An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
ab...@juntadeandalucia.es, postmas...@juntadeandalucia.es
Message abstract:
Message ID: <200603200448.1flgZE6nu3Nl3...@mx-roseate.atl.sa.earthlink.net>
Originating IP address:
217.12.18.14 (14.zone-217.12.18.juntadeandalucia.es)
ASN: 34285
ASN Description: Sociedad Andaluza para el Desarrollo
CIDR: 217.12.16.0/20
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=34285
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?217.12.18.14
- SORBS Open Relay: Spam Received See: http://www.sorbs.net/lookup.shtml?217.12.18.14
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=217.1...
http://openrbl.org/lookup?i=217.12.18.14
http://groups.google.com/groups?scoring=d&q=217.12.18.14+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: andres.fernandez.balta...@juntadeandalucia.es, l...@sainco.abengoa.com
D: ab...@juntadeandalucia.es
WI:
AN: postmas...@juntadeandalucia.es
RD:
AA:
The following addresses are not reachable per remote query or
local experience:
IG:
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on request.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: : 1.44 $
Last updated: : 2006/02/23 14:17:44 $
---------------------------------------------------------------------
From notreply...@gmail.com Mon Mar 20 23:52:24 2006
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1FLH3Y-0008Si-00
for <karsten@localhost>; Mon, 20 Mar 2006 01:52:08 -0800
Status: U
Received: from popd.ix.netcom.com [209.86.93.119]
by localhost with POP3 (fetchmail-6.2.5.4)
for karsten@localhost (single-drop); Mon, 20 Mar 2006 01:52:08 -0800 (PST)
Received: from 14.zone-217.12.18.juntadeandalucia.es ([217.12.18.14])
by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1flgZE6nu3Nl34f0
for <kms...@ix.netcom.com>; Mon, 20 Mar 2006 04:48:09 -0500 (EST)
Received: from [200.2.196.104] (helo=User)
by mail.andaluciajunta.es with esmtpa (Exim 4.50)
id 1FLGos-0000Z2-BJ; Mon, 20 Mar 2006 10:37:00 +0100
Reply-To: <listadomailmarket...@yahoo.es>
From: "2.060.0000 CORREOS"<notreply...@gmail.com>
Subject: SOLO POR 3 DIAS $ 39.900. AUMENTE VENTAS HOY !!!
Date: Mon, 20 Mar 2006 05:47:26 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <200603200448.1flgZE6nu3Nl3...@mx-roseate.atl.sa.earthlink.net>
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
Lines: 43
X-SenderIP: 217.12.18.14
X-ASN: ASN-34285
X-CIDR: 217.12.16.0/20
X-Mozilla-Status: 0004
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
<FONT size=5 color=#FF0000 face="Impact"> SOLO POR 3 DIAS (20-21-22 DE MARZO)</FONT></DIV>
<DIV>
<FONT size=5 color=#FF0000 face="Impact"> PODEROSA HERRAMIENTA PUBLICITARIA</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Palace Script MT"> </FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">OFRECEMOS 2.060.000 CORREOS CHILENOS</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">ANTES $ 99.000</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">AHORA Y SOLO POR 3 DIAS </FONT><FONT size=5 color=#000080 face="Impact">$39.900</FONT></DIV>
<DIV>
<FONT color=#000000> </FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* SOFTWARE ENVIO MASIVO</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* 750.000 CORREOS PUNTOS CL</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* 470.000 SEGMENTADOS POR RUBROS</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* 2.060.000 CORREOS CHILENOS</FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">* MANUAL INSTRUCCIONES</FONT></DIV>
<DIV>
<FONT color=#000000> </FONT></DIV>
<DIV>
<FONT size=5 color=#000000 face="Impact">PARA MAS INFORMACION HAGA CLIC </FONT><A href="mailto:listadomailmarket...@yahoo.es"><FONT size=5 color=#0000FF face="Impact"><U>AQUI</U></FONT></A></DIV>
<DIV>
<FONT color=#000000> </FONT></DIV>
<DIV>
<FONT color=#000000> </FONT></DIV>
<DIV>
<FONT size=1 color=#000000 face="Impact">SI QUIERE SER REMOVIDO RESPONDA ESTE EMAIL CON EL ASUNTO REMOVER</FONT></DIV>
<DIV>
<FONT color=#000000> </FONT></DIV>
</FONT>
</BODY></HTML>
---------------------------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/
|
