ここ１ヶ月ほど、一生懸命スパムレポートを提出し続けた甲斐あって、別トピックで既に報告させて頂いた microsoft を始め、幾つかコレクションができましたので、受領証公開用のトピックを立てさせて頂きました。
ホスト、担当者別の対応の違いのご参考になればと思います。
先ずは、国内最大手の@nifty。映画の違法コピーDVD（英語）のスパムでした。
−−−−−−−−−−−−−−−−−−−−−−−−−−−
Date: Fri, 3 Jun 2005 10:37:08 +0900
From: @niftyお問い合わせ窓口 <inquiry@nifty.com>
To: ****@gmail.com
In-Reply-To: <20050603****.****@gmail.com>
Subject: ご連絡の件について(受付番号：spc_22 3230)
X-FJICB-Reception-ID: spc_223230
Content-Type: text/plain; charset=iso-2022-jp
Message-ID: <20050603****.****.sys00380@nifty.com>
お客様
以下の日時に富士通「abuse@web.ad.jp 」の窓口宛てにご連絡いただきまし
た、アット・ニフティのネットワークより送信された迷惑メールの件について、
また、同報にてご連絡いただいた件も併せてアット・ニフティ メールサポー
トセンターより回答させていただきます。
----------------------------------------------------------
Date: Fri, 3 Jun 2005 01:36:56 +0900 (同時刻:2通)
----------------------------------------------------------
今回ご連絡いただいた迷惑メールについては、情報収集・調査の上、アット・
ニフティのアカウントを特定できた場合には、@nifty会員規約に基づき、対応
させていただきます。
※対応後の報告は行っておりません。あらかじめ、ご了承ください。
ご連絡いただきありがとうございました。今後ともアット・ニフティをよろ
しくお願いいたします。
ニフティ株式会社
ホスト、担当者別の対応の違いのご参考になればと思います。
先ずは、国内最大手の@nifty。映画の違法コピーDVD（英語）のスパムでした。
−−−−−−−−−−−−−−−−−−−−−−−−−−−
Date: Fri, 3 Jun 2005 10:37:08 +0900
From: @niftyお問い合わせ窓口 <inquiry@nifty.com>
To: ****@gmail.com
In-Reply-To: <20050603****.****@gmail.com>
Subject: ご連絡の件について(受付番号：spc_22 3230)
X-FJICB-Reception-ID: spc_223230
Content-Type: text/plain; charset=iso-2022-jp
Message-ID: <20050603****.****.sys00380@nifty.com>
お客様
以下の日時に富士通「abuse@web.ad.jp 」の窓口宛てにご連絡いただきまし
た、アット・ニフティのネットワークより送信された迷惑メールの件について、
また、同報にてご連絡いただいた件も併せてアット・ニフティ メールサポー
トセンターより回答させていただきます。
----------------------------------------------------------
Date: Fri, 3 Jun 2005 01:36:56 +0900 (同時刻:2通)
----------------------------------------------------------
今回ご連絡いただいた迷惑メールについては、情報収集・調査の上、アット・
ニフティのアカウントを特定できた場合には、@nifty会員規約に基づき、対応
させていただきます。
※対応後の報告は行っておりません。あらかじめ、ご了承ください。
ご連絡いただきありがとうございました。今後ともアット・ニフティをよろ
しくお願いいたします。
ニフティ株式会社
|
|
|
|
コメント(55)
RoadRunner.com は、TIME WARNER - AOL の１ブランド。Warner Bros. の"Looney Tunes" でお馴染み、ワイリー・コヨーテ君と沙漠で追っかけっこを展開するロードランナー君がイメージキャラクターです。
ダイヤルアップだけで簡単にメール送信可能な仮会員になれるためか、数年前まではスパム界の雄でした。今回はエロスパム報告に対する自動返信。
−−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from email-out-01.biz.rr.com (email-out-01.biz.rr.com [24.30.203.209])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of abuse@rr.com designates 24.30.203.209 as permitted sender)
Received: from herkanapp01 (herkanapp01.ops.rr.com [24.30.204.203])
by email-out-01.biz.rr.com (8.12.10/8.12.10) with ESMTP id ****
for <akuben@gmail.com>; Mon, 16 May 2005 23:27:21 -0400 (EDT)
Message-ID: <****.JavaMail.svckana@herkanapp01>
From: Road Runner Abuse <abuse@rr.com>
To: **** <****@gmail.com>
x-mailer: KANA Response 7.6.1.43
*************************************************************
==DO NOT REPLY DIRECTLY TO THIS MESSAGE==
==ROAD RUNNER WILL NOT SEE ANY REPLY SENT TO THIS MESSAGE==
*************************************************************
This is an automatic reply to confirm that your message has been
received by Road Runner Security (abuse@rr.com) describing an incident
of alleged service abuse. You will only receive this message once per
day.
All complaints regarding Earthlink High Speed Users (*.mindspring.com)
should be directed to abuse@abuse.earthlink.net - Road Runner DOES NOT
handle abuse issues dealing with Earthlink customers.
If you are a Road Runner subscriber, writing to complain about spam sent
*TO* your Road Runner account, please visit
http://security.rr.com/help.htm
************************************************************************
****
* If your message contains obscenities, abusive, or threatening language
*
* directed at our abuse staff, it will be discarded without further
action.*
* Please remember that the people who read complaints at this address
are *
* working to assist you with addressing your issue - RR Security
*
************************************************************************
****
If you sent your message to an address other than
abuse/security/fraud@rr.com, please be aware that your message was
automatically forwarded to our centralized location at the address
abuse@rr.com. You may wish to use abuse@rr.com, security@rr.com, or
fraud@rr.com for all future issues.
Road Runner is dedicated to ensuring that its service is used in a
manner that is consistent with the policies set forth in its Terms of
Service Agreement and Acceptable Use Policy, a copy of which can be
found at http://security.rr.com. Road Runner takes all reported abuse
complaints seriously, and will handle them in accordance with the above
policies in a timely and efficient manner. Should we require further
information regarding your complaint, we will contact you.
Please note, although it is not always possible for us to provide a
direct human response to your complaint, we do investigate *all*
complaints. As such, please do not interpret a lack of response as a
lack of action taken. If we find that a customer is in violation of our
policies, we will take the necessary action to stop the activity in
question.
Thank you for taking the time to contact Road Runner.
ダイヤルアップだけで簡単にメール送信可能な仮会員になれるためか、数年前まではスパム界の雄でした。今回はエロスパム報告に対する自動返信。
−−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from email-out-01.biz.rr.com (email-out-01.biz.rr.com [24.30.203.209])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of abuse@rr.com designates 24.30.203.209 as permitted sender)
Received: from herkanapp01 (herkanapp01.ops.rr.com [24.30.204.203])
by email-out-01.biz.rr.com (8.12.10/8.12.10) with ESMTP id ****
for <akuben@gmail.com>; Mon, 16 May 2005 23:27:21 -0400 (EDT)
Message-ID: <****.JavaMail.svckana@herkanapp01>
From: Road Runner Abuse <abuse@rr.com>
To: **** <****@gmail.com>
x-mailer: KANA Response 7.6.1.43
*************************************************************
==DO NOT REPLY DIRECTLY TO THIS MESSAGE==
==ROAD RUNNER WILL NOT SEE ANY REPLY SENT TO THIS MESSAGE==
*************************************************************
This is an automatic reply to confirm that your message has been
received by Road Runner Security (abuse@rr.com) describing an incident
of alleged service abuse. You will only receive this message once per
day.
All complaints regarding Earthlink High Speed Users (*.mindspring.com)
should be directed to abuse@abuse.earthlink.net - Road Runner DOES NOT
handle abuse issues dealing with Earthlink customers.
If you are a Road Runner subscriber, writing to complain about spam sent
*TO* your Road Runner account, please visit
http://security.rr.com/help.htm
************************************************************************
****
* If your message contains obscenities, abusive, or threatening language
*
* directed at our abuse staff, it will be discarded without further
action.*
* Please remember that the people who read complaints at this address
are *
* working to assist you with addressing your issue - RR Security
*
************************************************************************
****
If you sent your message to an address other than
abuse/security/fraud@rr.com, please be aware that your message was
automatically forwarded to our centralized location at the address
abuse@rr.com. You may wish to use abuse@rr.com, security@rr.com, or
fraud@rr.com for all future issues.
Road Runner is dedicated to ensuring that its service is used in a
manner that is consistent with the policies set forth in its Terms of
Service Agreement and Acceptable Use Policy, a copy of which can be
found at http://security.rr.com. Road Runner takes all reported abuse
complaints seriously, and will handle them in accordance with the above
policies in a timely and efficient manner. Should we require further
information regarding your complaint, we will contact you.
Please note, although it is not always possible for us to provide a
direct human response to your complaint, we do investigate *all*
complaints. As such, please do not interpret a lack of response as a
lack of action taken. If we find that a customer is in violation of our
policies, we will take the necessary action to stop the activity in
question.
Thank you for taking the time to contact Road Runner.
Comcast は最大手プロバイダにして、スパム発信源としても最大手。RoadRunner.com 等と同様に、証拠を残さずダイヤルアップで簡単に仮会員になれる事が、人気(?)の秘訣のようです。
"abuse-noreply" 名義で、常に紋切り型の自動返答。「ウチに文句言って来ないで、spamcop でも使え」と言わんばかりの文面ですし、本気でスパム対策をしている痕跡も見えません。
−−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from sccrmxc20.comcast.net (sccrmxc20.comcast.net [204.127.202.100])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of abuse-noreply@comcast.net designates 204.127.202.100 as permitted sender)
Received: from sccrmxc20.comcast.net (localhost[127.0.0.1])
by sccrmxc20.comcast.net (sccrmxc20) with ESMTP
id ****
X-Originating-IP: [127.0.0.1]
From: <abuse-noreply@comcast.net>
To: ****@gmail.com
Subject: Re: Fwd: is it really that hard to do?
In-Reply-To: <****@mail.gmail.com>
Auto-Submitted: auto-replied
This is an automated reply to the submission of your network abuse incident.
Please take time to read it carefully because it provides insight to your
reported incident and future submissions to the Comcast Network Abuse Team.
First, we would like to thank you for bringing this matter to our attention.
We take network abuse very seriously within the Comcast domain and we
apologize for any inconvenience this has caused you. Due to the large number
of complaints we receive, we may not be able to respond to you again
regarding this incident. However, Comcast investigates each reported
incident of Abuse and we will take all appropriate action to warn, suspend,
and/or terminate a subscriber that has violated Comcast's Acceptable Use
Policy or Terms of Service. To view our Acceptable Use Policy, please click
on the Terms of Service link at www.comcast.net and then click on the link
for the Acceptable Use Policy.
Second, when reporting a network abuse incident to the Network Abuse Team
you must follow the submission guidelines below to expedite the
investigation process. If you fail to follow these guidelines your request
may not be processed or a delay may occur. We process these requests on a
First-In-First-Out basis; prioritized by the level of network abuse a
customer is experiencing. Also, please do not submit more then one request
per network abuse incident. This will ensure that each occurrence is
addressed in the most efficient manner possible.
Network Abuse Submission Guidelines
1.Provide a brief, general description of the network abuse incident.
2.Include all logs or information relevant to the incident, ensure the logs
your submitting contain:
a.Date of incident
b.Time of incident and time zone
c.Source Internet protocol (IP) address or host name
d.Destination IP address or host name
e.Destination port
3.For e-mail abuse i.e. Spam, include full-unmodified header information and
content of the email. Header information is a requirement for reporting
e-mail abuse. Without the header information, the Abuse Team cannot
determine the true originator of the e-mail and no action will be taken. If
you are unsure how to extract a full-unmodified header, please visit
http://spamcop.net/fom-serve/cache/19.html for instructions to support your
mail client.
4.For alleged off topic (non-spam) or commercial Usenet postings, we also
need full un-modified headers of the Usenet posting including the body of
the offending message. If you are unsure how to view the full-unmodified
headers of the Usenet post, consult the help section of your newsreader
software or your news provider.
In closing, Comcast cannot investigate an incident of network abuse without
the information requested above. Also, Comcast only investigates incidents
of network abuse regarding Comcast subscribers. Non-subscribers should be
reported to their appropriate ISP for network abuse resolution. Please be
advised that Comcast does not disclose personally identifiable information
about our subscribers except as may be required or permitted by law or
authorized by our subscribers. As a result, information pertaining to
particular subscriber(s) or specific actions taken in regard to Abuse
complaints may not be disclosed. However, Comcast is committed to
identifying alleged offenders and taking all appropriate action to ensure
compliance with our Acceptable Use Policy and other Terms of Service.
Sincerely,
The Comcast Network Abuse and Observance Team
"abuse-noreply" 名義で、常に紋切り型の自動返答。「ウチに文句言って来ないで、spamcop でも使え」と言わんばかりの文面ですし、本気でスパム対策をしている痕跡も見えません。
−−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from sccrmxc20.comcast.net (sccrmxc20.comcast.net [204.127.202.100])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of abuse-noreply@comcast.net designates 204.127.202.100 as permitted sender)
Received: from sccrmxc20.comcast.net (localhost[127.0.0.1])
by sccrmxc20.comcast.net (sccrmxc20) with ESMTP
id ****
X-Originating-IP: [127.0.0.1]
From: <abuse-noreply@comcast.net>
To: ****@gmail.com
Subject: Re: Fwd: is it really that hard to do?
In-Reply-To: <****@mail.gmail.com>
Auto-Submitted: auto-replied
This is an automated reply to the submission of your network abuse incident.
Please take time to read it carefully because it provides insight to your
reported incident and future submissions to the Comcast Network Abuse Team.
First, we would like to thank you for bringing this matter to our attention.
We take network abuse very seriously within the Comcast domain and we
apologize for any inconvenience this has caused you. Due to the large number
of complaints we receive, we may not be able to respond to you again
regarding this incident. However, Comcast investigates each reported
incident of Abuse and we will take all appropriate action to warn, suspend,
and/or terminate a subscriber that has violated Comcast's Acceptable Use
Policy or Terms of Service. To view our Acceptable Use Policy, please click
on the Terms of Service link at www.comcast.net and then click on the link
for the Acceptable Use Policy.
Second, when reporting a network abuse incident to the Network Abuse Team
you must follow the submission guidelines below to expedite the
investigation process. If you fail to follow these guidelines your request
may not be processed or a delay may occur. We process these requests on a
First-In-First-Out basis; prioritized by the level of network abuse a
customer is experiencing. Also, please do not submit more then one request
per network abuse incident. This will ensure that each occurrence is
addressed in the most efficient manner possible.
Network Abuse Submission Guidelines
1.Provide a brief, general description of the network abuse incident.
2.Include all logs or information relevant to the incident, ensure the logs
your submitting contain:
a.Date of incident
b.Time of incident and time zone
c.Source Internet protocol (IP) address or host name
d.Destination IP address or host name
e.Destination port
3.For e-mail abuse i.e. Spam, include full-unmodified header information and
content of the email. Header information is a requirement for reporting
e-mail abuse. Without the header information, the Abuse Team cannot
determine the true originator of the e-mail and no action will be taken. If
you are unsure how to extract a full-unmodified header, please visit
http://spamcop.net/fom-serve/cache/19.html for instructions to support your
mail client.
4.For alleged off topic (non-spam) or commercial Usenet postings, we also
need full un-modified headers of the Usenet posting including the body of
the offending message. If you are unsure how to view the full-unmodified
headers of the Usenet post, consult the help section of your newsreader
software or your news provider.
In closing, Comcast cannot investigate an incident of network abuse without
the information requested above. Also, Comcast only investigates incidents
of network abuse regarding Comcast subscribers. Non-subscribers should be
reported to their appropriate ISP for network abuse resolution. Please be
advised that Comcast does not disclose personally identifiable information
about our subscribers except as may be required or permitted by law or
authorized by our subscribers. As a result, information pertaining to
particular subscriber(s) or specific actions taken in regard to Abuse
complaints may not be disclosed. However, Comcast is committed to
identifying alleged offenders and taking all appropriate action to ensure
compliance with our Acceptable Use Policy and other Terms of Service.
Sincerely,
The Comcast Network Abuse and Observance Team
フランス・テレコム系プロバイダ、wanadoo からの定型文の自動返答。"Precedence: junk" とある通り、ユーザーからの報告をバカにしている姿勢がありあり。
"wanna do ?"（米俗語）です。仏人って、実は米語好きなんじゃないかと思える節が多々あります。英語ではないところがミソ。
−−−−−−−−−−−−−−−−−−−−−−
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf0201.wanadoo.fr (SMTP Server) with ESMTP id ****
Received: from adm-rt1 (unknown [10.234.12.150])
by mwinf0201.wanadoo.fr (SMTP Server) with ESMTP id ****
X-ME-UUID: 20050514****@mwinf0201.wanadoo.fr
Received: from localhost (abuse-front2-di1-a.wanadoo.fr [10.234.19.84])
by adm-rt1 (Postfix) with ESMTP id ****
To: ****@gmail.com
From: abuse@wanadoo.fr
Subject: : [Wanadoo] =?ISO-8859-1?Q?Fwd:_ClAL=EDS_V=C11iUM_Vl=C0GRRA?=
Message-ID: <20050514_****.abuse@wanadoo.fr>
Precedence: junk
-----------
CECI EST UNE REPONSE AUTOMATIQUE MERCI DE NE PAS Y REPONDRE
-----------
(English version below)
Bonjour,
Nous vous confirmons la bonne re'ception de votre courrier et nous nous efforc,ons de donner une suite favorable a` votre reque^te dans les meilleurs de'lais.
Nous avons besoin des e'le'ments suivants pour investiguer :
- nature de l'incident et toutes informations supple'mentaires pertinentes (soyez tre`s PRECIS)
- date et heure GMT
- adresse IP a` l'origine de la plainte.
- en-te^te complet du message incrimine' le cas e'che'ant
Les plaintes incomple`tes ne pourront e^tre prises en conside'ration Nous ne traitons aucunes pie`ces jointes, merci d'en extraire les principaux e'le'ments qui nous permettront d'effectuer les recherches.
Nous vous rappelons que nous ne pouvons prendre en compte que les agissements e'manants de nos clients.
Pour savoir comment identifier le ve'ritable expe'diteur d'un message vous pouvez consulter notre assistance en cliquant sur le lien suivant :
http://assistance.wanadoo.fr/reponse207.asp
Cordialement
Service Abuse Wanadoo
Liens utiles :
" Comment de'sactiver le partage de fichiers Windows "
---> http://assistance.wanadoo.fr/reponse505.asp
Outil de diagnostic viral en ligne
--> http://www.securitoo.com/top10
Outil d'analyse de vulne'rabilite' de votre PC
--> http://assistance.wanadoo.fr/reponse508.asp
---------------------------------------------------------------------
This is an automated response, do not please reply
---------------------------------------------------------------------
Dear Sir or Madam,
We will do our best to answer to your request as soon as possible.
However, please be advised that incomplete complaints can't be taken into consideration.
If your mail has a file attached, please extract the information from it which will enable us to conduct our investigation.
Be advised that we do not open attachments. Make sure that your request contains the following elements :
- Nature of the incident and any relevant information (please be very PRECISE)
- Date and time of the incident (time zone)
- IP adress you are complaining about (in case of spam mail issue, make sure your request contains full header).
