerado pelo spambot da Async Open Source
para distribuição nas listas spambr-new e spam at async. Uma mensagem
semelhante foi enviada ao serviço spamcop.net e ao grupo Usenet
news.admin.net-abuse.sightings. O spam parece originar do host:
Aparentemente originado de: UNKNOWN [82.179.84.180]
Total de cabecalhos: 3
Cabecalhos falsos: 0
Cabecalhos ignorados: 2
Dados do whois seguem:
[Cached]
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '82.179.84.0 - 82.179.85.255'
inetnum: 82.179.84.0 - 82.179.85.255
netname: STANKINNET
descr: Moscow State Technological University "Stankin"
descr: RU, 101472, Moscow, Vadkovsky per., 1
country: RU
admin-c: MVS53-RIPE
tech-c: AER2-RIPE
status: ASSIGNED PA
mnt-by: RUNNET-MNT
source: RIPE # Filtered
person: Maksim V Sutyagin
address: MSTU "Stankin"
address: 3a, Vadkovsky per.
address: 101472 Moscow
address: Russia
remarks: phone: +7 095 9731056
phone: +7 495 9731056
remarks: fax-no: +7 095 9733952
fax-no: +7 495 9733952
e-mail: MSutyagin at stankin.ru
nic-hdl: MVS53-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes
person: Alexander E Rodionov
address: MSTU "Stankin"
address: 3a, Vadkovsky per.
address: 101472 Moscow
address: Russia
remarks: phone: +7 095 9733398
phone: +7 495 9733398
remarks: fax-no: +7 095 9733952
fax-no: +7 495 9733952
e-mail: ARodionov at stankin.ru
nic-hdl: AER2-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes
% Information related to '82.179.0.0/16AS3267'
route: 82.179.0.0/16
descr: RUNNet
descr: Russian Federal University Network
origin: AS3267
mnt-by: RUNNET-MNT
source: RIPE # Filtered
The raw message forwarded to me follows:
------------------------------------------------------------------------
Return-Path: <sec at firstclassmoving.com>
Received: from sound ([82.179.84.180])
by anthem.async.com.br (8.13.4/8.13.4/Debian-3ubuntu0.1) with SMTP id
kB6ARg6h012377
for <kiko at ASYNC-MUNGED-ME>; Wed, 6 Dec 2006 08:28:41 -0200
Message-Id: <200612061028.kB6ARg6h012377 at anthem.async.com.br>
Received: (qmail 3490 invoked by uid 0); Wed, 6 Dec 2006 13:29:25 -0000)
Received: from unknown (HELO qun) (192.168.1.24)
by 192.168.1.49 with SMTP; Wed, 6 Dec 2006 13:29:25 -0000
Date: Wed, 6 Dec 2006 13:20:25 +0300
From: sec at firstclassmoving.com
To: kiko at ASYNC-MUNGED-ME
Subject: Mail server report.
X-Spambayes-Classification: unsure; 0.51
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=utf-8
Dear Sir/Madam,
We have logged a fraud activity from the IP-address belonging to your
computer at more than 17 Web-sites and have received abuses
from several companies.
The abuse copy is sent as an attachment to this letter. Please learn this.
We have added our utilite that would help you to find and remove any spyware from your PC.
If you were not lucky using another software, please try this one.
Yours faithfully
Steven Cooper
More information about the Spam
mailing list