If you would like to identify the real sender of a mail, you can find some help on the following web site
http://assistance.wanadoo.fr/reponse207.asp
Regards
Wanadoo Abuse Service
Free online virus scan : http://www.securitoo.com/top10
"wanna do ?"（米俗語）です。仏人って、実は米語好きなんじゃないかと思える節が多々あります。英語ではないところがミソ。
−−−−−−−−−−−−−−−−−−−−−−
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf0201.wanadoo.fr (SMTP Server) with ESMTP id ****
Received: from adm-rt1 (unknown [10.234.12.150])
by mwinf0201.wanadoo.fr (SMTP Server) with ESMTP id ****
X-ME-UUID: 20050514****@mwinf0201.wanadoo.fr
Received: from localhost (abuse-front2-di1-a.wanadoo.fr [10.234.19.84])
by adm-rt1 (Postfix) with ESMTP id ****
To: ****@gmail.com
From: abuse@wanadoo.fr
Subject: : [Wanadoo] =?ISO-8859-1?Q?Fwd:_ClAL=EDS_V=C11iUM_Vl=C0GRRA?=
Message-ID: <20050514_****.abuse@wanadoo.fr>
Precedence: junk
-----------
CECI EST UNE REPONSE AUTOMATIQUE MERCI DE NE PAS Y REPONDRE
-----------
(English version below)
Bonjour,
Nous vous confirmons la bonne re'ception de votre courrier et nous nous efforc,ons de donner une suite favorable a` votre reque^te dans les meilleurs de'lais.
Nous avons besoin des e'le'ments suivants pour investiguer :
- nature de l'incident et toutes informations supple'mentaires pertinentes (soyez tre`s PRECIS)
- date et heure GMT
- adresse IP a` l'origine de la plainte.
- en-te^te complet du message incrimine' le cas e'che'ant
Les plaintes incomple`tes ne pourront e^tre prises en conside'ration Nous ne traitons aucunes pie`ces jointes, merci d'en extraire les principaux e'le'ments qui nous permettront d'effectuer les recherches.
Nous vous rappelons que nous ne pouvons prendre en compte que les agissements e'manants de nos clients.
Pour savoir comment identifier le ve'ritable expe'diteur d'un message vous pouvez consulter notre assistance en cliquant sur le lien suivant :
http://assistance.wanadoo.fr/reponse207.asp
Cordialement
Service Abuse Wanadoo
Liens utiles :
" Comment de'sactiver le partage de fichiers Windows "
---> http://assistance.wanadoo.fr/reponse505.asp
Outil de diagnostic viral en ligne
--> http://www.securitoo.com/top10
Outil d'analyse de vulne'rabilite' de votre PC
--> http://assistance.wanadoo.fr/reponse508.asp
---------------------------------------------------------------------
This is an automated response, do not please reply
---------------------------------------------------------------------
Dear Sir or Madam,
We will do our best to answer to your request as soon as possible.
However, please be advised that incomplete complaints can't be taken into consideration.
If your mail has a file attached, please extract the information from it which will enable us to conduct our investigation.
Be advised that we do not open attachments. Make sure that your request contains the following elements :
- Nature of the incident and any relevant information (please be very PRECISE)
- Date and time of the incident (time zone)
- IP adress you are complaining about (in case of spam mail issue, make sure your request contains full header).
If you would like to identify the real sender of a mail, you can find some help on the following web site
http://assistance.wanadoo.fr/reponse207.asp
Regards
Wanadoo Abuse Service
Free online virus scan : http://www.securitoo.com/top10
米大手プロバイダ、ベライズンからの自動返答。abuse だけでなく、違法性の強いスパムに関しては security team にも連絡しています。「スパムレポートが一杯届くので、個別に応対し切れない」とか言って逃げ腰ですが、そこは MSN グループですから、隠密部隊は精鋭揃いでしょう。
−−−−−−−−−−−−−−−−−−−−−−−−
Received: from vms049pub.verizon.net (vms049pub.verizon.net [206.46.252.49])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of designates 206.46.252.49 as permitted sender)
Received: from process-daemon.vms049.mailsrvcs.net by vms049.mailsrvcs.net
(Sun Java System Messaging Server 6.2 HotFix 0.04 (built Dec 24 2004)) id ****
Received: from vms049.mailsrvcs.net
(Sun Java System Messaging Server 6.2 HotFix 0.04 (built Dec 24 2004)) id ****
07 May 2005 22:08:47 -0500 (CDT)
From: security@verizon.net
Subject: Automatic Reply
To: ****@gmail.com
Auto-submitted: auto-replied
Thank you for your email message to Verizon Online Security.
This is an automated response, in order to confirm the receipt of your report and to provide you with some additional general information. We understand that in some cases this general information may not pertain to your specific report, but please rest assured your message will be reviewed and investigated.
We apologize for any inconvenience the reported incident has caused you. Because we receive a large number of complaints each day, regretfully, a response to each message is not possible. If additional information is required in order to complete our investigation, we will contact you regarding this information.
Verizon Online Security investigates each reported incident, and will take the a
ppropriate action as permitted by Verizon's Internet Access Agreement and Acceptable Use Policy, which can be viewed at the website listed at the end of this message.
Additionally, you may find the following pertinent information beneficial:
If you are reporting an unauthorized access attempt, please note that we cannot take action if the offender is not a Verizon Online Customer. These reports will need to be sent directly to the Internet Service Provider/IP space owner used by the offender.
The following web site may be helpful in determining the owner of the originating IP space:
http://www.arin.net/whois
Sincerely,
Verizon Online Security
http://www2.verizon.net/policies
http://www.verizon.net/security
security@verizon.net
−−−−−−−−−−−−−−−−−−−−−−−−
Received: from mta010.verizon.net (mta010pub.verizon.net [206.46.170.83])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of designates 206.46.170.83 as permitted sender)
Subject: Re: Fwd: Tue, 10 May 2005 11:48:39 -0800
To: ****@gmail.com
From: "Auto-reply from abuse@verizon.net" <abuse@verizon.net>
Precedence: bulk
Thank you for your E-mail message to Verizon Online Abuse.
This is an automated response, in order to confirm the receipt of your report and to provide you with some additional general information. We understand that in some cases this general information may not pertain to your specific report, but please rest assured your message will be reviewed and investigated.
We apologize for any inconvenience the reported incident has caused you. Because we receive a large number of complaints each day, regretfully, a response to each message is not possible. If additional information is required in order to complete our investigation, we will contact you regarding this information.
Verizon Online Security investigates each reported incident, and will take the appropriate action as permitted by Verizon's Internet Access Agreement and Acceptable Use Policy, which can be viewed at the website listed below.
Additionally, you may find the following pertinent information beneficial:
To better understand the problems with Unsolicited Commercial E-mail ("spam"), we have provided information about filtering Spam with your e-mail software, answers to several frequently asked questions and links to some useful online information about Spam:
http://www2.verizon.net/announcements/spam.asp
http://www2.verizon.net/contact/spam.asp
If you are reporting an unauthorized access attempt, please note that we cannot take action if the offender is not a Verizon Online Customer. These reports will need to be sent directly to the Internet Service Provider/IP space owner used by the offender.
The following web site may be helpful in determining the owner of the originating IP space: http://www.arin.net/whois
Additionally, for faster routing, security related issues such as hacking, port probes, scans, and other similar issues may be delivered directly to: security@verizon.net .
Sincerely,
Verizon Online Abuse
http://www2.verizon.net/policies
abuse@verizon.net
−−−−−−−−−−−−−−−−−−−−−−−−
Received: from vms049pub.verizon.net (vms049pub.verizon.net [206.46.252.49])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of designates 206.46.252.49 as permitted sender)
Received: from process-daemon.vms049.mailsrvcs.net by vms049.mailsrvcs.net
(Sun Java System Messaging Server 6.2 HotFix 0.04 (built Dec 24 2004)) id ****
Received: from vms049.mailsrvcs.net
(Sun Java System Messaging Server 6.2 HotFix 0.04 (built Dec 24 2004)) id ****
07 May 2005 22:08:47 -0500 (CDT)
From: security@verizon.net
Subject: Automatic Reply
To: ****@gmail.com
Auto-submitted: auto-replied
Thank you for your email message to Verizon Online Security.
This is an automated response, in order to confirm the receipt of your report and to provide you with some additional general information. We understand that in some cases this general information may not pertain to your specific report, but please rest assured your message will be reviewed and investigated.
We apologize for any inconvenience the reported incident has caused you. Because we receive a large number of complaints each day, regretfully, a response to each message is not possible. If additional information is required in order to complete our investigation, we will contact you regarding this information.
Verizon Online Security investigates each reported incident, and will take the a
ppropriate action as permitted by Verizon's Internet Access Agreement and Acceptable Use Policy, which can be viewed at the website listed at the end of this message.
Additionally, you may find the following pertinent information beneficial:
If you are reporting an unauthorized access attempt, please note that we cannot take action if the offender is not a Verizon Online Customer. These reports will need to be sent directly to the Internet Service Provider/IP space owner used by the offender.
The following web site may be helpful in determining the owner of the originating IP space:
http://www.arin.net/whois
Sincerely,
Verizon Online Security
http://www2.verizon.net/policies
http://www.verizon.net/security
security@verizon.net
−−−−−−−−−−−−−−−−−−−−−−−−
Received: from mta010.verizon.net (mta010pub.verizon.net [206.46.170.83])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of designates 206.46.170.83 as permitted sender)
Subject: Re: Fwd: Tue, 10 May 2005 11:48:39 -0800
To: ****@gmail.com
From: "Auto-reply from abuse@verizon.net" <abuse@verizon.net>
Precedence: bulk
Thank you for your E-mail message to Verizon Online Abuse.
This is an automated response, in order to confirm the receipt of your report and to provide you with some additional general information. We understand that in some cases this general information may not pertain to your specific report, but please rest assured your message will be reviewed and investigated.
We apologize for any inconvenience the reported incident has caused you. Because we receive a large number of complaints each day, regretfully, a response to each message is not possible. If additional information is required in order to complete our investigation, we will contact you regarding this information.
Verizon Online Security investigates each reported incident, and will take the appropriate action as permitted by Verizon's Internet Access Agreement and Acceptable Use Policy, which can be viewed at the website listed below.
Additionally, you may find the following pertinent information beneficial:
To better understand the problems with Unsolicited Commercial E-mail ("spam"), we have provided information about filtering Spam with your e-mail software, answers to several frequently asked questions and links to some useful online information about Spam:
http://www2.verizon.net/announcements/spam.asp
http://www2.verizon.net/contact/spam.asp
If you are reporting an unauthorized access attempt, please note that we cannot take action if the offender is not a Verizon Online Customer. These reports will need to be sent directly to the Internet Service Provider/IP space owner used by the offender.
The following web site may be helpful in determining the owner of the originating IP space: http://www.arin.net/whois
Additionally, for faster routing, security related issues such as hacking, port probes, scans, and other similar issues may be delivered directly to: security@verizon.net .
Sincerely,
Verizon Online Abuse
http://www2.verizon.net/policies
abuse@verizon.net
オランダのプロバイダ、その２。ここからのスパムは一度切りなので、きちんと対処してくれたんでしょうか。
−−−−−−−−−−−−−−−−−−−−−−−−
Received: from amsfep19-int.chello.nl (amsfep19-int.chello.nl [213.46.243.20])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of designates 213.46.243.20 as permitted sender)
Subject: Re: Fwd: Whats happening,, B u y all your meds here ,, . caravan cabinetry
From: "Auto-reply from abuse@chello.nl" <abuse@chello.nl>
Precedence: bulk
Message-ID: <****.amsfep19-int.chello.nl@amsfep19-int>
[English version follows Dutch text]
#### DIT IS EEN AUTOMATISCH ANTWOORD ####
Hartelijk dank voor uw melding naar <abuse@chello.nl>. Bij deze bevestigen wij dat uw e-mail is ontvangen. Merk op dat u mogelijk geen persoonlijk antwoord van ons ontvangt. Alle meldingen zullen echter zorgvuldig worden onderzocht, mits ze goed gedocumenteerd zijn.
Om meldingen goed te kunnen onderzoeken en te behandelen hebben wij alle beschikbare informatie nodig. Als u ons deze nog niet hebt toegestuurd dan verzoeken wij u ons deze alsnog toe te sturen. Alleen op deze manier is het voor ons mogelijk een melding goed te onderzoeken. Alle meldingen met ontbrekende of onjuiste informatie zullen zonder tegenbericht worden verwijderd en dus niet in behandeling worden genomen.
=== poortscans en inbraakpogingen ===
In het geval van poortscans of inbraak(pogingen) gelieve ons zoveel mogelijk informatie te sturen zoals bijvoorbeeld de relevante stukken logfiles van uw firewall. Deze logfiles dienen tenminste de volgende gegevens te bevatten:
- de datum waarop de activiteit waarover u melding maakt heeft plaatsgevonden
- het exacte tijdstip waarop de activiteit heeft plaatsgevonden
- het IP adres en poortnummer vanaf waar de aanval afkomstig was
- het IP adres en poortnummer waaraan de aanval gericht was
- het gebruikte protocol
Alleen meldingen afkomstig van UPC/chello IP adressen kunnen in behandeling worden genomen. Zie het overzicht van de UPC/chello IP reeksen verderop in deze e-mail onder de kop 'ongewenste e-mail of usenetberichten'.
U kunt de meldingen van sommige merken firewalls ook automatisch (anoniem) laten rapporteren door middel van het programma MyNetWatchman (http://www.mynetwatchman.com)
=== ongewenste e-mail of usenetberichten ===
In het geval van e-mail of usenetspam gelieve ons de volledige header en inhoud van het bericht toe te sturen. Een volledige header bevat altijd tenminste een regel met de tekst 'Received' en een of meerdere IP adressen. Deze regels bevatten belangrijke informatie en worden NIET standaard meegestuurd als u de Forward of Doorsturen optie van uw e-mailprogramma gebruikt.
Op http://spamcop.net/fom-serve/cache/19.html vindt u meer informatie over hoe u deze headers kunt vinden en kunt kopie"ren.
Het IP-adres dat vlak boven het afzendadres staat laat zien vanaf welke provider het bericht verzonden is. Begint op z'n minst een van de adressen met de volgende cijfers:
- 24.132.x.x
- 62.108.x.x
- 62.163.x.x
- 62.194.x.x
- 62.195.x.x
- 80.56.x.x
- 80.57.x.x
- 84.119.x.x
- 212.83.x.x
- 212.187.x.x
- 213.46.x.x
- 213.93.x.x
dan betreft het een IP adres van UPC/chello en kunt u uw bericht aan ons toesturen. Betreft het een ander adres dan kunnen wij uw melding helaas niet in behandeling nemen omdat het adres niet onder ons beheer valt. U kunt dan via een van onderstaande adressen de juiste provider achterhalen:
http://www.ripe.net/perl/whois
http://www.arin.net/whois/index.html
http://www.apnic.net/search/index.html
http://lacnic.net/cgi-bin/lacnic/whois
http://www.afrinic.net/cgi-bin/whois
Indien u twijfelt aan de herkomst van een e-mailbericht dan kunt u het gratis laten analyseren door de online dienst SpamCop (http://spamcop.net). Via deze service kunt u uw e-mailbericht (anoniem) laten doorsturen aan de juiste provider(s) van de verzender.
Wij verzoeken u vriendelijk, doch dringend:
- GEEN meerdere berichten over hetzelfde onderwerp te sturen.
- GEEN meerdere klachten in een enkel e-mailbericht te sturen.
- GEEN complete logfiles sturen. Alleen de regels over het betreffende IP adres zijn voldoende. (zie in de voorgaande tekst welke IP adressen onder ons beheer vallen)
- GEEN bestanden (attachments) mee te sturen en dus ook:
- GEEN screenshots van meldingen van uw firewall te sturen.
- GEEN opgemaakte tekst te sturen. (Microsoft Word, Microsoft Excel documenten etc.)
- GEEN traceroutes of WHOIS/RIPE lookups te sturen. Deze dragen niet bij aan het onderzoek omdat zij verder geen concrete informatie bevatten en derhalve niet in behandeling kunnen worden genomen.
- GEEN klachten over ongewenste e-mailberichten op uw @chello.nl-adres te sturen die niet voldoen aan bovengenoemde criteria. U kunt deze berichten tegen te gaan door ze te melden aan de juiste provider via bijvoorbeeld SpamCop of ze te laten filteren door een programma zoals MailWasher (http://www.mailwasher.net)
Abuse behandelt GEEN klachten en/of vragen over de beperking van uw snelheid als gevolg van uw datagebruik. In de rubriek veelgestelde vragen, op www.upc.nl vindt u meer informatie over datagebruik en limieten.
Indien u vragen heeft over de snelheidsbeperking die niet via www.upc.nl beantwoord worden kunt u uw vraag via http://qmail.upc.nl aan ons doorgeven.
[English version]
#### THIS IS AN AUTOMATED REPLY ####
Thank you for your notification to <abuse@chello.nl>. We hereby confirm that your email has been received. Please note that you may not receive a human response. However, all notifications will be investigated if properly documented.
To be able to process your email we need all available information. If you have not already done so, please send us all available information about the case you are reporting. Only with enough information it is possible for us to investigate an abuse case. All notifications with missing or incorrect information will be deleted without prior notice and will not be further investigated.
=== portscans and hackattempts ===
In case of portscans or hackattempts please send us as much information as possible. Logfile lines from your firewall are especially useful. Make sure these lines contain at least the following information:
- the date the activity took place
- the exact time the activity occured (including the timezone you are in)
- the source IP address and portnumber
- the destination IP address and portnumber
- the used protocol
Only attempts originating from the UPC/chello networks IP addresses can be processed. An overview of the UPC/chello IP ranges can be found at the 'mail- and usenetspam' part of this message.
The logfiles of some firewalls can automatically (and anonymously) be processed and send to the appropriate provider by use of the program MyNetWatchman (http://www.mynetwatchman.com)
=== mail- and/or usenetspam ===
In case of email or usenetspam please send us the full header and content of the message. A full header contains at least one line with the text 'Received' in it. The lines contain important information and won't be send automatically by using the Forward button in your emailclient.
At http://spamcop.net/fom-serve/cache/19.html you can find more information about finding and copying these headers.
The IP-address just above the From: address shows from which provider the message originates. If one, of at least one of the IP addresses start with:
- 24.132.x.x
- 62.108.x.x
- 62.163.x.x
- 62.194.x.x
- 62.195.x.x
- 80.56.x.x
- 80.57.x.x
- 84.119.x.x
- 212.83.x.x
- 212.187.x.x
- 213.46.x.x
- 213.93.x.x
it is an IP address that is owned by UPC/chello and you can send us your message. If it is another IP address then unfortunately we can't help you because we don't own the IP address. You can try one of the addresses below to find the right ISP:
http://www.ripe.net/perl/whois
http://www.arin.net/whois/index.html
http://www.apnic.net/search/index.html
http://lacnic.net/cgi-bin/lacnic/whois
http://www.afrinic.net/cgi-bin/whois
In case of doubt you can analyze your e-mailmessage for free by using the online services of SpamCop (http://spamcop.net). It can also forward the message anonymously to the appropriate provider(s).
- DO NOT send us multiple notifications about the same issue
- DO NOT send us different complaints in one emailmessage.
- DO NOT send us full logfiles. Only the lines about the IP address your complaint is about are sufficient. (see the text above about which IP addresses are owned by us)
- DO NOT send us any attachments
- DO NOT send us any documents (Microsoft Word, Microsoft Excel etc.)
- DO NOT send us any traceroutes or WHOIS/RIPE lookups. These do not contribute to the investigation because they do not contain any relevant information and therefore can not be processed.
- DO NOT send us complaints about spam received at your @chello.nl address that do not meet the criteria mentioned above. You can prevent these messages by submitting them to SpamCop or by filtering them by using a program like MailWasher (http://www.mailwasher.net)
−−−−−−−−−−−−−−−−−−−−−−−−
Received: from amsfep19-int.chello.nl (amsfep19-int.chello.nl [213.46.243.20])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of designates 213.46.243.20 as permitted sender)
Subject: Re: Fwd: Whats happening,, B u y all your meds here ,, . caravan cabinetry
From: "Auto-reply from abuse@chello.nl" <abuse@chello.nl>
Precedence: bulk
Message-ID: <****.amsfep19-int.chello.nl@amsfep19-int>
[English version follows Dutch text]
#### DIT IS EEN AUTOMATISCH ANTWOORD ####
Hartelijk dank voor uw melding naar <abuse@chello.nl>. Bij deze bevestigen wij dat uw e-mail is ontvangen. Merk op dat u mogelijk geen persoonlijk antwoord van ons ontvangt. Alle meldingen zullen echter zorgvuldig worden onderzocht, mits ze goed gedocumenteerd zijn.
Om meldingen goed te kunnen onderzoeken en te behandelen hebben wij alle beschikbare informatie nodig. Als u ons deze nog niet hebt toegestuurd dan verzoeken wij u ons deze alsnog toe te sturen. Alleen op deze manier is het voor ons mogelijk een melding goed te onderzoeken. Alle meldingen met ontbrekende of onjuiste informatie zullen zonder tegenbericht worden verwijderd en dus niet in behandeling worden genomen.
=== poortscans en inbraakpogingen ===
In het geval van poortscans of inbraak(pogingen) gelieve ons zoveel mogelijk informatie te sturen zoals bijvoorbeeld de relevante stukken logfiles van uw firewall. Deze logfiles dienen tenminste de volgende gegevens te bevatten:
- de datum waarop de activiteit waarover u melding maakt heeft plaatsgevonden
- het exacte tijdstip waarop de activiteit heeft plaatsgevonden
- het IP adres en poortnummer vanaf waar de aanval afkomstig was
- het IP adres en poortnummer waaraan de aanval gericht was
- het gebruikte protocol
Alleen meldingen afkomstig van UPC/chello IP adressen kunnen in behandeling worden genomen. Zie het overzicht van de UPC/chello IP reeksen verderop in deze e-mail onder de kop 'ongewenste e-mail of usenetberichten'.
U kunt de meldingen van sommige merken firewalls ook automatisch (anoniem) laten rapporteren door middel van het programma MyNetWatchman (http://www.mynetwatchman.com)
=== ongewenste e-mail of usenetberichten ===
In het geval van e-mail of usenetspam gelieve ons de volledige header en inhoud van het bericht toe te sturen. Een volledige header bevat altijd tenminste een regel met de tekst 'Received' en een of meerdere IP adressen. Deze regels bevatten belangrijke informatie en worden NIET standaard meegestuurd als u de Forward of Doorsturen optie van uw e-mailprogramma gebruikt.
Op http://spamcop.net/fom-serve/cache/19.html vindt u meer informatie over hoe u deze headers kunt vinden en kunt kopie"ren.
Het IP-adres dat vlak boven het afzendadres staat laat zien vanaf welke provider het bericht verzonden is. Begint op z'n minst een van de adressen met de volgende cijfers:
- 24.132.x.x
- 62.108.x.x
- 62.163.x.x
- 62.194.x.x
- 62.195.x.x
- 80.56.x.x
- 80.57.x.x
- 84.119.x.x
- 212.83.x.x
- 212.187.x.x
- 213.46.x.x
- 213.93.x.x
dan betreft het een IP adres van UPC/chello en kunt u uw bericht aan ons toesturen. Betreft het een ander adres dan kunnen wij uw melding helaas niet in behandeling nemen omdat het adres niet onder ons beheer valt. U kunt dan via een van onderstaande adressen de juiste provider achterhalen:
http://www.ripe.net/perl/whois
http://www.arin.net/whois/index.html
http://www.apnic.net/search/index.html
http://lacnic.net/cgi-bin/lacnic/whois
http://www.afrinic.net/cgi-bin/whois
Indien u twijfelt aan de herkomst van een e-mailbericht dan kunt u het gratis laten analyseren door de online dienst SpamCop (http://spamcop.net). Via deze service kunt u uw e-mailbericht (anoniem) laten doorsturen aan de juiste provider(s) van de verzender.
Wij verzoeken u vriendelijk, doch dringend:
- GEEN meerdere berichten over hetzelfde onderwerp te sturen.
- GEEN meerdere klachten in een enkel e-mailbericht te sturen.
- GEEN complete logfiles sturen. Alleen de regels over het betreffende IP adres zijn voldoende. (zie in de voorgaande tekst welke IP adressen onder ons beheer vallen)
- GEEN bestanden (attachments) mee te sturen en dus ook:
- GEEN screenshots van meldingen van uw firewall te sturen.
- GEEN opgemaakte tekst te sturen. (Microsoft Word, Microsoft Excel documenten etc.)
- GEEN traceroutes of WHOIS/RIPE lookups te sturen. Deze dragen niet bij aan het onderzoek omdat zij verder geen concrete informatie bevatten en derhalve niet in behandeling kunnen worden genomen.
- GEEN klachten over ongewenste e-mailberichten op uw @chello.nl-adres te sturen die niet voldoen aan bovengenoemde criteria. U kunt deze berichten tegen te gaan door ze te melden aan de juiste provider via bijvoorbeeld SpamCop of ze te laten filteren door een programma zoals MailWasher (http://www.mailwasher.net)
Abuse behandelt GEEN klachten en/of vragen over de beperking van uw snelheid als gevolg van uw datagebruik. In de rubriek veelgestelde vragen, op www.upc.nl vindt u meer informatie over datagebruik en limieten.
Indien u vragen heeft over de snelheidsbeperking die niet via www.upc.nl beantwoord worden kunt u uw vraag via http://qmail.upc.nl aan ons doorgeven.
[English version]
#### THIS IS AN AUTOMATED REPLY ####
Thank you for your notification to <abuse@chello.nl>. We hereby confirm that your email has been received. Please note that you may not receive a human response. However, all notifications will be investigated if properly documented.
To be able to process your email we need all available information. If you have not already done so, please send us all available information about the case you are reporting. Only with enough information it is possible for us to investigate an abuse case. All notifications with missing or incorrect information will be deleted without prior notice and will not be further investigated.
=== portscans and hackattempts ===
In case of portscans or hackattempts please send us as much information as possible. Logfile lines from your firewall are especially useful. Make sure these lines contain at least the following information:
- the date the activity took place
- the exact time the activity occured (including the timezone you are in)
- the source IP address and portnumber
- the destination IP address and portnumber
- the used protocol
Only attempts originating from the UPC/chello networks IP addresses can be processed. An overview of the UPC/chello IP ranges can be found at the 'mail- and usenetspam' part of this message.
The logfiles of some firewalls can automatically (and anonymously) be processed and send to the appropriate provider by use of the program MyNetWatchman (http://www.mynetwatchman.com)
=== mail- and/or usenetspam ===
In case of email or usenetspam please send us the full header and content of the message. A full header contains at least one line with the text 'Received' in it. The lines contain important information and won't be send automatically by using the Forward button in your emailclient.
At http://spamcop.net/fom-serve/cache/19.html you can find more information about finding and copying these headers.
The IP-address just above the From: address shows from which provider the message originates. If one, of at least one of the IP addresses start with:
- 24.132.x.x
- 62.108.x.x
- 62.163.x.x
- 62.194.x.x
- 62.195.x.x
- 80.56.x.x
- 80.57.x.x
- 84.119.x.x
- 212.83.x.x
- 212.187.x.x
- 213.46.x.x
- 213.93.x.x
it is an IP address that is owned by UPC/chello and you can send us your message. If it is another IP address then unfortunately we can't help you because we don't own the IP address. You can try one of the addresses below to find the right ISP:
http://www.ripe.net/perl/whois
http://www.arin.net/whois/index.html
http://www.apnic.net/search/index.html
http://lacnic.net/cgi-bin/lacnic/whois
http://www.afrinic.net/cgi-bin/whois
In case of doubt you can analyze your e-mailmessage for free by using the online services of SpamCop (http://spamcop.net). It can also forward the message anonymously to the appropriate provider(s).
- DO NOT send us multiple notifications about the same issue
- DO NOT send us different complaints in one emailmessage.
- DO NOT send us full logfiles. Only the lines about the IP address your complaint is about are sufficient. (see the text above about which IP addresses are owned by us)
- DO NOT send us any attachments
- DO NOT send us any documents (Microsoft Word, Microsoft Excel etc.)
- DO NOT send us any traceroutes or WHOIS/RIPE lookups. These do not contribute to the investigation because they do not contain any relevant information and therefore can not be processed.
- DO NOT send us complaints about spam received at your @chello.nl address that do not meet the criteria mentioned above. You can prevent these messages by submitting them to SpamCop or by filtering them by using a program like MailWasher (http://www.mailwasher.net)
フランスの無料プロバイダ、http://www.free.fr/ (http://www.proxad.net/) から。自動応答とはいえ、一応受付番号付き。
某国の freebit や livedoor など、無料プロバイダは不可避的に犯罪の温床化しますね。
−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from rtabuse-a.free.fr (rtabuse-a.free.fr [213.228.0.84])
by postfix4-2.free.fr (Postfix) with ESMTP id ****
Received: by rtabuse-a.free.fr (Postfix, from userid 33) id ****
Subject: [rt-abuse.free.fr #1492154] AutoReply: Fwd: Get the 100% safe and natural alternative to Viagra!
From: "Service Abuse Free via RT" <abuse@rt-abuse.free.fr>
Reply-To: abuse@rt-abuse.free.fr
Message-ID: <****@rt-abuse.free.fr>
Precedence: bulk
X-RT-Loop-Prevention: rt-abuse.free.fr
RT-Ticket: rt-abuse.free.fr #1492154
Managed-by: RT 3.0.6 (http://www.bestpractical.com/rt/)
*** French answer *** (english below)
Bonjour,
Ce message est envoye' automatiquement suite au mail que vous avez
adresse' au service Abuse
"Fwd: Get the 100% safe and natural alternative to Viagra!",
Vous n'avez pas besoin de re'pondre a` ce message maintenant.
Nous avons attribue' le nume'ro d'identification [rt-abuse.free.fr #1492154]
a` votre demande.
Merci d'ajouter la mention (en incluant les crochets):
[rt-abuse.free.fr #1492154].
dans le sujet des prochaines correspondances que vous pourriez nous
adresser sur ce sujet.
Veuillez ve'rifier que vous avez bien fournis toutes les informations dont nous
pourrions avoir besoin pour pouvoir traiter votre demande (nature de votre
demande, dates et leurs fuseaux horaires, entetes des messages concerne's ou
logs, etc.)
Merci.
Le Service Abuse
<abuse@proxad.net>
*** English answer ***
Greetings,
This message has been automatically generated in response to the
creation of a trouble ticket regarding:
"Fwd: Get the 100% safe and natural alternative to Viagra!",
a summary of which appears below.
There is no need to reply to this message right now. Your ticket has been
assigned an ID of [rt-abuse.free.fr #1492154].
Please include the string:
[rt-abuse.free.fr #1492154]
in the subject line of all future correspondence about this issue. To do so,
you may reply to this message.
Please check you have included all informations we need to investigate your
request (request object, dates & timezones, messages headers or logs, etc.)
Thank you,
Abuse team
<abuse@proxad.net>
某国の freebit や livedoor など、無料プロバイダは不可避的に犯罪の温床化しますね。
−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from rtabuse-a.free.fr (rtabuse-a.free.fr [213.228.0.84])
by postfix4-2.free.fr (Postfix) with ESMTP id ****
Received: by rtabuse-a.free.fr (Postfix, from userid 33) id ****
Subject: [rt-abuse.free.fr #1492154] AutoReply: Fwd: Get the 100% safe and natural alternative to Viagra!
From: "Service Abuse Free via RT" <abuse@rt-abuse.free.fr>
Reply-To: abuse@rt-abuse.free.fr
Message-ID: <****@rt-abuse.free.fr>
Precedence: bulk
X-RT-Loop-Prevention: rt-abuse.free.fr
RT-Ticket: rt-abuse.free.fr #1492154
Managed-by: RT 3.0.6 (http://www.bestpractical.com/rt/)
*** French answer *** (english below)
Bonjour,
Ce message est envoye' automatiquement suite au mail que vous avez
adresse' au service Abuse
"Fwd: Get the 100% safe and natural alternative to Viagra!",
Vous n'avez pas besoin de re'pondre a` ce message maintenant.
Nous avons attribue' le nume'ro d'identification [rt-abuse.free.fr #1492154]
a` votre demande.
Merci d'ajouter la mention (en incluant les crochets):
[rt-abuse.free.fr #1492154].
dans le sujet des prochaines correspondances que vous pourriez nous
adresser sur ce sujet.
Veuillez ve'rifier que vous avez bien fournis toutes les informations dont nous
pourrions avoir besoin pour pouvoir traiter votre demande (nature de votre
demande, dates et leurs fuseaux horaires, entetes des messages concerne's ou
logs, etc.)
Merci.
Le Service Abuse
<abuse@proxad.net>
*** English answer ***
Greetings,
This message has been automatically generated in response to the
creation of a trouble ticket regarding:
"Fwd: Get the 100% safe and natural alternative to Viagra!",
a summary of which appears below.
There is no need to reply to this message right now. Your ticket has been
assigned an ID of [rt-abuse.free.fr #1492154].
Please include the string:
[rt-abuse.free.fr #1492154]
in the subject line of all future correspondence about this issue. To do so,
you may reply to this message.
Please check you have included all informations we need to investigate your
request (request object, dates & timezones, messages headers or logs, etc.)
Thank you,
Abuse team
<abuse@proxad.net>
皆さまご存知の、世界最悪級のスパミングホスト、韓国ハナロ通信。リンク先の違法サイトのホスティングまで担当することも数知れず。
余りに腹立たしいので、HP に載っていた社長の顔を晒すことにしました。
http://www.hanaro.com/eng/other/spam.asp
こんな ↑ 立派な宣言までしておきながら、返事が届いたのは１度だけ。
−−−−−−−−−−−−−−−−−−−−−−
Received: from wmail.hanaro.com (wmail.hanaro.com [211.58.57.10])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of abuse@hanaro.com designates 211.58.57.10 as permitted sender)
Date: Mon, 23 May 2005 19:19:16 -0700 (PDT)
Received: from [210.94.0.250] ([210.94.0.250])
by wmail.hanaro.com ([211.58.57.10])
with ESMTP id ****
Received: from [221.139.14.3] (abuse@hanaro.com) by
nmail.hanaro.com (Terrace Internet Messaging Server)
with ESMTP id ****
Message-ID: <****.JavaMail.csagent@HAMS>
From: abuse@hanaro.com
To: ****@gmail.com
Subject: Re]Fwd: Oh my god! Can't belive this
X-TERRACE-SPAMMARK: NO (SR:13.08) (by Terrace)
Thank you for your report. We received your spam report and are now in the process of taking care of it. Hanaro Telecom, Inc. will warn those who transmitted spam mail contrary to the Article 50 of "Act on Protection of Information and Promotion of Information Communication Network" not to send spam mail any more. If a spammer does not stop sending spam mail, Hanaro Telecom, Inc. will report spam mail transmitter to the related authorities and look into legal action to compensate for the mental and physical damage.
[Related Provisions of Laws and Regulations]
- Article 50 of the Act on Protection of Information and Promotion of Information and Communication Network
(Restriction on Transmission of Advertisement Information) -
(1) Anyone cannot transmit the profit-based advertisement information contrary to the expressed opinion of a recipient not to receive such mails.
(2) Those who want to transmit the profit-based advertisement information by e-mail under the regulation of the Article, they should indicate in such e-mails information on as in each of the following subparagraphs as specified by the enforcement regulation of the "Information and Communication Act".
1. Purpose of transmission and main contents
2. Name and contact information of transmitter(or sender), etc.
3. Matters related to the opinion of denying further reception
※ for more information, please refer to the Antispam Policy of Hanaro Telecom, Inc on website (http://www.hanaro.com)
※ We can’t manage the reports for a Spam Mail sent to a wrong mail accout.
So you should report to abuse@hanaro.com
余りに腹立たしいので、HP に載っていた社長の顔を晒すことにしました。
http://www.hanaro.com/eng/other/spam.asp
こんな ↑ 立派な宣言までしておきながら、返事が届いたのは１度だけ。
−−−−−−−−−−−−−−−−−−−−−−
Received: from wmail.hanaro.com (wmail.hanaro.com [211.58.57.10])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of abuse@hanaro.com designates 211.58.57.10 as permitted sender)
Date: Mon, 23 May 2005 19:19:16 -0700 (PDT)
Received: from [210.94.0.250] ([210.94.0.250])
by wmail.hanaro.com ([211.58.57.10])
with ESMTP id ****
Received: from [221.139.14.3] (abuse@hanaro.com) by
nmail.hanaro.com (Terrace Internet Messaging Server)
with ESMTP id ****
Message-ID: <****.JavaMail.csagent@HAMS>
From: abuse@hanaro.com
To: ****@gmail.com
Subject: Re]Fwd: Oh my god! Can't belive this
X-TERRACE-SPAMMARK: NO (SR:13.08) (by Terrace)
Thank you for your report. We received your spam report and are now in the process of taking care of it. Hanaro Telecom, Inc. will warn those who transmitted spam mail contrary to the Article 50 of "Act on Protection of Information and Promotion of Information Communication Network" not to send spam mail any more. If a spammer does not stop sending spam mail, Hanaro Telecom, Inc. will report spam mail transmitter to the related authorities and look into legal action to compensate for the mental and physical damage.
[Related Provisions of Laws and Regulations]
- Article 50 of the Act on Protection of Information and Promotion of Information and Communication Network
(Restriction on Transmission of Advertisement Information) -
(1) Anyone cannot transmit the profit-based advertisement information contrary to the expressed opinion of a recipient not to receive such mails.
(2) Those who want to transmit the profit-based advertisement information by e-mail under the regulation of the Article, they should indicate in such e-mails information on as in each of the following subparagraphs as specified by the enforcement regulation of the "Information and Communication Act".
1. Purpose of transmission and main contents
2. Name and contact information of transmitter(or sender), etc.
3. Matters related to the opinion of denying further reception
※ for more information, please refer to the Antispam Policy of Hanaro Telecom, Inc on website (http://www.hanaro.com)
※ We can’t manage the reports for a Spam Mail sent to a wrong mail accout.
So you should report to abuse@hanaro.com
まだまだ一杯あります：-）
スパム対応では、非常に評判の宜しくない我が国の OCN ですが、英語スパムに対して英語でレポートを書いたら、担当者の佐藤さんから英語で返事が届きました。
−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from osm.nttnavi.co.jp (cs.info.ocn.ne.jp [210.145.176.234])
by mx.gmail.com with ESMTP id ****
Received-SPF: neutral (gmail.com: 210.145.176.234 is neither permitted nor denied by domain of abuse@ocn.ad.jp)
Received: from localhost (unknown [192.168.10.20])
by osm.nttnavi.co.jp (Postfix) with SMTP
id ****
From: "OCN Customer Support" <abuse@ocn.ad.jp>
To: ****@gmail.com
Subject: Re: Fwd: Rolex Replica Leticia
Date: Thu, 19 May 2005 11:55:02 +0900
X-Sender: abuse@cs.info.ocn.ne.jp
Reply-To: abuse@ocn.ad.jp
In-Reply-To: <****@mail.gmail.com>
Message-Id: <20050519****.abuse@osd.cs.info.ocn.ne.jp>
X-Mailer: Kyoyu@Mail2 version 1.0.0.3/1.0.0.3
Dear sir
Thank you for your email. We will take appropriate actions once
the identity is confirmed.
We apologize for any inconvenience caused by this incident. We
appreciate your patience and understanding on this matter.
Thank you.
Sato
-----
OCN Customer Support Center /Sato
NTT Communications Corp.
E-mail：abuse@ocn.ad.jp
http://www.ocn.ne.jp/english/index-s0.html (OCN Homepage)
スパム対応では、非常に評判の宜しくない我が国の OCN ですが、英語スパムに対して英語でレポートを書いたら、担当者の佐藤さんから英語で返事が届きました。
−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from osm.nttnavi.co.jp (cs.info.ocn.ne.jp [210.145.176.234])
by mx.gmail.com with ESMTP id ****
Received-SPF: neutral (gmail.com: 210.145.176.234 is neither permitted nor denied by domain of abuse@ocn.ad.jp)
Received: from localhost (unknown [192.168.10.20])
by osm.nttnavi.co.jp (Postfix) with SMTP
id ****
From: "OCN Customer Support" <abuse@ocn.ad.jp>
To: ****@gmail.com
Subject: Re: Fwd: Rolex Replica Leticia
Date: Thu, 19 May 2005 11:55:02 +0900
X-Sender: abuse@cs.info.ocn.ne.jp
Reply-To: abuse@ocn.ad.jp
In-Reply-To: <****@mail.gmail.com>
Message-Id: <20050519****.abuse@osd.cs.info.ocn.ne.jp>
X-Mailer: Kyoyu@Mail2 version 1.0.0.3/1.0.0.3
Dear sir
Thank you for your email. We will take appropriate actions once
the identity is confirmed.
We apologize for any inconvenience caused by this incident. We
appreciate your patience and understanding on this matter.
Thank you.
Sato
-----
OCN Customer Support Center /Sato
NTT Communications Corp.
E-mail：abuse@ocn.ad.jp
http://www.ocn.ne.jp/english/index-s0.html (OCN Homepage)
ベルギー"easynet"から、受理番号付自動返答。ここは連絡１発で迷惑メールが止まりました。「ベルギー人と日本人は気質が合う」と良く言われますが。
−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from imp.noc.be.easynet.net (imp.noc.be.easynet.net [212.100.160.39])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of rt@imp.noc.be.easynet.net designates 212.100.160.39 as permitted sender)
Received: from rt by imp.noc.be.easynet.net with local (Exim 4.50)
id ****
Subject: [Easynet Belgium Ticketing #46646] (abuse) Fwd: PharmacueticalProducts
Reply-To: Request Tracker <abuse@be.easynet.net>
From: Request Tracker <abuse@be.easynet.net>
To: ****@gmail.com
Cc:
X-Request-ID: 46646
X-RT-Loop-Prevention: Easynet Belgium Ticketing
X-Sender: _rt_system
Precedence: list
Message-Id: <****@imp.noc.be.easynet.net>
Sender: <rt@imp.noc.be.easynet.net>
Easynet Belgium Abuse Department
**************************************************
* This is an automated response containing *
* general information about Abuse reports. This *
* is not intended as an answer to your question. *
* Please do not reply to this message. *
**************************************************
Thank you for contacting the Easynet Belgium Abuse Department.
This message has been automatically generated in response to your
message regarding "Fwd: PharmacueticalProducts"; it has been assigned a ticket ID of [Easynet Belgium Ticketing # 1234567].
Please read the following information below for future reference.
We have certain guidelines and 'acceptable use' policies to which all
members are bound. Anytime a member fails to follow these provisions
and guidelines, their account will be dealt with as defined in the
policy guidelines:
http://www.easynet.be/library/documents/easynet-aup-uk.pdf
Complaints Regarding Spam:
--------------------------
Please check to make sure that you included the full "received headers"
when you sent us a copy of the e-mail message in question. You may need to
select a "Show All Headers" option in your e-mail software in order to
include the full received headers. (You can tell whether they are included
by looking for lines that begin with the word "Received:" in the header
lines at the top of the message.) Please understand that without the full
received headers, we are unable to process a complaint.
Also, remember not to reply to any spam or electronic chain letters
you receive, since replying may result in your being added to more
spam mailing lists.
Complaints Regarding Port Scans, Hacking Attempts, or Illegal Activity of
Our Network Connections and/or Ports:
-------------------------------------
Please check to make sure you have included all possible logs you may have
regarding the intruder. Accurate logs consist of the IP address of the
intruder, the exact time the event(s) occured, and the time zone at which
you are in. If you have any problems obtaining logs from your software,
please contact the proper software vendor technicians.
We apologize for any inconvenience which may have been caused by this
incident. Rest assured that we take reports and complaints very seriously
and will do everything possible to identify and handle those who choose to
violate our policy.
Easynet Belgium Abuse Team
abuse@be.easynet.net
-------------------------------------------- Managed by Request Tracker
−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from imp.noc.be.easynet.net (imp.noc.be.easynet.net [212.100.160.39])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of rt@imp.noc.be.easynet.net designates 212.100.160.39 as permitted sender)
Received: from rt by imp.noc.be.easynet.net with local (Exim 4.50)
id ****
Subject: [Easynet Belgium Ticketing #46646] (abuse) Fwd: PharmacueticalProducts
Reply-To: Request Tracker <abuse@be.easynet.net>
From: Request Tracker <abuse@be.easynet.net>
To: ****@gmail.com
Cc:
X-Request-ID: 46646
X-RT-Loop-Prevention: Easynet Belgium Ticketing
X-Sender: _rt_system
Precedence: list
Message-Id: <****@imp.noc.be.easynet.net>
Sender: <rt@imp.noc.be.easynet.net>
Easynet Belgium Abuse Department
**************************************************
* This is an automated response containing *
* general information about Abuse reports. This *
* is not intended as an answer to your question. *
* Please do not reply to this message. *
**************************************************
Thank you for contacting the Easynet Belgium Abuse Department.
This message has been automatically generated in response to your
message regarding "Fwd: PharmacueticalProducts"; it has been assigned a ticket ID of [Easynet Belgium Ticketing # 1234567].
Please read the following information below for future reference.
We have certain guidelines and 'acceptable use' policies to which all
members are bound. Anytime a member fails to follow these provisions
and guidelines, their account will be dealt with as defined in the
policy guidelines:
http://www.easynet.be/library/documents/easynet-aup-uk.pdf
Complaints Regarding Spam:
--------------------------
Please check to make sure that you included the full "received headers"
when you sent us a copy of the e-mail message in question. You may need to
select a "Show All Headers" option in your e-mail software in order to
include the full received headers. (You can tell whether they are included
by looking for lines that begin with the word "Received:" in the header
lines at the top of the message.) Please understand that without the full
received headers, we are unable to process a complaint.
Also, remember not to reply to any spam or electronic chain letters
you receive, since replying may result in your being added to more
spam mailing lists.
Complaints Regarding Port Scans, Hacking Attempts, or Illegal Activity of
Our Network Connections and/or Ports:
-------------------------------------
Please check to make sure you have included all possible logs you may have
regarding the intruder. Accurate logs consist of the IP address of the
intruder, the exact time the event(s) occured, and the time zone at which
you are in. If you have any problems obtaining logs from your software,
please contact the proper software vendor technicians.
We apologize for any inconvenience which may have been caused by this
incident. Rest assured that we take reports and complaints very seriously
and will do everything possible to identify and handle those who choose to
violate our policy.
Easynet Belgium Abuse Team
abuse@be.easynet.net
-------------------------------------------- Managed by Request Tracker
臺灣・數位聯合電信 (seed.net.tw) より、担当者名入りの完全ベリ。繁體字(Big 5)部分は、mixi のシステムでは多分化けているでしょう。
−−−−−−−−−−−−−−−−−−−−−−−
Received: from party.seed.net.tw (party.seed.net.tw [139.175.255.99])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of abuse@seed.net.tw designates 139.175.255.99 as permitted sender)
Message-Id: <****@mx.gmail.com>
Received: from nh65-48.seed.net.tw ([192.168.65.48]:3266 helo=mail-iis)
by party.seed.net.tw with esmtp (Party Mail Server 4.41 #1)
Subject: Re:Fwd: Vla`GRA VA'L1UM Ci'AL1S
Sender: "^(o)o^��w?H1/2c" <abuse@seed.net.tw>
From: "^(o)o^��w?H1/2c" <abuse@seed.net.tw>
Date: Tue, 24 May 2005 16:08:52 +0800
To: "****" <****@gmail.com>
X-Priority: 3
X-MSMail-Priority: Normal
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Mailer: JMail 4.3.1 by Dimac
Content-Type: text/plain;
charset="BIG5"
您的來函編號{***1234567}
大兄您好，
數位聯合 謝謝您的來信，以下答覆您的疑問：
First we have to ask for your excuse.
We do pay much attention to the problems of
advertisers spreading spam mails,
and appreciate your notifying us.
We are now attentively dealing with this matter
according to the mail headings you’ve offered.
If the mails are from SEEDNet users,
we will suspend his user’s right immediately.
If they’re from downstream leased-line or ISP users,
we will tranfer the mail headings to the authorities concerned
and collaborate with them to solve the problem.
Here we sincerely offer our apology for all the troubles you’ve encountere
若是您還有其他相關的問題，歡迎您再跟我們聯絡。
http://support.seed.net.tw/FEEDBACK/feedback.php?id=ericchou
※ 原信請勿刪除，以利資料的比對。
---------------------------------------------------------
服務人員:ericchou
個人服務部 Consumer Service Dept.
數位聯合電信(股) Digital United Inc.
t:449-5000
f:(02)2659-6655
-----以下是您的來信內容-----
−−−−−−−−−−−−−−−−−−−−−−−
Received: from party.seed.net.tw (party.seed.net.tw [139.175.255.99])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: domain of abuse@seed.net.tw designates 139.175.255.99 as permitted sender)
Message-Id: <****@mx.gmail.com>
Received: from nh65-48.seed.net.tw ([192.168.65.48]:3266 helo=mail-iis)
by party.seed.net.tw with esmtp (Party Mail Server 4.41 #1)
Subject: Re:Fwd: Vla`GRA VA'L1UM Ci'AL1S
Sender: "^(o)o^��w?H1/2c" <abuse@seed.net.tw>
From: "^(o)o^��w?H1/2c" <abuse@seed.net.tw>
Date: Tue, 24 May 2005 16:08:52 +0800
To: "****" <****@gmail.com>
X-Priority: 3
X-MSMail-Priority: Normal
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Mailer: JMail 4.3.1 by Dimac
Content-Type: text/plain;
charset="BIG5"
您的來函編號{***1234567}
大兄您好，
數位聯合 謝謝您的來信，以下答覆您的疑問：
First we have to ask for your excuse.
We do pay much attention to the problems of
advertisers spreading spam mails,
and appreciate your notifying us.
We are now attentively dealing with this matter
according to the mail headings you’ve offered.
If the mails are from SEEDNet users,
we will suspend his user’s right immediately.
If they’re from downstream leased-line or ISP users,
we will tranfer the mail headings to the authorities concerned
and collaborate with them to solve the problem.
Here we sincerely offer our apology for all the troubles you’ve encountere
若是您還有其他相關的問題，歡迎您再跟我們聯絡。
http://support.seed.net.tw/FEEDBACK/feedback.php?id=ericchou
※ 原信請勿刪除，以利資料的比對。
---------------------------------------------------------
服務人員:ericchou
個人服務部 Consumer Service Dept.
數位聯合電信(股) Digital United Inc.
t:449-5000
f:(02)2659-6655
-----以下是您的來信內容-----
フランスの NOOS というプロバイダ。先ず仏語で自動返答、その後英仏併記の物と、いつも返事が２通来ます。
−−−−−−−−−−−−−−−−−−−−−−−−
その１．
Received: from mailgw3.noos.com (mailgw3.noos.com [195.132.2.195])
by mx.gmail.com with ESMTP id ****
Received-SPF: neutral (gmail.com: 195.132.2.195 is neither permitted nor denied by domain of securite@noos.fr)
Received: from localhost (unknown [127.0.0.1])
by mailgw3.noos.com (Microsoft Exchange) with ESMTP
Received: from BER10002.noos.com ([172.16.1.82])
by ber10009.noos.com (Lotus Domino Release 5.0.11)
Received: from strife2.noos.com ([172.16.1.14])
by BER10002.noos.com (Lotus Domino Release 5.0.11)
with ESMTP id ****
Received: from strife2.noos.com (localhost.localdomain [127.0.0.1])
by strife2.noos.com (8.13.1/8.13.1) with ESMTP id ****
Received: (from rtnoos@localhost)
by strife2.noos.com (8.13.1/8.13.1/Submit) id ****
Message-Id: <20050523****@strife2.noos.com>
X-Authentication-Warning: strife2.noos.com: rtnoos set sender to securite@noos.fr using -f
From: NOOS Abuse <abuse@noos.fr>
Reply-To: NOOS Abuse <abuse@noos.fr>
To: ****@gmail.com
Subject: [NOOS #623190] ABUSE REPORT
X-Request-ID: ****
X-Loop-Prevention: NOOS
Precedence: bulk
X-MIMETrack: Itemize by SMTP Server on BER10002/W/LC/SLE(Release 5.0.11 |July 24, 2002) at ****
Serialize by Router on BER10002/W/LC/SLE(Release 5.0.11 |July 24, 2002) at ****
Serialize complete at 23/05/2005 20:00:22,
Itemize by SMTP Server on BER10009/F/LC/SLE(Release 5.0.11 |July 24, 2002) at ****
Serialize by Router on BER10009/F/LC/SLE(Release 5.0.11 |July 24, 2002) at ****
Serialize complete at 23/05/2005 20:00:23
Madame, Monsieur,
Tout d'abord merci d'avoir contacte' abuse@noos.fr.
Ceci est une re'ponse automatique, pour vous confirmer la
cre'ation d'un nouveau ticket d'incident suite a` la re'ception par
la Cellule Abuse de votre email intitule'
ABUSE REPORT
La re'fe'rence d'identification et de suivi de ce ticket
d'incident est [NOOS #1234567]
-----------------------------------------------------------------
その２．
Madame, Monsieur,
Tout d'abord merci d'avoir contacte' abuse@noos.fr.
Ceci est une re'ponse automatique, pour vous confirmer la
cre'ation d'un nouveau ticket d'incident suite a` la re'ception par
la Cellule Abuse de votre email intitule'
ABUSE REPORT
La re'fe'rence d'identification et de suivi de ce ticket
d'incident est
[NOOS #1234567]
Nous vous prions d'inclure cette re'fe'rence dans le sujet de tout
e-mail que vous nous enverrez concernant l'incident que vous
e'voquez dans votre message.
Vous ne recevrez pas de re'ponse automatique pour les e-mails
ulte'rieurs en re'fe'rence au me^me incident.
Nous nous efforc,ons de donner suite a` votre message dans les
meilleurs de'lais.
Nous vous signalons que pour traiter une plainte, les
informations suivantes nous sont normalement ne'cessaires :
- date et heure de l'incident (pre'cisez la fiabilite' de cette
information)
- adresse IP origine de l'incident
- nature de l'incident et toute information supple'mentaire
relative a` l'incident (logs firewall, ente^tes (headers) des
mails, notamment ente^tes "Received"...)
- les impacts subis
- type de syste`me d'exploitation et d'outils de se'curite'
Afin d'ame'liorer le traitement des plaintes, nous vous
sugge'rons d'utiliser le formulaire en ligne :
http://securite.noos.fr/modules/abuse/
Cordialement,
Cellule Abuse - NOOS
abuse@noos.fr
-----------------------------------------------------------------
Madam, Sir,
First of all, thank you for having contacted abuse@noos.fr.
This is an automatic answer, confirming that a ticket has been
created following the receipt by the NOOS abuse team of your
e-mail entitled
ABUSE REPORT
The reference of the ticket is
[NOOS #1234567]
We ask you to include the above reference in the subject line of
all future correspondence concerning this ticket.
We inform you that in order to process a complaint, we need the
following information, where applicable:
- date and time of incident (please mention the timezone used and
the reliability of the timestamps)
- IP address having caused the incident
- type of incident and any information relevant to the incident
(firewall logs, mail headers with the Received lines . . .)
- the impact of the incident, if any
- type of operating system and security systems used
We will be handling your message as soon as possible.
Sincerely,
NOOS Abuse Team
abuse@noos.fr
−−−−−−−−−−−−−−−−−−−−−−−−
その１．
Received: from mailgw3.noos.com (mailgw3.noos.com [195.132.2.195])
by mx.gmail.com with ESMTP id ****
Received-SPF: neutral (gmail.com: 195.132.2.195 is neither permitted nor denied by domain of securite@noos.fr)
Received: from localhost (unknown [127.0.0.1])
by mailgw3.noos.com (Microsoft Exchange) with ESMTP
Received: from BER10002.noos.com ([172.16.1.82])
by ber10009.noos.com (Lotus Domino Release 5.0.11)
Received: from strife2.noos.com ([172.16.1.14])
by BER10002.noos.com (Lotus Domino Release 5.0.11)
with ESMTP id ****
Received: from strife2.noos.com (localhost.localdomain [127.0.0.1])
by strife2.noos.com (8.13.1/8.13.1) with ESMTP id ****
Received: (from rtnoos@localhost)
by strife2.noos.com (8.13.1/8.13.1/Submit) id ****
Message-Id: <20050523****@strife2.noos.com>
X-Authentication-Warning: strife2.noos.com: rtnoos set sender to securite@noos.fr using -f
From: NOOS Abuse <abuse@noos.fr>
Reply-To: NOOS Abuse <abuse@noos.fr>
To: ****@gmail.com
Subject: [NOOS #623190] ABUSE REPORT
X-Request-ID: ****
X-Loop-Prevention: NOOS
Precedence: bulk
X-MIMETrack: Itemize by SMTP Server on BER10002/W/LC/SLE(Release 5.0.11 |July 24, 2002) at ****
Serialize by Router on BER10002/W/LC/SLE(Release 5.0.11 |July 24, 2002) at ****
Serialize complete at 23/05/2005 20:00:22,
Itemize by SMTP Server on BER10009/F/LC/SLE(Release 5.0.11 |July 24, 2002) at ****
Serialize by Router on BER10009/F/LC/SLE(Release 5.0.11 |July 24, 2002) at ****
Serialize complete at 23/05/2005 20:00:23
Madame, Monsieur,
Tout d'abord merci d'avoir contacte' abuse@noos.fr.
Ceci est une re'ponse automatique, pour vous confirmer la
cre'ation d'un nouveau ticket d'incident suite a` la re'ception par
la Cellule Abuse de votre email intitule'
ABUSE REPORT
La re'fe'rence d'identification et de suivi de ce ticket
d'incident est [NOOS #1234567]
-----------------------------------------------------------------
その２．
Madame, Monsieur,
Tout d'abord merci d'avoir contacte' abuse@noos.fr.
Ceci est une re'ponse automatique, pour vous confirmer la
cre'ation d'un nouveau ticket d'incident suite a` la re'ception par
la Cellule Abuse de votre email intitule'
ABUSE REPORT
La re'fe'rence d'identification et de suivi de ce ticket
d'incident est
[NOOS #1234567]
Nous vous prions d'inclure cette re'fe'rence dans le sujet de tout
e-mail que vous nous enverrez concernant l'incident que vous
e'voquez dans votre message.
Vous ne recevrez pas de re'ponse automatique pour les e-mails
ulte'rieurs en re'fe'rence au me^me incident.
Nous nous efforc,ons de donner suite a` votre message dans les
meilleurs de'lais.
Nous vous signalons que pour traiter une plainte, les
informations suivantes nous sont normalement ne'cessaires :
- date et heure de l'incident (pre'cisez la fiabilite' de cette
information)
- adresse IP origine de l'incident
- nature de l'incident et toute information supple'mentaire
relative a` l'incident (logs firewall, ente^tes (headers) des
mails, notamment ente^tes "Received"...)
- les impacts subis
- type de syste`me d'exploitation et d'outils de se'curite'
Afin d'ame'liorer le traitement des plaintes, nous vous
sugge'rons d'utiliser le formulaire en ligne :
http://securite.noos.fr/modules/abuse/
Cordialement,
Cellule Abuse - NOOS
abuse@noos.fr
-----------------------------------------------------------------
Madam, Sir,
First of all, thank you for having contacted abuse@noos.fr.
This is an automatic answer, confirming that a ticket has been
created following the receipt by the NOOS abuse team of your
e-mail entitled
ABUSE REPORT
The reference of the ticket is
[NOOS #1234567]
We ask you to include the above reference in the subject line of
all future correspondence concerning this ticket.
We inform you that in order to process a complaint, we need the
following information, where applicable:
- date and time of incident (please mention the timezone used and
the reliability of the timestamps)
- IP address having caused the incident
- type of incident and any information relevant to the incident
(firewall logs, mail headers with the Received lines . . .)
- the impact of the incident, if any
- type of operating system and security systems used
We will be handling your message as soon as possible.
Sincerely,
NOOS Abuse Team
abuse@noos.fr
ブラジルの "embratel" から。受理番号付きですが、殆どポルトガル語。
−−−−−−−−−−−−−−−−−−−−−−
Received: from wks05.rjo.embratel.net.br (wks05.rjo.embratel.net.br [200.255.253.239])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of abuse-t@embratel.net.br designates 200.255.253.239 as permitted sender)
Received: from srv05.embratel.net.br (srv05.embratel.net.br [200.255.125.55])
by wks05.rjo.embratel.net.br (Postfix) with ESMTP id ****
Received: (from web@localhost)
by srv05.embratel.net.br (8.11.6/8.11.6/EBT) id ****
Date:
Message-Id: <20050523****@srv05.embratel.net.br>
X-Authentication-Warning: srv05.embratel.net.br: web set sender to abuse-t@embratel.net.br using -f
From: "Security-Embratel" <abuse@embratel.net.br>
To: ****@gmail.com
Subject: [Abuse-T #8451] [--] Fwd: Penis enlargement pills
Reply-To: noreply@embratel.net.br
X-Loop: WREQ 11
A Equipe de Seguranca Internet da EMBRATEL recebeu sua
notificacao < [--] Fwd: Penis enlargement pills >
e o "trouble ticket" <[Abuse #1234567]>
foi aberto para este incidente. Solicitamos que o
Assunto ("Subject") completo desta mensagem seja mantido
em qualquer referencia futura.
FAQ: Duvidas frequentes ao reportar ataques
http://www.nic.br/docs/faq1.html
####################################################
EMBRATEL Internet Security Team has received your
message < [--] Fwd: Penis enlargement pills >
and has openned the trouble ticket <[Abuse #1234567]>.
We would like to ask you to keep the SUBJECT of this
message in any future reference to this case.
####################################################
Caso nao tenha anexado a este e-mail o log deste
incidente, solicitamos inclui-lo no CORPO da mensagem
(formato texto), contendo o "time zone" do dispositivo
que o gerou.
******************************************************
Se voce e' usuario dos Servicos Internet da EMBRATEL e
suspeita de um ataque Denial Of Service, acione nossos
centros de atendimento a clientes atraves do
telefone: 0800-7010121.
******************************************************
Alertamos que, ao sermos informados de um incidente
(tendo como origem ou destino uma rede de cliente
Embratel), procuramos COLABORAR na investigacao,
identificando o administrador da rede de origem para
informa'-lo da ocorrencia. As acoes seguintes passam
a ser de inteira responsabilidade dos administradores
das redes envolvidas.
Qualquer acao (solucao de hardware, software e/ou
procedimentos operacionais) requerida para proteger
uma rede ligada a Internet devera' ser provida pelos
proprios administradores desta rede e/ ou terceiros
contratados para este fim (lembramos que a Embratel
presta este tipo de servico).
Recomendamos que nos proximos incidentes as notificacoes
sejam enviadas diretamente para os administradores da rede
de origem do ataque e com copia para o NBSO (nbso@nic.br)
e para a EMBRATEL (abuse@embratel.net.br).
Os sites abaixo sao boas referencias para encontrar contatos
de dominios e IPs:
- http://registro.br - FAPESP;
- http://whois.geektools.com/cgi-bin/proxy.cgi;
Atenciosamente,
Equipe de Seguranca
Gerencia de Operacoes Internet
EMBRATEL
−−−−−−−−−−−−−−−−−−−−−−
Received: from wks05.rjo.embratel.net.br (wks05.rjo.embratel.net.br [200.255.253.239])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of abuse-t@embratel.net.br designates 200.255.253.239 as permitted sender)
Received: from srv05.embratel.net.br (srv05.embratel.net.br [200.255.125.55])
by wks05.rjo.embratel.net.br (Postfix) with ESMTP id ****
Received: (from web@localhost)
by srv05.embratel.net.br (8.11.6/8.11.6/EBT) id ****
Date:
Message-Id: <20050523****@srv05.embratel.net.br>
X-Authentication-Warning: srv05.embratel.net.br: web set sender to abuse-t@embratel.net.br using -f
From: "Security-Embratel" <abuse@embratel.net.br>
To: ****@gmail.com
Subject: [Abuse-T #8451] [--] Fwd: Penis enlargement pills
Reply-To: noreply@embratel.net.br
X-Loop: WREQ 11
A Equipe de Seguranca Internet da EMBRATEL recebeu sua
notificacao < [--] Fwd: Penis enlargement pills >
e o "trouble ticket" <[Abuse #1234567]>
foi aberto para este incidente. Solicitamos que o
Assunto ("Subject") completo desta mensagem seja mantido
em qualquer referencia futura.
FAQ: Duvidas frequentes ao reportar ataques
http://www.nic.br/docs/faq1.html
####################################################
EMBRATEL Internet Security Team has received your
message < [--] Fwd: Penis enlargement pills >
and has openned the trouble ticket <[Abuse #1234567]>.
We would like to ask you to keep the SUBJECT of this
message in any future reference to this case.
####################################################
Caso nao tenha anexado a este e-mail o log deste
incidente, solicitamos inclui-lo no CORPO da mensagem
(formato texto), contendo o "time zone" do dispositivo
que o gerou.
******************************************************
Se voce e' usuario dos Servicos Internet da EMBRATEL e
suspeita de um ataque Denial Of Service, acione nossos
centros de atendimento a clientes atraves do
telefone: 0800-7010121.
******************************************************
Alertamos que, ao sermos informados de um incidente
(tendo como origem ou destino uma rede de cliente
Embratel), procuramos COLABORAR na investigacao,
identificando o administrador da rede de origem para
informa'-lo da ocorrencia. As acoes seguintes passam
a ser de inteira responsabilidade dos administradores
das redes envolvidas.
Qualquer acao (solucao de hardware, software e/ou
procedimentos operacionais) requerida para proteger
uma rede ligada a Internet devera' ser provida pelos
proprios administradores desta rede e/ ou terceiros
contratados para este fim (lembramos que a Embratel
presta este tipo de servico).
Recomendamos que nos proximos incidentes as notificacoes
sejam enviadas diretamente para os administradores da rede
de origem do ataque e com copia para o NBSO (nbso@nic.br)
e para a EMBRATEL (abuse@embratel.net.br).
Os sites abaixo sao boas referencias para encontrar contatos
de dominios e IPs:
- http://registro.br - FAPESP;
- http://whois.geektools.com/cgi-bin/proxy.cgi;
Atenciosamente,
Equipe de Seguranca
Gerencia de Operacoes Internet
EMBRATEL
臺灣の中華電々 (HiNet) から、これも受理番号付の自動返答。
『黒鮪饗宴』はスパムではありません。
−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−
Return-Path: <abuse@hinet.net?spam@ms1.hinet.net?cykang@ms1.hinet.net?vnsadm@hinet.net>
Received: from msr9.hinet.net (msr9.hinet.net [168.95.4.109])
by mx.gmail.com with ESMTP id ****
Received-SPF: fail
Received: from USER-9140D295E3 (203-69-169-98.HINET-IP.hinet.net [203.69.169.98] (may be forged))
by msr9.hinet.net (8.9.3/8.9.3) with SMTP id ****
Message-Id: <20050522****@msr9.hinet.net>
X-Priority: 3 (normal)
X-MSMail-Priority: Normal
X-Mailer: _-1890459046_ANSMTP_1560_
Importance: Normal
Date: Mon, 23 May 2005 6:22:08 +0800
Subject: =?iso-8859-1?b?U1BBTabbsMqmXqjn?=
To: "=?iso-8859-1?b?c3BhbWJsb2Nr?=" <akuben@gmail.com>
From: "=?iso-8859-1?b?U1BBTQ==?=" <abuse@hinet.net>, spam@ms1.hinet.net,
cykang@ms1.hinet.net, vnsadm@hinet.net
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: Quoted-Printable
敬啟者您好:
HiNet已於2005/5/23 上午 06:21:18 收到由台端所屬信箱****@gmail.com 寄送來的郵件，客服編號為{HN1234567}，在此特別感謝您為維護一個乾淨的網路空間所付出的心力與時間。
HiNet將依台端檢舉內容資訊作為處理之依據，若確屬HiNet 客戶所為，本公司將依據契約條款對該客戶所租用之帳號進行處理，處理結果將不另行回覆 。
若您有其他問題需要協助，請至 http://service.hinet.net/2004/ncsc/index.php?id={HN1234567}&mail=****@gmail.com
HiNet將儘速以E-mail的回覆方式為您服務， 若您使用outlook 郵件軟體收發郵件，且欲知阻擋廣告信的辦法，HiNet 建議您至下列網址--> http://service.hinet.net/2004/spam.htm
參考一種阻擋廣告信的入門方法，以暫收阻隔之效
中華電信 HiNet 客服中心 敬上
Dear Sir/Madam,
This is an auto generated message to inform you that your message sent from ****@gmail.com, ticket number {HN1234567} has been received at 2005/5/23 上午 06:21:18 . We would like to take this opportunity to thank you for your time and effort fighting spam activity with us. Please be informed that although we are not able to send you the spam report, the information you have provided in your email will be used to investigate the spam activity. Should the spam source prove to originate from a HiNet user, action will be taken in accordance with HiNet Acceptable Usage Policy and Terms of Service Agreement.
Please log on to http://service.hinet.net/2004/ncsc/spam_english.php?id={HN1234567}&mail=****@gmail.com, if you need more assistance.
HiNet will answer your inquiry by email as soon as possible. In addition, if you use Outlook to send/receive mail, HiNet suggests you to log on to http://service.hinet.net/2004/ncsc/spam_english.htm to view information about the basics of blocking spam mail. Thank you.
Regards,
HiNet Customer Service Center
『黒鮪饗宴』はスパムではありません。
−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−
Return-Path: <abuse@hinet.net?spam@ms1.hinet.net?cykang@ms1.hinet.net?vnsadm@hinet.net>
Received: from msr9.hinet.net (msr9.hinet.net [168.95.4.109])
by mx.gmail.com with ESMTP id ****
Received-SPF: fail
Received: from USER-9140D295E3 (203-69-169-98.HINET-IP.hinet.net [203.69.169.98] (may be forged))
by msr9.hinet.net (8.9.3/8.9.3) with SMTP id ****
Message-Id: <20050522****@msr9.hinet.net>
X-Priority: 3 (normal)
X-MSMail-Priority: Normal
X-Mailer: _-1890459046_ANSMTP_1560_
Importance: Normal
Date: Mon, 23 May 2005 6:22:08 +0800
Subject: =?iso-8859-1?b?U1BBTabbsMqmXqjn?=
To: "=?iso-8859-1?b?c3BhbWJsb2Nr?=" <akuben@gmail.com>
From: "=?iso-8859-1?b?U1BBTQ==?=" <abuse@hinet.net>, spam@ms1.hinet.net,
cykang@ms1.hinet.net, vnsadm@hinet.net
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: Quoted-Printable
敬啟者您好:
HiNet已於2005/5/23 上午 06:21:18 收到由台端所屬信箱****@gmail.com 寄送來的郵件，客服編號為{HN1234567}，在此特別感謝您為維護一個乾淨的網路空間所付出的心力與時間。
HiNet將依台端檢舉內容資訊作為處理之依據，若確屬HiNet 客戶所為，本公司將依據契約條款對該客戶所租用之帳號進行處理，處理結果將不另行回覆 。
若您有其他問題需要協助，請至 http://service.hinet.net/2004/ncsc/index.php?id={HN1234567}&mail=****@gmail.com
HiNet將儘速以E-mail的回覆方式為您服務， 若您使用outlook 郵件軟體收發郵件，且欲知阻擋廣告信的辦法，HiNet 建議您至下列網址--> http://service.hinet.net/2004/spam.htm
參考一種阻擋廣告信的入門方法，以暫收阻隔之效
中華電信 HiNet 客服中心 敬上
Dear Sir/Madam,
This is an auto generated message to inform you that your message sent from ****@gmail.com, ticket number {HN1234567} has been received at 2005/5/23 上午 06:21:18 . We would like to take this opportunity to thank you for your time and effort fighting spam activity with us. Please be informed that although we are not able to send you the spam report, the information you have provided in your email will be used to investigate the spam activity. Should the spam source prove to originate from a HiNet user, action will be taken in accordance with HiNet Acceptable Usage Policy and Terms of Service Agreement.
Please log on to http://service.hinet.net/2004/ncsc/spam_english.php?id={HN1234567}&mail=****@gmail.com, if you need more assistance.
HiNet will answer your inquiry by email as soon as possible. In addition, if you use Outlook to send/receive mail, HiNet suggests you to log on to http://service.hinet.net/2004/ncsc/spam_english.htm to view information about the basics of blocking spam mail. Thank you.
Regards,
HiNet Customer Service Center
スイスから自動返答、独英併記。
−−−−−−−−−−−−−−−−−−−−
Received: from smtpgw02.cablecom.ch (smtpgw02.cablecom.ch [62.2.34.21])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of abuse@cablecom.ch designates 62.2.34.21 as permitted sender)
Received: from cablecom.ch (gwgate.cablecom.ch [10.13.1.44])
by smtpgw02.cablecom.ch (4.9.7.3) with ESMTP id ****
Received: from kanamail03
(kanamail03.cablecom.ch [10.14.1.242])
by cablecom.ch; Sun, 05 Jun 2005 20:41:15 +0200
Message-ID: <25377064.1117996874880.JavaMail.SYSTEM@kanamail03>
Date: Sun, 5 Jun 2005 20:39:36 +0200 (CEST)
From: abuse cablecom <abuse@cablecom.ch>
To: **** <****@gmail.com>
Subject: [***Probably SPAM***] [ABUSE REPORT] Fwd: Trying It By Yourrself (KMM1234567)
x-mailer: KANA Response 7.6.1.43
(english version see below)
DIES IST EINE AUTOMATISCHE ANTWORT
BITTE ANTWORTEN SIE NICHT AUF DIESE E-MAIL
CABLECOM GMBH SIEHT KEINE ANTWORT
Ihr E-Mail wurde vom Abuse/Security Team der cablecom GmbH empfangen.
Besten Dank, dass Sie uns diese Angaben gemeldet haben.
Bitte verstehen Sie, dass wir nicht jede E-Mail persoenlich beantworten
koennen; aber wir nehmen jede Beanstandung ernst und ergreifen die uns
als geeignet erscheinenden Massnahmen.
SPAM/E-MAIL/VIREN BEANSTANDUNGEN:
*********************************
Wenn Sie uns unerwuenschte Spam/Junk/Viren E-mails weiterleiten, teilen
Sie uns bitte gleichzeitig den *kompletten Mailheader* (die
vollstaendigen Internet-Kopfzeilen) mit.
PORTSCANS:
********************************
Wenn Sie uns eine andere Art von Netzangriffen melden (z.B. portscans),
dann schicken Sie uns bitte die kompletten Logfiles Ihrer Firewall mit
der Angabe Ihrer Zeitzone und Ihrer Systemzeit in *Textform*. Bitte
beachten Sie, dass cablecom GmbH keine Screenshots, Microsoft Word
Dokumente oder aehnliches akzeptiert.
Wenn cablecom GmbH feststellt, dass seitens von Kunden der cablecom GmbH
ein Missbrauch betrieben wurde, wird cablecom GmbH die entsprechenden
Massnahmen gemaess den allgemeinen Geschaeftsbedingungen ergreifen.
Bitte beachten Sie, dass cablecom GmbH nur fuer die Kunden der cablecom
GmbH verantwortlich ist, und keine Kontrolle ueber die Regelungen
anderer ISP's hat.
Mit freundlichen Gruessen
cablecom GmbH
Abuse/Security Team abuse@cablecom.ch
***********************************************************************
THIS IS AN AUTOMATED RESPONSE
PLEASE DO NOT REPLY
CABLECOM GMBH WILL NOT SEE ANY REPLY SENT TO THIS MESSAGE
Your complaint has been received by the cablecom GmbH Abuse/Security
Team. Thank you for bringing it to our attention. Please understand that
we cannot respond to every message personally, but we assure you that we
investigate every complaint seriously.
SPAM/VIRUSES:
***************************
When reporting UBE/UCE, please forward (do not bounce) the offending
messages with full headers intact.
PORTSCANS:
***************************
When reporting any other kind of network abuse (e.g. hacking) please
send us the complete logfiles with timestamps and the timezone
information of your systems. Please note that cablecom GmbH accepts only
logfiles in *textform*, any other form (Screenshots or Microsoft Word
Documents) will not be processed.
If cablecom GmbH finds out that the abuse was originated from a cablecom
GmbH customer site, cablecom GmbH will take action according to the
Terms of Service contract. Generally, only the ISP of the originating
site can enforce policies concerning any incident.
Sincerely
cablecom GmbH
Abuse/Security Team
abuse@cablecom.ch
−−−−−−−−−−−−−−−−−−−−
Received: from smtpgw02.cablecom.ch (smtpgw02.cablecom.ch [62.2.34.21])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of abuse@cablecom.ch designates 62.2.34.21 as permitted sender)
Received: from cablecom.ch (gwgate.cablecom.ch [10.13.1.44])
by smtpgw02.cablecom.ch (4.9.7.3) with ESMTP id ****
Received: from kanamail03
(kanamail03.cablecom.ch [10.14.1.242])
by cablecom.ch; Sun, 05 Jun 2005 20:41:15 +0200
Message-ID: <25377064.1117996874880.JavaMail.SYSTEM@kanamail03>
Date: Sun, 5 Jun 2005 20:39:36 +0200 (CEST)
From: abuse cablecom <abuse@cablecom.ch>
To: **** <****@gmail.com>
Subject: [***Probably SPAM***] [ABUSE REPORT] Fwd: Trying It By Yourrself (KMM1234567)
x-mailer: KANA Response 7.6.1.43
(english version see below)
DIES IST EINE AUTOMATISCHE ANTWORT
BITTE ANTWORTEN SIE NICHT AUF DIESE E-MAIL
CABLECOM GMBH SIEHT KEINE ANTWORT
Ihr E-Mail wurde vom Abuse/Security Team der cablecom GmbH empfangen.
Besten Dank, dass Sie uns diese Angaben gemeldet haben.
Bitte verstehen Sie, dass wir nicht jede E-Mail persoenlich beantworten
koennen; aber wir nehmen jede Beanstandung ernst und ergreifen die uns
als geeignet erscheinenden Massnahmen.
SPAM/E-MAIL/VIREN BEANSTANDUNGEN:
*********************************
Wenn Sie uns unerwuenschte Spam/Junk/Viren E-mails weiterleiten, teilen
Sie uns bitte gleichzeitig den *kompletten Mailheader* (die
vollstaendigen Internet-Kopfzeilen) mit.
PORTSCANS:
********************************
Wenn Sie uns eine andere Art von Netzangriffen melden (z.B. portscans),
dann schicken Sie uns bitte die kompletten Logfiles Ihrer Firewall mit
der Angabe Ihrer Zeitzone und Ihrer Systemzeit in *Textform*. Bitte
beachten Sie, dass cablecom GmbH keine Screenshots, Microsoft Word
Dokumente oder aehnliches akzeptiert.
Wenn cablecom GmbH feststellt, dass seitens von Kunden der cablecom GmbH
ein Missbrauch betrieben wurde, wird cablecom GmbH die entsprechenden
Massnahmen gemaess den allgemeinen Geschaeftsbedingungen ergreifen.
Bitte beachten Sie, dass cablecom GmbH nur fuer die Kunden der cablecom
GmbH verantwortlich ist, und keine Kontrolle ueber die Regelungen
anderer ISP's hat.
Mit freundlichen Gruessen
cablecom GmbH
Abuse/Security Team abuse@cablecom.ch
***********************************************************************
THIS IS AN AUTOMATED RESPONSE
PLEASE DO NOT REPLY
CABLECOM GMBH WILL NOT SEE ANY REPLY SENT TO THIS MESSAGE
Your complaint has been received by the cablecom GmbH Abuse/Security
Team. Thank you for bringing it to our attention. Please understand that
we cannot respond to every message personally, but we assure you that we
investigate every complaint seriously.
SPAM/VIRUSES:
***************************
When reporting UBE/UCE, please forward (do not bounce) the offending
messages with full headers intact.
PORTSCANS:
***************************
When reporting any other kind of network abuse (e.g. hacking) please
send us the complete logfiles with timestamps and the timezone
information of your systems. Please note that cablecom GmbH accepts only
logfiles in *textform*, any other form (Screenshots or Microsoft Word
Documents) will not be processed.
If cablecom GmbH finds out that the abuse was originated from a cablecom
GmbH customer site, cablecom GmbH will take action according to the
Terms of Service contract. Generally, only the ISP of the originating
site can enforce policies concerning any incident.
Sincerely
cablecom GmbH
Abuse/Security Team
abuse@cablecom.ch
お蔭様でワタシの名前も世界的に売れて来たせいか（？）、昨日は初めて中東イスラム圏ドメインからと思しきスパムをゲットしました。ホスティングはフランステレコム・オルレアンでしたが。：-）
さて、今年上半期、大量のエロスパムの国内外に撒き散らした『懸賞メルマサービス』。規約のいいかげんな在阪のメールマガジン発行代行業者を利用し、乱数発生したアドレスへ向けて発送してポートスキャン、それに BBS で収集したアドレスを加える手口でした。内容は明らかに架空請求系です。
これはその『懸賞メルマサービス』の踏み台にされた Infosphere (NTTPC) からの自動返答ですが、被害者も多く、各プロバイダの担当者も対応に大童だったんじゃないかと思います。
−−−−−−−−−−−−−−−−−−−−−−
Received: from mail.sphere.ad.jp (mail.sphere.ad.jp [210.150.250.130])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of owner-abuse@sphere.ad.jp designates 210.150.250.130 as permitted sender)
Received: by mail.sphere.ad.jp (Postfix, from userid 10)
id ****
To: spamblock <****@gmail.com>
From: abuse@sphere.ad.jp
Repley-To: abuse@sphere.ad.jp
Subject: メールありがとうございました[NTTPC Abuse担当]
Message-Id: <20050518****@mail.sphere.ad.jp>
Date: Wed, 18 May 2005 14:45:37 +0900 (JST)
お問い合せいただきありがとうございます。
（これは自動返信メールです）
お客様から頂きましたお問合せは、ＮＴＴＰＣコミュニケーションズAbuse担
当にて、承りました。お問い合わせにつきましては、適正に対応させていただ
きます。
弊社では、迷惑メール等の迷惑行為に対して、以下のように対応致しており
ます。
１ 迷惑行為が弊社のサービス（InfoSphere等）の契約者による場合
弊社利用規約により警告、利用停止、強制解約等厳しく対応を致しておりま
す。
２ 迷惑行為が他の通信事業者の契約者による場合
契約者が弊社とネットワーク接続を契約している他プロバイダの契約者と判
明した場合には、弊社より当該プロバイダに対し対応を依頼し、しかるべき対
処をするよう依頼しております。
なお、弊社の迷惑行為に対する対応に関しましては、以下にその対応方針等
を記載しておりますので、ご参照願います。
また、お問合せフォームをご用意しておりますので、今後のお問い合わせにつ
きましては、こちらをご利用願います。
株式会社NTTPCコミュニケーションズ Abuse対策用ホームページ
URL http://www.nttpc.ne.jp/
身に覚えのない有料情報利用料請求などのメールで、メールに記載されてい
る内容に関するお問い合わせ、ご相談につきましては、弊社ではお答えいたし
かねますので、お近くの警察署等へご相談願います。
都道府県警察本部のサイバー犯罪相談窓口等一覧
URL http://www.npa.go.jp/cyber/soudan.htm
※お客様の個人情報につきましては、弊社にて厳重に管理し、本件お問い合わ
せに対する対応のため以外に利用することはございません。
さて、今年上半期、大量のエロスパムの国内外に撒き散らした『懸賞メルマサービス』。規約のいいかげんな在阪のメールマガジン発行代行業者を利用し、乱数発生したアドレスへ向けて発送してポートスキャン、それに BBS で収集したアドレスを加える手口でした。内容は明らかに架空請求系です。
これはその『懸賞メルマサービス』の踏み台にされた Infosphere (NTTPC) からの自動返答ですが、被害者も多く、各プロバイダの担当者も対応に大童だったんじゃないかと思います。
−−−−−−−−−−−−−−−−−−−−−−
Received: from mail.sphere.ad.jp (mail.sphere.ad.jp [210.150.250.130])
by mx.gmail.com with ESMTP id ****
Received-SPF: pass (gmail.com: best guess record for domain of owner-abuse@sphere.ad.jp designates 210.150.250.130 as permitted sender)
Received: by mail.sphere.ad.jp (Postfix, from userid 10)
id ****
To: spamblock <****@gmail.com>
From: abuse@sphere.ad.jp
Repley-To: abuse@sphere.ad.jp
Subject: メールありがとうございました[NTTPC Abuse担当]
Message-Id: <20050518****@mail.sphere.ad.jp>
Date: Wed, 18 May 2005 14:45:37 +0900 (JST)
お問い合せいただきありがとうございます。
（これは自動返信メールです）
お客様から頂きましたお問合せは、ＮＴＴＰＣコミュニケーションズAbuse担
当にて、承りました。お問い合わせにつきましては、適正に対応させていただ
きます。
弊社では、迷惑メール等の迷惑行為に対して、以下のように対応致しており
ます。
１ 迷惑行為が弊社のサービス（InfoSphere等）の契約者による場合
弊社利用規約により警告、利用停止、強制解約等厳しく対応を致しておりま
す。
２ 迷惑行為が他の通信事業者の契約者による場合
契約者が弊社とネットワーク接続を契約している他プロバイダの契約者と判
明した場合には、弊社より当該プロバイダに対し対応を依頼し、しかるべき対
処をするよう依頼しております。
なお、弊社の迷惑行為に対する対応に関しましては、以下にその対応方針等
を記載しておりますので、ご参照願います。
また、お問合せフォームをご用意しておりますので、今後のお問い合わせにつ
きましては、こちらをご利用願います。
株式会社NTTPCコミュニケーションズ Abuse対策用ホームページ
URL http://www.nttpc.ne.jp/
身に覚えのない有料情報利用料請求などのメールで、メールに記載されてい
る内容に関するお問い合わせ、ご相談につきましては、弊社ではお答えいたし
かねますので、お近くの警察署等へご相談願います。
都道府県警察本部のサイバー犯罪相談窓口等一覧
URL http://www.npa.go.jp/cyber/soudan.htm
※お客様の個人情報につきましては、弊社にて厳重に管理し、本件お問い合わ
せに対する対応のため以外に利用することはございません。
カナダの腐敗プロバイダ。指定されたアドレス宛に月間２５通も報告してやってんのに、こちらには何の落ち度もないにも関わらず、
===============================================================
THIS IS AN AUTOMATED RESPONSE
If your report does NOT contain the REQUIRED INFORMATION listed below, we will NOT be able to investigate the event and the report not be handled.
For ease of reporting and assist in faster handling, please consider the following sites in reporting your incident.
http://www.spamcop.net/
http://www.mynetwatchman.com/
http://www.dshield.org/howto.php
===============================================================
という、ぶっきらぼうな文面の自動返答が返されるだけなので、今度こそは担当者に届くだろうと postmaster に送ったら、相手先 mail box 満杯だと言って、また返送されて来ましたとさ。
こんな悪徳企業は潰れてしまえ。
−−−−−−−−−−−−−−−−−−−−−
Your message cannot be delivered to the following recipients:
Recipient address: violations%shawcable.com@ims-ms-daemon
Original address: postmaster@shawcable.net
Reason: Over quota
Original-recipient: rfc822;postmaster@shawcable.net
Final-recipient: rfc822;violations%shawcable.com@ims-ms-daemon
Action: failed
Status: 5.2.2 (Over quota)
===============================================================
THIS IS AN AUTOMATED RESPONSE
If your report does NOT contain the REQUIRED INFORMATION listed below, we will NOT be able to investigate the event and the report not be handled.
For ease of reporting and assist in faster handling, please consider the following sites in reporting your incident.
http://www.spamcop.net/
http://www.mynetwatchman.com/
http://www.dshield.org/howto.php
===============================================================
という、ぶっきらぼうな文面の自動返答が返されるだけなので、今度こそは担当者に届くだろうと postmaster に送ったら、相手先 mail box 満杯だと言って、また返送されて来ましたとさ。
こんな悪徳企業は潰れてしまえ。
−−−−−−−−−−−−−−−−−−−−−
Your message cannot be delivered to the following recipients:
Recipient address: violations%shawcable.com@ims-ms-daemon
Original address: postmaster@shawcable.net
Reason: Over quota
Original-recipient: rfc822;postmaster@shawcable.net
Final-recipient: rfc822;violations%shawcable.com@ims-ms-daemon
Action: failed
Status: 5.2.2 (Over quota)
鏤々届くエロサイト広告、バイアグラ屋のスパムを添付して、オランダのネットエロ監視機関"Meldpunt"に連絡したところ、自動返答ですが受付証が来ました。
−−−−−−−−−−−−−−−−−−−−−−
Received: from tikkun-olam.magenta.nl (tikkun-olam.magenta.nl [217.19.20.200])
Received-SPF: pass (gmail.com: best guess record for domain of designates 217.19.20.200 as permitted sender)
Received: (qmail 7999 invoked by alias); 8 Jun 2005 14:34:34 -0000
Date: 8 Jun 2005 14:34:34 -0000
Message-ID: <20050608****@tikkun-olam.magenta.nl>
To: <****gmail.com>
From: "Meldpunt Discriminatie Internet" <meldpunt@meldpunt.nl>
Subject: Re: ****SPAM**** [ABUSE REPORT] Fwd: become the man that women desire
(Autoreply, English text below)
Dit is een automatisch bericht. NEEM SVP DE TIJD DIT BERICHT TE LEZEN.
Geachte heer, mevrouw,
U heeft een melding gestuurd naar het Meldpunt Discriminatie Internet
(MDI). Het MDI neemt meldingen over DISCRIMINATIE OP INTERNET in
behandeling.
Wegens een grote hoeveelheid meldingen zijn wij helaas niet altijd in
staat u een persoonlijk bericht over de voortgang van de klacht te
sturen. Wij vragen hiervoor uw begrip.
UW MELDING
Het Meldpunt Discriminatie Internet (MDI) neemt meldingen over
discriminerende uitingen op het Nederlandse deel van internet in
behandeling. Het MDI is gericht op het doen verwijderen van
discriminerende uitingen op internet.
Het MDI beoordeelt uitingen op strafbaarheid aan de hand van de
anti-discriminatiebepalingen uit het Wetboek van Strafrecht
(http://www.meldpunt.nl/index.php3?link=wvs90q). Indien een uiting
strafbaar is, wordt een verzoek tot verwijdering naar de eigenaar van
een site verstuurd.
DISCRIMINATIE BUITEN INTERNET
Voor meldingen over DISCRIMINATIE BUITEN INTERNET (werk, straat, school,
TV, media, etc.) kunt u zich wenden tot een Meldpunt Discriminatie in uw
omgeving. Een lijst van meldpunten treft u hier aan:
http://www.meldpunt-amsterdam.nl/meldpunten.html
KINDERPORNO
Voor meldingen over KINDERPORNO OP INTERNET moet u zijn bij het Meldpunt
Kinderporno op Internet, <http://www.meldpunt.org/>http://www.meldpunt.org/
BUITENLAND
Een lijst van Meldpunten Discriminatie Internet in een aantal andere landen
kunt u hier vinden:
http://www.inach.net/
WAT NEMEN WIJ NIET IN BEHANDELING:
-Meldingen over discriminatie in de fysieke wereld.
-Meldingen vergezeld van dreigementen gericht tegen het Meldpunt of haar
medewerkers ('als u deze klacht niet in behandeling neemt, dan').
-Generieke meldingen (dus zonder exacte lokatie) over een website of
webforum e.d.
NB:
Het Meldpunt behoudt zich het recht voor bepaalde meldingen niet in
behandeling te nemen.
Voor vragen over de stand van zaken kunt u altijd contact met ons opnemen
via: buro@meldpunt.nl
LET OP: Het Meldpunt communiceert over dossiers en aangiftes ALLEEN met
betrokken partijen, te weten de melder van de uiting(en), de plaatser van
de uiting(en), politie en justitie, internet Providers en in bepaalde
gevallen andere Meldpunten en ADB's.
Meer informatie over het MDI kunt u vinden op: http://www.meldpunt.nl
Hoogachtend,
Meldpunt Discriminatie Internet
----------
Dear Sir or Madam,
This is an automatic reply. You have sent a complaint to the Complaints
Bureau for Discrimination on the Internet (MDI). We handle complaints about
DISCRIMINATION ON THE INTERNET.
Due to a large amount of complaints we are not always able to answer your
complaint personally.
For complaints about discrimination OUTSIDE THE INTERNET (at work, on the
street, at school, in the press, etc.) you should contact an
Anti-Discrimination Bureau or Complaints Bureau for Discrimination in your
area. You can find a list of those agencies here:
http://www.meldpunt-amsterdam.nl/meldpunten.html
More info about the MDI can be found at http://www.meldpunt.nl/indexe.php3
For complaints about child pronography on the internet, please go to
http://www.meldpunt.org
Kind regards,
Complaints Bureau for Discrimination on the Internet
−−−−−−−−−−−−−−−−−−−−−−
Received: from tikkun-olam.magenta.nl (tikkun-olam.magenta.nl [217.19.20.200])
Received-SPF: pass (gmail.com: best guess record for domain of designates 217.19.20.200 as permitted sender)
Received: (qmail 7999 invoked by alias); 8 Jun 2005 14:34:34 -0000
Date: 8 Jun 2005 14:34:34 -0000
Message-ID: <20050608****@tikkun-olam.magenta.nl>
To: <****gmail.com>
From: "Meldpunt Discriminatie Internet" <meldpunt@meldpunt.nl>
Subject: Re: ****SPAM**** [ABUSE REPORT] Fwd: become the man that women desire
(Autoreply, English text below)
Dit is een automatisch bericht. NEEM SVP DE TIJD DIT BERICHT TE LEZEN.
Geachte heer, mevrouw,
U heeft een melding gestuurd naar het Meldpunt Discriminatie Internet
(MDI). Het MDI neemt meldingen over DISCRIMINATIE OP INTERNET in
behandeling.
Wegens een grote hoeveelheid meldingen zijn wij helaas niet altijd in
staat u een persoonlijk bericht over de voortgang van de klacht te
sturen. Wij vragen hiervoor uw begrip.
UW MELDING
Het Meldpunt Discriminatie Internet (MDI) neemt meldingen over
discriminerende uitingen op het Nederlandse deel van internet in
behandeling. Het MDI is gericht op het doen verwijderen van
discriminerende uitingen op internet.
Het MDI beoordeelt uitingen op strafbaarheid aan de hand van de
anti-discriminatiebepalingen uit het Wetboek van Strafrecht
(http://www.meldpunt.nl/index.php3?link=wvs90q). Indien een uiting
strafbaar is, wordt een verzoek tot verwijdering naar de eigenaar van
een site verstuurd.
DISCRIMINATIE BUITEN INTERNET
Voor meldingen over DISCRIMINATIE BUITEN INTERNET (werk, straat, school,
TV, media, etc.) kunt u zich wenden tot een Meldpunt Discriminatie in uw
omgeving. Een lijst van meldpunten treft u hier aan:
http://www.meldpunt-amsterdam.nl/meldpunten.html
KINDERPORNO
Voor meldingen over KINDERPORNO OP INTERNET moet u zijn bij het Meldpunt
Kinderporno op Internet, <http://www.meldpunt.org/>http://www.meldpunt.org/
BUITENLAND
Een lijst van Meldpunten Discriminatie Internet in een aantal andere landen
kunt u hier vinden:
http://www.inach.net/
WAT NEMEN WIJ NIET IN BEHANDELING:
-Meldingen over discriminatie in de fysieke wereld.
-Meldingen vergezeld van dreigementen gericht tegen het Meldpunt of haar
medewerkers ('als u deze klacht niet in behandeling neemt, dan').
-Generieke meldingen (dus zonder exacte lokatie) over een website of
webforum e.d.
NB:
Het Meldpunt behoudt zich het recht voor bepaalde meldingen niet in
behandeling te nemen.
Voor vragen over de stand van zaken kunt u altijd contact met ons opnemen
via: buro@meldpunt.nl
LET OP: Het Meldpunt communiceert over dossiers en aangiftes ALLEEN met
betrokken partijen, te weten de melder van de uiting(en), de plaatser van
de uiting(en), politie en justitie, internet Providers en in bepaalde
gevallen andere Meldpunten en ADB's.
Meer informatie over het MDI kunt u vinden op: http://www.meldpunt.nl
Hoogachtend,
Meldpunt Discriminatie Internet
----------
Dear Sir or Madam,
This is an automatic reply. You have sent a complaint to the Complaints
Bureau for Discrimination on the Internet (MDI). We handle complaints about
DISCRIMINATION ON THE INTERNET.
Due to a large amount of complaints we are not always able to answer your
complaint personally.
For complaints about discrimination OUTSIDE THE INTERNET (at work, on the
street, at school, in the press, etc.) you should contact an
Anti-Discrimination Bureau or Complaints Bureau for Discrimination in your
area. You can find a list of those agencies here:
http://www.meldpunt-amsterdam.nl/meldpunten.html
More info about the MDI can be found at http://www.meldpunt.nl/indexe.php3
For complaints about child pronography on the internet, please go to
http://www.meldpunt.org
Kind regards,
Complaints Bureau for Discrimination on the Internet
カナダ・オンタリオ州 execulink からの自動返答ですが、実はワタシはここへ直接報告をした覚えがありません。
同社は恐らく大手ネットから回線リセールを受けていて、上位業者の abuse に連絡したら、先方が発信元を特定して、当該地域の会社の担当から連絡させたのだと、好意的に理解したいのですが、"SpamGuard"というサービスがあるから見ろ、と言っているリンク先が切れているという、誠にお粗末な対応。
「72時間（丸三日）経ってもまだスパムが来る場合は、再度ご連絡下さい」とのこと。
−−−−−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from lelystad.execulink.net (lelystad.execulink.net [199.166.6.46])
Received-SPF: pass (gmail.com: best guess record for domain of designates 199.166.6.46 as permitted sender)
Received: (from cyrus@localhost)
by lelystad.execulink.net (8.11.6/8.11.6) id ****
Message-ID: <****@lelystad.execulink.net>
X-Sieve: CMU Sieve 2.2
From: <abuse@execulink.com>
Subject: Your complaint to abuse@execulink.com
Auto-Submitted: auto-replied (vacation)
*** PLEASE READ THE COMMENTS CAREFULLY ***
*** THIS IS AN AUTOMATED RECEIPT NOTIFICATION ***
Note: You will only receive this response once per day. These
guidelines will apply to all submissions.
REPORTS ABOUT SPAM:
=======================================================================
Please be sure to check the Received headers of your email message to
properly identify the source of the message. Many viruses and spammers
forge the From address. Any messages not actually sent from our system
will be deleted and ignored without notice.
Please consider reporting spam to SpamCop. They have a very good
analysis system and send easy to understand reports to the owner of the
IP address that the spam originated with.
http://www.spamcop.net
=======================================================================
Thank you for writing with your comments and concerns. You are
receiving this automated message to acknowledge that your mail has
been received.
All reports of abuse will be investigated by our staff. Please note
that due to the volume of mail we receive, you may not receive a
personal acknowledgement or indication of action.
If you have submitted an email that you consider to be spam, please
understand that this is an uncontrollable action where people use
the Internet to distribute material that may not be favourable to all
users. Although Execulink cannot stop abusers from sending spam, we
have implemented a solution that will reduce the amount of spam that
is delivered to your mailbox. For more information on our SpamGuard
service, please visit http://my.execulink.com/services/etc/spamguard
Since we can only take action against Execulink Customers, please be
sure that the source of the message originates from our system before
submitting it. Please include the headers and the body of the message.
Also, please carefully check the headers of the e-mail or USENET
article you are reporting to ensure that they are complete and they
are not, in fact, forgeries -- it is becoming fashionable for
Internet abusers to do this.
If you come across forged e-mail or news headers, please report it
to the abuse account at the site from which it originated.
Internet abuse violations are presently handled by our Abuse Staff.
If you continue to see abuse of Internet mail more than 72 hours
after your original report, please note this and we will take
special action.
Thank you for writing,
Abuse Team,
Execulink Internetexeculink
同社は恐らく大手ネットから回線リセールを受けていて、上位業者の abuse に連絡したら、先方が発信元を特定して、当該地域の会社の担当から連絡させたのだと、好意的に理解したいのですが、"SpamGuard"というサービスがあるから見ろ、と言っているリンク先が切れているという、誠にお粗末な対応。
「72時間（丸三日）経ってもまだスパムが来る場合は、再度ご連絡下さい」とのこと。
−−−−−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from lelystad.execulink.net (lelystad.execulink.net [199.166.6.46])
Received-SPF: pass (gmail.com: best guess record for domain of designates 199.166.6.46 as permitted sender)
Received: (from cyrus@localhost)
by lelystad.execulink.net (8.11.6/8.11.6) id ****
Message-ID: <****@lelystad.execulink.net>
X-Sieve: CMU Sieve 2.2
From: <abuse@execulink.com>
Subject: Your complaint to abuse@execulink.com
Auto-Submitted: auto-replied (vacation)
*** PLEASE READ THE COMMENTS CAREFULLY ***
*** THIS IS AN AUTOMATED RECEIPT NOTIFICATION ***
Note: You will only receive this response once per day. These
guidelines will apply to all submissions.
REPORTS ABOUT SPAM:
=======================================================================
Please be sure to check the Received headers of your email message to
properly identify the source of the message. Many viruses and spammers
forge the From address. Any messages not actually sent from our system
will be deleted and ignored without notice.
Please consider reporting spam to SpamCop. They have a very good
analysis system and send easy to understand reports to the owner of the
IP address that the spam originated with.
http://www.spamcop.net
=======================================================================
Thank you for writing with your comments and concerns. You are
receiving this automated message to acknowledge that your mail has
been received.
All reports of abuse will be investigated by our staff. Please note
that due to the volume of mail we receive, you may not receive a
personal acknowledgement or indication of action.
If you have submitted an email that you consider to be spam, please
understand that this is an uncontrollable action where people use
the Internet to distribute material that may not be favourable to all
users. Although Execulink cannot stop abusers from sending spam, we
have implemented a solution that will reduce the amount of spam that
is delivered to your mailbox. For more information on our SpamGuard
service, please visit http://my.execulink.com/services/etc/spamguard
Since we can only take action against Execulink Customers, please be
sure that the source of the message originates from our system before
submitting it. Please include the headers and the body of the message.
Also, please carefully check the headers of the e-mail or USENET
article you are reporting to ensure that they are complete and they
are not, in fact, forgeries -- it is becoming fashionable for
Internet abusers to do this.
If you come across forged e-mail or news headers, please report it
to the abuse account at the site from which it originated.
Internet abuse violations are presently handled by our Abuse Staff.
If you continue to see abuse of Internet mail more than 72 hours
after your original report, please note this and we will take
special action.
Thank you for writing,
Abuse Team,
Execulink Internetexeculink
昨日はパキスタン、ルーマニア発のスパムを初受信しました。クレーム送付済のホストからの返答が楽しみです。
さてこれは、フランスのプロバイダ兼回線卸業者 modulonet からの返答。一応通し番号付きですが、文面は礼を失した、人をナメ切ったもの。腹を立てずにおれようか。
−−−−−−−−−−−−−−−−−−−−−−
Received: from modulonet.fr ([172.30.0.72]) by mail.ncnumericable.com with ncnumericable.com; Thu, 09 Jun 2005 17:07:51 +0200
X-OEM: Alain Caron
From: securiteFTC modulonet.fr<securiteftc@modulonet.fr>
Reply-To: <securiteftc@modulonet.fr>
Subject: http://abuse.modulonet.fr
Bonjour,
(english message will follow)
Nous vous remercions de votre avertissement, votre plainte va e^tre traite'e dans les plus bref de'lais.
Ne'anmoins, afin d'acce'le'rer la proce'dure, nous vous conseillons de remplir le formulaire de plainte sur notre site : http://abuse.modulonet.fr.
Merci de votre confiance.
>Le Service Clients France Te'le'com Ca^ble
----------------
Hi
Thank you for your alert. If you want your abuses to be processed faster, please fill the appropriate form on our web site http://abuse.modulonet.fr.
Thanks
Le Service Clients France Te'le'com Ca^ble REF # 1234567 FTC Internet(Cellule Se'curite') ****@****.com 09/06/2005 17:00:28 ************ ORIGINAL Mail Received (Only 2500 characters) ************ REF # 1234567 >>
************ message rec,u ************
さてこれは、フランスのプロバイダ兼回線卸業者 modulonet からの返答。一応通し番号付きですが、文面は礼を失した、人をナメ切ったもの。腹を立てずにおれようか。
−−−−−−−−−−−−−−−−−−−−−−
Received: from modulonet.fr ([172.30.0.72]) by mail.ncnumericable.com with ncnumericable.com; Thu, 09 Jun 2005 17:07:51 +0200
X-OEM: Alain Caron
From: securiteFTC modulonet.fr<securiteftc@modulonet.fr>
Reply-To: <securiteftc@modulonet.fr>
Subject: http://abuse.modulonet.fr
Bonjour,
(english message will follow)
Nous vous remercions de votre avertissement, votre plainte va e^tre traite'e dans les plus bref de'lais.
Ne'anmoins, afin d'acce'le'rer la proce'dure, nous vous conseillons de remplir le formulaire de plainte sur notre site : http://abuse.modulonet.fr.
Merci de votre confiance.
>Le Service Clients France Te'le'com Ca^ble
----------------
Hi
Thank you for your alert. If you want your abuses to be processed faster, please fill the appropriate form on our web site http://abuse.modulonet.fr.
Thanks
Le Service Clients France Te'le'com Ca^ble REF # 1234567 FTC Internet(Cellule Se'curite') ****@****.com 09/06/2005 17:00:28 ************ ORIGINAL Mail Received (Only 2500 characters) ************ REF # 1234567 >>
************ message rec,u ************
最近スパム業界で流行の、マレーシア・テレコム tm.net から、３週間経ってやっと返答。「三行半」（みくだりはん）とは言いますが、今まで集めた受信証の中で、最も短文です。
−−−−−−−−−−−−−−−−−−−−−−−
Received: from inetxys.tmnet.com.my ([202.188.0.130])
Received-SPF: fail (gmail.com: domain of tmcops@tm.net.my does not designate 202.188.0.130 as permitted sender)
Received: from JAMILAHSPS.tm.net.my (inetxys.secure.tmnet [192.168.1.119])
by inetxys.tmnet.com.my
(iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
Date: Fri, 10 Jun 2005 10:58:56 +0800
From: Tmnet Abuse Admin <tmcops@tm.net.my>
Subject: Fwd: Whatever your kink, we've got it
X-Sender: tmcops@pop.tmnet.com.my
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
Dear Mr,
We have taken appropriate action to the account.
Regards.
TMnet Abuse Administration(JM)
TM Net Sdn. Bhd.
−−−−−−−−−−−−−−−−−−−−−−−
Received: from inetxys.tmnet.com.my ([202.188.0.130])
Received-SPF: fail (gmail.com: domain of tmcops@tm.net.my does not designate 202.188.0.130 as permitted sender)
Received: from JAMILAHSPS.tm.net.my (inetxys.secure.tmnet [192.168.1.119])
by inetxys.tmnet.com.my
(iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
Date: Fri, 10 Jun 2005 10:58:56 +0800
From: Tmnet Abuse Admin <tmcops@tm.net.my>
Subject: Fwd: Whatever your kink, we've got it
X-Sender: tmcops@pop.tmnet.com.my
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
Dear Mr,
We have taken appropriate action to the account.
Regards.
TMnet Abuse Administration(JM)
TM Net Sdn. Bhd.
アルゼンチンの CATV ネットから、先ず自動返答が届き、その後下記の通り、担当者名入りのしっかりした文面で連絡が来ました。セバスチャン君、お疲れさま！
−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from mswout.corp.cablevision.com.ar (mail2.cablevision.com.ar [200.49.158.155])
Received-SPF: pass (gmail.com: best guess record for domain of ceac@cablevision.com.ar designates 200.49.158.155 as permitted sender)
Received: from hermes-cv1.corp.cablevision.com.ar (unverified) by
mswout.corp.cablevision.com.ar (Content Technologies SMTPRS 4.3.17) with ESMTP
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
Subject: RE: {SPAM!!} Fwd: finally!
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: {SPAM!!} Fwd: finally!
Thread-Index: AcVdtJ1brBBLEPqCSJu0spiMlWUKsQC3gErw
From: =?iso-8859-1?Q?CeAC_Grupo_CableVisi=F3n?= <ceac@cablevision.com.ar>
Dear Sir,
We are sending this reply in order to inform you that FiberTel S.A will be taking the appropiated warning actions due to this kind of behavior not supported by the Acceptable Use Policies ("AUP") that details the admitted and prohibited actions by our company for the use of its services and equipment.
We thank the valuable information submitted, as it is the main way to mantain the cordiability of the services' use.
If you want to know more about our acceptable use policies ("AUP"), please visit them at http://www.fibertel.com.ar
Thanks in advance and if you have any doubt do not hesitate to contact us,
Sebastia'n Pablo Iranek
Departamento de Abuse
Grupo Cablevisio'n
Tel.: 4778-6000
abuse@fibertel.com.ar
−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from mswout.corp.cablevision.com.ar (mail2.cablevision.com.ar [200.49.158.155])
Received-SPF: pass (gmail.com: best guess record for domain of ceac@cablevision.com.ar designates 200.49.158.155 as permitted sender)
Received: from hermes-cv1.corp.cablevision.com.ar (unverified) by
mswout.corp.cablevision.com.ar (Content Technologies SMTPRS 4.3.17) with ESMTP
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
Subject: RE: {SPAM!!} Fwd: finally!
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: {SPAM!!} Fwd: finally!
Thread-Index: AcVdtJ1brBBLEPqCSJu0spiMlWUKsQC3gErw
From: =?iso-8859-1?Q?CeAC_Grupo_CableVisi=F3n?= <ceac@cablevision.com.ar>
Dear Sir,
We are sending this reply in order to inform you that FiberTel S.A will be taking the appropiated warning actions due to this kind of behavior not supported by the Acceptable Use Policies ("AUP") that details the admitted and prohibited actions by our company for the use of its services and equipment.
We thank the valuable information submitted, as it is the main way to mantain the cordiability of the services' use.
If you want to know more about our acceptable use policies ("AUP"), please visit them at http://www.fibertel.com.ar
Thanks in advance and if you have any doubt do not hesitate to contact us,
Sebastia'n Pablo Iranek
Departamento de Abuse
Grupo Cablevisio'n
Tel.: 4778-6000
abuse@fibertel.com.ar
当面の目標は、アフリカ圏。五大陸制覇は目前です。（＾。＾）
今回はスペインの telefonica より、偽バイアグラ屋のスパムレポートに対する受理番号付きの自動返答。ここは British Marconi (G.E.)グループに入ったり、出たり、色々あったはず。
−−−−−−−−−−−−−−−−−−−−
Received: from 28nbhc05.telefonica.es (mail2.telefonica.es [194.224.58.62])
Subject: (nemesys#N05-503260)RE:[ABUSE REPORT] Fwd: KKeeping it Like a Rock
From: nemesys@telefonica.es
English:
Subject:
********************************************************************
THIS IS AN AUTOMATIC REPLY, PLEASE, DO NOT RESPOD TO THIS E-MAIL, THANKS
********************************************************************
[ABUSE REPORT] Fwd: KKeeping it Like a Rock
N^(o) incidencia: N05-1234567
Dear sir:
We wish to thank you for your message in which you informed us about an
incident with our Internet service.
In addition, we would like to inform you that we are taking measures to
approach the problem in order to prevent it from happening again in the
future.
We are grateful for your message, and we remember you that you can contact
with us at email nemesys@telefonica.es or abuse@telefonica.net
Nemesys Abuse Team
rima-tde.net Admin GroupEspan~ol:
Asunto:
********************************************************************
ESTO ES UNA RESPUESTA AUTOMATICA, POR FAVOR, NO RESPONDA A ESTE MENSAJE, GRACIAS
********************************************************************
[ABUSE REPORT] Fwd: KKeeping it Like a Rock
N^(o) incidencia: N05-1234567
Estimado cliente:
Hemos recibido su queja, en la que nos comunicaba una incidencia
relacionada con Internet.
Al respecto, le informo que estamos procediendo a tomar las acciones que
entendemos pertinentes, para que estos hechos no vuelvan a producirse.
Le agradecemos su informacio'n y le recordamos que si vuelve a producirse
algu'n hecho de esta naturaleza, estamos a su disposicio'n en nuestro email
nemesys@telefonica.es o abuse@telefonica.net
Nemesys Abuse Team
rima-tde.net Admin Group
今回はスペインの telefonica より、偽バイアグラ屋のスパムレポートに対する受理番号付きの自動返答。ここは British Marconi (G.E.)グループに入ったり、出たり、色々あったはず。
−−−−−−−−−−−−−−−−−−−−
Received: from 28nbhc05.telefonica.es (mail2.telefonica.es [194.224.58.62])
Subject: (nemesys#N05-503260)RE:[ABUSE REPORT] Fwd: KKeeping it Like a Rock
From: nemesys@telefonica.es
English:
Subject:
********************************************************************
THIS IS AN AUTOMATIC REPLY, PLEASE, DO NOT RESPOD TO THIS E-MAIL, THANKS
********************************************************************
[ABUSE REPORT] Fwd: KKeeping it Like a Rock
N^(o) incidencia: N05-1234567
Dear sir:
We wish to thank you for your message in which you informed us about an
incident with our Internet service.
In addition, we would like to inform you that we are taking measures to
approach the problem in order to prevent it from happening again in the
future.
We are grateful for your message, and we remember you that you can contact
with us at email nemesys@telefonica.es or abuse@telefonica.net
Nemesys Abuse Team
rima-tde.net Admin GroupEspan~ol:
Asunto:
********************************************************************
ESTO ES UNA RESPUESTA AUTOMATICA, POR FAVOR, NO RESPONDA A ESTE MENSAJE, GRACIAS
********************************************************************
[ABUSE REPORT] Fwd: KKeeping it Like a Rock
N^(o) incidencia: N05-1234567
Estimado cliente:
Hemos recibido su queja, en la que nos comunicaba una incidencia
relacionada con Internet.
Al respecto, le informo que estamos procediendo a tomar las acciones que
entendemos pertinentes, para que estos hechos no vuelvan a producirse.
Le agradecemos su informacio'n y le recordamos que si vuelve a producirse
algu'n hecho de esta naturaleza, estamos a su disposicio'n en nuestro email
nemesys@telefonica.es o abuse@telefonica.net
Nemesys Abuse Team
rima-tde.net Admin Group
テキサス州の通信会社から。トム君からお返事もらったんですけど、toll free でもないのに、わしが何でキースさんに国際電話で連絡せにゃならんの？
−−−−−−−−−−−−−−−−−−−−−
Received: from dalsrv302.valortelecom.com (mailout.valortelecom.com [216.97.174.61])
Received-SPF: pass (gmail.com: best guess record for domain of thanes@valortelecom.com designates 216.97.174.61 as permitted sender)
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
content-class: urn:content-classes:message
Subject: Out of Office AutoReply: [ABUSE REPORT]: Quality Purchases made easy
Date: Thu, 26 May 2005 20:40:32 -0500
Message-ID: <**@dalsrv302.valortelecom.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [ABUSE REPORT]: Quality Purchases made easy
Thread-Index: ****
From: "Hanes, Tom" <thanes@valortelecom.com>
It has been a pleasure working with you. Please refer all matters =
requiring my attention to Keith calwell (972)373-1095.=20
−−−−−−−−−−−−−−−−−−−−−
Received: from dalsrv302.valortelecom.com (mailout.valortelecom.com [216.97.174.61])
Received-SPF: pass (gmail.com: best guess record for domain of thanes@valortelecom.com designates 216.97.174.61 as permitted sender)
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
content-class: urn:content-classes:message
Subject: Out of Office AutoReply: [ABUSE REPORT]: Quality Purchases made easy
Date: Thu, 26 May 2005 20:40:32 -0500
Message-ID: <**@dalsrv302.valortelecom.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [ABUSE REPORT]: Quality Purchases made easy
Thread-Index: ****
From: "Hanes, Tom" <thanes@valortelecom.com>
It has been a pleasure working with you. Please refer all matters =
requiring my attention to Keith calwell (972)373-1095.=20
イスラエルのネットビジョンから、担当者名入りの返答。
10年ちょっと前、Netscape v.1 と抱き合わせで売られていた Cameleon という PPP ソフトがございまして、このプロバイダのマスコットと、良く似たロゴだったのを思い出しました。
−−−−−−−−−−−−−−−−−−−−−−
Received: from ntx1.forest.netvision.net.il ([172.20.30.31]) by vidius.forest.netvision.net.il with ESMTP; ****
X-PA-Host: vidius.forest.netvision.net.il
Received: from ntx.forest.netvision.net.il ([172.20.30.30]) by ntx1.forest.netvision.net.il with Microsoft SMTPSVC(5.0.2195.6713);
X-MIMEOLE: Produced By Microsoft Exchange V6.0.6603.0
Content-class: urn:content-classes:message
Subject: RE: [ABUSE REPORT] Fwd: Do you use eBay?
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
From: "Abuse" <Abuse@netvision.net.il>
To: ****" <****@gmail.com>
X-OriginalArrivalTime: 29 May 2005 **** (UTC) FILETIME=[****]
Dear Sir/Ms,
NetVision's Abuse Team has received your notification of an abuse incident and considers this a serious matter.
We will investigate these reports and if it is found that a NetVision member is responsible for improper or unlawful use of the Internet, we will take appropriate action against the account in conjunction with the NetVision Acceptable User Policy (see: http://www.netvision.net.il/company/NV_aup_EN.htm).
Such action may include, but is not limited to, warnings the account owner or account owners responsible, and/or the suspension or termination of the account or accounts responsible.
NetVision will determine what action will be taken in response to a violation on a case-by-case basis.
We will be unable to provide specific information, as it relates to the ownership or status of any accounts reported to the NetVision Abuse alias per the NetVision Member Agreement. However, we can release this information if required to, by an Israeli court of law.
We appreciate your help and cooperation in this matter.
Should you have any questions regarding our mail to you, please feel free to reply to this Email and we will provide you with additional information.
Always enclose previous letters when contacting us.
Regards,
Boris Shklyar
NetVision Abuse Team
-------------------------------------------
NetVision's Abuse Team: abuse@netvision.net.il
NetVision Ltd.
Omega Center, MATAM, Haifa 31905
The No.1 Israeli Internet & Intranet Services Provider
HOME PAGE: http://www.netvision.net.il <http://www.netvision.net.il/>
------------------------------------------
10年ちょっと前、Netscape v.1 と抱き合わせで売られていた Cameleon という PPP ソフトがございまして、このプロバイダのマスコットと、良く似たロゴだったのを思い出しました。
−−−−−−−−−−−−−−−−−−−−−−
Received: from ntx1.forest.netvision.net.il ([172.20.30.31]) by vidius.forest.netvision.net.il with ESMTP; ****
X-PA-Host: vidius.forest.netvision.net.il
Received: from ntx.forest.netvision.net.il ([172.20.30.30]) by ntx1.forest.netvision.net.il with Microsoft SMTPSVC(5.0.2195.6713);
X-MIMEOLE: Produced By Microsoft Exchange V6.0.6603.0
Content-class: urn:content-classes:message
Subject: RE: [ABUSE REPORT] Fwd: Do you use eBay?
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
From: "Abuse" <Abuse@netvision.net.il>
To: ****" <****@gmail.com>
X-OriginalArrivalTime: 29 May 2005 **** (UTC) FILETIME=[****]
Dear Sir/Ms,
NetVision's Abuse Team has received your notification of an abuse incident and considers this a serious matter.
We will investigate these reports and if it is found that a NetVision member is responsible for improper or unlawful use of the Internet, we will take appropriate action against the account in conjunction with the NetVision Acceptable User Policy (see: http://www.netvision.net.il/company/NV_aup_EN.htm).
Such action may include, but is not limited to, warnings the account owner or account owners responsible, and/or the suspension or termination of the account or accounts responsible.
NetVision will determine what action will be taken in response to a violation on a case-by-case basis.
We will be unable to provide specific information, as it relates to the ownership or status of any accounts reported to the NetVision Abuse alias per the NetVision Member Agreement. However, we can release this information if required to, by an Israeli court of law.
We appreciate your help and cooperation in this matter.
Should you have any questions regarding our mail to you, please feel free to reply to this Email and we will provide you with additional information.
Always enclose previous letters when contacting us.
Regards,
Boris Shklyar
NetVision Abuse Team
-------------------------------------------
NetVision's Abuse Team: abuse@netvision.net.il
NetVision Ltd.
Omega Center, MATAM, Haifa 31905
The No.1 Israeli Internet & Intranet Services Provider
HOME PAGE: http://www.netvision.net.il <http://www.netvision.net.il/>
------------------------------------------
日本の point.ne.jp ( poweredcom.net ) から、洋ものエロスパムに対して下記の通り ↓ 英語でレポートしてやっているのに、日本語で返答が来ました。
http://www.point.ne.jp/support/others/imp14.html
によると、↓ のような規則ができたそうですが、犯人を特定して罰金を徴収できるんでしょうか…。
弊社サービスを利用した迷惑メール送信について
最近、弊社サービスを利用して、迷惑メールを送信されるお客さまが見受けられます。
迷惑メールの送信につきましては、受信された方が不快に思うだけでなく、弊社設備に過大な負荷がかかる場合もあり、他のお客さまへの正常なサービス提供に支障をきたすこととなります。
弊社では、この迷惑メール撲滅に向けた取り組みといたしまして、迷惑メールを送信した場合には、その迷惑メールを送信した契約者に対して「迷惑メール1通につき100円(税込105円)」を、請求させていただきますので、何卒ご理解賜りますようお願い申し上げます。
−−−−−−−−−−−−−−−−−−−−−−−
Received: by opeg.i2.pwd.ne.jp (Postfix, from userid 512) id ****
Subject: Re: [ABUSE REPORT] Fwd: been trying to contact you lately...
References: <****@stinky.commy.de> <****@mail.gmail.com>
From: tech-support@point.ne.jp
Content-Type: text/plain; charset=ISO-2022-JP
Message-Id: <20050612011723.1775883D45@opeg.i2.pwd.ne.jp>
Date: Sun, 12 Jun 2005 10:17:23 +0900 (JST)
※このメールは自動返信メールです。
いつもPowered Internet[POINT]をご利用下さいまして誠にありがとう
ございます。
Postmaster宛てにメールを頂戴しました。
Powered Internet[POINT]ではメールの送信の際、またはメールのご利用に
あたって何らかの問題があった場合に、Postmasterより自動的にエラー内容
をご案内しております。
Postmasterからエラーメールが返信される場合の一般的な原因は、以下の様
になっております。
1．宛先のご指定にお間違いがある場合
2．送信したメールのファイルサイズが、送信先メールボックスの空容量
より大きい場合
3．送信先のサーバーに不具合が発生している場合
また、英文でのエラーメッセージの和訳を下記のURLにてご紹介しております
ので、ご参照いただければ幸いです。
＜POINTコールセンター テクニカルサポートホームページ＞
http://www.cc.point.ne.jp/
お手数かとは存じますが、上記内容をご確認の上、再度お試し下さいます
でしょうか。なお、ご不明な点がございましたらPOINTコールセンターまで
お問い合わせ下さい。
今後ともPowered Internet[POINT]をご愛顧下さいますようお願い申し上げます。
―――――――――――――――――――――――――――――――――
Powered Internet[POINT]
◇インターネット・ホームページ http://www.point.ne.jp/
◇POINTコールセンター
〜サービス内容、契約内容の変更、料金のお問い合わせについては〜
TEL 0081-1588（無料／関東圏内）
または 0120-719-033（無料／関東圏外）
03-4316-4050（有料／海外／携帯電話・PHS）
受付時間 10:00〜21:00（平日）・10:00〜18:00（土日祝）
URL http://www.point.ne.jp/help/question/
〜接続方法やパソコン設定の技術的なお問合せは〜
TEL 0081-1589（無料／関東圏内）
または 0120−719−020（無料／関東圏外）
03-4314-5690（有料／海外／携帯電話・PHS）
受付時間 10:00〜21:00（年中無休）
URL http://www.point.ne.jp/help/question/
―――――――――――――――――――――――――――――――――
−−−−−−−−−−−−−−−−−−−−−−−
mail originated : 210.191.182.176 = [ fb176.opt2.point.ne.jp ]
target URL : www.random-hookups.com = www.get-lucky-tonight.com = www.getthemonline.com = www.dvdsforpleasure.com = [ 202.73.247.188] = hkabc.net (HKG) < namecheap.com
---- Forwarded PORN SPAM broadcasted from your host ----
Received: from fb176.opt2.point.ne.jp (fb176.opt2.point.ne.jp [210.191.182.176 ])
by **** with SMTP id ****
Received: from paranoid.commy.de (commy.de:2326 "EHLO brookline.commy.de"
ident: "root" smtp-auth: <none> TLS-CIPHER: <none>) by nic.dopant.fi
with ESMTP id <S8677AbRCaPug>; Sat, 11 Jun 2005 21:04:20 -0500
Message-ID: <****@stinky.commy.de >
From: "Lilly " <Cecil@afarre.com>
Subject: been trying to contact you lately...
X-Mailer: Mulberry/2.1.0a3 (Win32 Demo)
Looking to get the best quality adult dvd movies online?
With an archive of over 898GB's of movies to download!
You can't find a larger collection anywhere!
Download movies as fast as your internet can go.
Fullscreen, Best Resolution, Quality Sound.
----> http://www.dvdsforpleasure.com/dvds/
http://www.point.ne.jp/support/others/imp14.html
によると、↓ のような規則ができたそうですが、犯人を特定して罰金を徴収できるんでしょうか…。
弊社サービスを利用した迷惑メール送信について
最近、弊社サービスを利用して、迷惑メールを送信されるお客さまが見受けられます。
迷惑メールの送信につきましては、受信された方が不快に思うだけでなく、弊社設備に過大な負荷がかかる場合もあり、他のお客さまへの正常なサービス提供に支障をきたすこととなります。
弊社では、この迷惑メール撲滅に向けた取り組みといたしまして、迷惑メールを送信した場合には、その迷惑メールを送信した契約者に対して「迷惑メール1通につき100円(税込105円)」を、請求させていただきますので、何卒ご理解賜りますようお願い申し上げます。
−−−−−−−−−−−−−−−−−−−−−−−
Received: by opeg.i2.pwd.ne.jp (Postfix, from userid 512) id ****
Subject: Re: [ABUSE REPORT] Fwd: been trying to contact you lately...
References: <****@stinky.commy.de> <****@mail.gmail.com>
From: tech-support@point.ne.jp
Content-Type: text/plain; charset=ISO-2022-JP
Message-Id: <20050612011723.1775883D45@opeg.i2.pwd.ne.jp>
Date: Sun, 12 Jun 2005 10:17:23 +0900 (JST)
※このメールは自動返信メールです。
いつもPowered Internet[POINT]をご利用下さいまして誠にありがとう
ございます。
Postmaster宛てにメールを頂戴しました。
Powered Internet[POINT]ではメールの送信の際、またはメールのご利用に
あたって何らかの問題があった場合に、Postmasterより自動的にエラー内容
をご案内しております。
Postmasterからエラーメールが返信される場合の一般的な原因は、以下の様
になっております。
1．宛先のご指定にお間違いがある場合
2．送信したメールのファイルサイズが、送信先メールボックスの空容量
より大きい場合
3．送信先のサーバーに不具合が発生している場合
また、英文でのエラーメッセージの和訳を下記のURLにてご紹介しております
ので、ご参照いただければ幸いです。
＜POINTコールセンター テクニカルサポートホームページ＞
http://www.cc.point.ne.jp/
お手数かとは存じますが、上記内容をご確認の上、再度お試し下さいます
でしょうか。なお、ご不明な点がございましたらPOINTコールセンターまで
お問い合わせ下さい。
今後ともPowered Internet[POINT]をご愛顧下さいますようお願い申し上げます。
―――――――――――――――――――――――――――――――――
Powered Internet[POINT]
◇インターネット・ホームページ http://www.point.ne.jp/
◇POINTコールセンター
〜サービス内容、契約内容の変更、料金のお問い合わせについては〜
TEL 0081-1588（無料／関東圏内）
または 0120-719-033（無料／関東圏外）
03-4316-4050（有料／海外／携帯電話・PHS）
受付時間 10:00〜21:00（平日）・10:00〜18:00（土日祝）
URL http://www.point.ne.jp/help/question/
〜接続方法やパソコン設定の技術的なお問合せは〜
TEL 0081-1589（無料／関東圏内）
または 0120−719−020（無料／関東圏外）
03-4314-5690（有料／海外／携帯電話・PHS）
受付時間 10:00〜21:00（年中無休）
URL http://www.point.ne.jp/help/question/
―――――――――――――――――――――――――――――――――
−−−−−−−−−−−−−−−−−−−−−−−
mail originated : 210.191.182.176 = [ fb176.opt2.point.ne.jp ]
target URL : www.random-hookups.com = www.get-lucky-tonight.com = www.getthemonline.com = www.dvdsforpleasure.com = [ 202.73.247.188] = hkabc.net (HKG) < namecheap.com
---- Forwarded PORN SPAM broadcasted from your host ----
Received: from fb176.opt2.point.ne.jp (fb176.opt2.point.ne.jp [210.191.182.176 ])
by **** with SMTP id ****
Received: from paranoid.commy.de (commy.de:2326 "EHLO brookline.commy.de"
ident: "root" smtp-auth: <none> TLS-CIPHER: <none>) by nic.dopant.fi
with ESMTP id <S8677AbRCaPug>; Sat, 11 Jun 2005 21:04:20 -0500
Message-ID: <****@stinky.commy.de >
From: "Lilly " <Cecil@afarre.com>
Subject: been trying to contact you lately...
X-Mailer: Mulberry/2.1.0a3 (Win32 Demo)
Looking to get the best quality adult dvd movies online?
With an archive of over 898GB's of movies to download!
You can't find a larger collection anywhere!
Download movies as fast as your internet can go.
Fullscreen, Best Resolution, Quality Sound.
----> http://www.dvdsforpleasure.com/dvds/
今回は番外編です。
スパムの報告をする際、ヘッダだけという訳にも行きませんので、具体的な内容を相手に知らせるためにも、元のスパムメールの一部を添付せざるを得ませんが、あろうことか webmaster 等の担当者がメールボックスにアンチスパムフィルタを掛けていると、このように一般人が報告しても突き返されてしまい、連絡したくても連絡のしようがない事態に陥ってしまいます。
下に掲げる２例は、たまたま韓国のプロバイダだったという訳ではなく、まぁ韓国人特有のメンタリティが働いてこうなった、と思わせられる節が無いこともありません。実際、こんなアホな応答は韓国が多いんですから。
事ここに至った場合は已むを得ませんので、同国の機関である http://www.kisa.or.kr, http://www.certcc.or.kr に転送、上訴させて頂くことにしています。
後で、スパム報告を思慮なく送り返した担当者がどうなろうが、こっちの知ったこっちゃございません。彼らの身から出た錆ですから。
−−−−−−−−−−−−−−−−−−−−−−−−
【その１】コリアネット。誠に下品な返答文。
From: Mail Delivery Subsystem <mailer-daemon@gmail.com>
Subject: Delivery Status Notification (Failure)
This is an automatically generated Delivery Status Notification
Delivery to the following recipient failed permanently:
ip@ns.kornet.net
Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 13): 550 5.0.0 Deny porno/adv spam mail.,please Fuck yourself!!
−−−−−−−−−−−−−−−−−−−−−−−−
【その２】ドリームライン（CATVネット）。
From: Mail Delivery Subsystem <mailer-daemon@gmail.com>
Subject: Delivery Status Notification (Failure)
This is an automatically generated Delivery Status Notification
Delivery to the following recipient failed permanently:
abuse@dreamline.co.kr
Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 13): 553 Blocked for spam
スパムの報告をする際、ヘッダだけという訳にも行きませんので、具体的な内容を相手に知らせるためにも、元のスパムメールの一部を添付せざるを得ませんが、あろうことか webmaster 等の担当者がメールボックスにアンチスパムフィルタを掛けていると、このように一般人が報告しても突き返されてしまい、連絡したくても連絡のしようがない事態に陥ってしまいます。
下に掲げる２例は、たまたま韓国のプロバイダだったという訳ではなく、まぁ韓国人特有のメンタリティが働いてこうなった、と思わせられる節が無いこともありません。実際、こんなアホな応答は韓国が多いんですから。
事ここに至った場合は已むを得ませんので、同国の機関である http://www.kisa.or.kr, http://www.certcc.or.kr に転送、上訴させて頂くことにしています。
後で、スパム報告を思慮なく送り返した担当者がどうなろうが、こっちの知ったこっちゃございません。彼らの身から出た錆ですから。
−−−−−−−−−−−−−−−−−−−−−−−−
【その１】コリアネット。誠に下品な返答文。
From: Mail Delivery Subsystem <mailer-daemon@gmail.com>
Subject: Delivery Status Notification (Failure)
This is an automatically generated Delivery Status Notification
Delivery to the following recipient failed permanently:
ip@ns.kornet.net
Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 13): 550 5.0.0 Deny porno/adv spam mail.,please Fuck yourself!!
−−−−−−−−−−−−−−−−−−−−−−−−
【その２】ドリームライン（CATVネット）。
From: Mail Delivery Subsystem <mailer-daemon@gmail.com>
Subject: Delivery Status Notification (Failure)
This is an automatically generated Delivery Status Notification
Delivery to the following recipient failed permanently:
abuse@dreamline.co.kr
Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 13): 553 Blocked for spam
番外編その２です。
#33 でボロクソに書かせて頂いた、カナダの shawcable.net 。この１ヶ月間、無視されても無視されても、２日で３通のペースでスパムレポートを送り続けたところ、何の前ぶれもなく今朝突然、先方の担当者（surgeon ：外科医氏） から「遂に差出人を特定した」との連絡が入りました。
リンク先にトロイの木馬が仕込んであったとのこと。被害者の Microsoft 等にも CC: で連絡を欠かさなかった事が、効いたのかも知れません。
やる気になったら、できるじゃないの。（＾。＾）
−−−−−−−−−−−−−−−−−−−−−
Received: from coroner.sjrb.ca ([204.209.209.129])
by mx.gmail.com with ESMTP id ****
Received: from surgeon by coroner.sjrb.ca with local (Exim 4.43) id ****
Date: Mon, 13 Jun 2005 15:25:05 -0600
From: Shaw Internet Abuse <abuse-nonverbose@sjrb.ca>
Subject: RE: (68.149.163.203) [ABUSE REPORT] Fwd: Windows XP (0) is a great upgrade for users of the now-obsolete 9x and Me line
Message-ID: <20050613****@coroner.shaw.ca>
User-Agent: Mutt/1.5.6i
Sender: <surgeon@coroner.sjrb.ca>
Thank you for your information regarding the alleged violation of the Shaw Internet Acceptable Use Policy.
Based on the information provided, we have identified the offending computer and will take appropriate action(s).
These actions may be:
- Issue a warning by email indicating a complaint has been registered
- Issue a warning that service may be suspended if activity continues
- Suspend or terminate Shaw Internet connection to customer
If your message is in regard to any threat of violence, bodily harm, or other danger, please contact your local Law Enforcement Authorities immediately!
If you feel this case also consists of illegal activity, we encourage you to issue a formal complaint with your local Law Enforcement Authorities.
If warranted, Shaw will cooperate fully with the Law Enforcement Authorities involved.
Our AUP can be located at https://secure.shaw.ca/policy/Use-Policy.asp for reference.
Regards,
Acceptable Use Policy Management Team
Shaw High-Speed Internet Service
Shaw Cablesystems G.P.
2400 - 32nd Avenue N.E.
Calgary, Alberta, T2E 9A7
Telephone: (403)750-7420
Facsimile: (403)539-6831
https://secure.shaw.ca/policy/Use-Policy.asp
Please include all previous correspondence when replying.
AUP Surgeon Analysis
~~~~~~~~~~~~~~~~~~~~
Complaint Type: trojan spam
Dated from: 12 Jun 2005 16:32:09 -0600 to: 12 Jun 2005 16:32:09 -0600
--------------- Original Message --------------------
mail originated : [68.149.163.203] = [S010600023f7c03a4.ed.shawcable.net]
target URL : lessfish.com [222.36.42.125] < [222.32.0.0 - 222.63.255.255] = CHINA RAILWAY TELECOMMUNICATIONS CENTER
----- Forwarded illegal COPY SOFTWARE SPAM of your host -----
http://4awhipsaw.lessfish.com/?F356979ea67bF539ad80Gb4ed4d7e2c8
***Also on sale:
Photoshop 8/CS $80
Macromedia MX $180
Nero 6.3 Pro $40
Roxio Easy CD 6 $30
MS Windows 2000 $50
MS SQL 2000 EE $200
Visual Studio.NET $200
pcAnywhere 11.0 $80
WinFaxPro v10.3 $40
Illustrator 11/CS $90
QuarkXPress 6 $60
PageMaker 7 $60
CorelDraw 12 $120
Norton AntiVirus $15 【以下略】
#33 でボロクソに書かせて頂いた、カナダの shawcable.net 。この１ヶ月間、無視されても無視されても、２日で３通のペースでスパムレポートを送り続けたところ、何の前ぶれもなく今朝突然、先方の担当者（surgeon ：外科医氏） から「遂に差出人を特定した」との連絡が入りました。
リンク先にトロイの木馬が仕込んであったとのこと。被害者の Microsoft 等にも CC: で連絡を欠かさなかった事が、効いたのかも知れません。
やる気になったら、できるじゃないの。（＾。＾）
−−−−−−−−−−−−−−−−−−−−−
Received: from coroner.sjrb.ca ([204.209.209.129])
by mx.gmail.com with ESMTP id ****
Received: from surgeon by coroner.sjrb.ca with local (Exim 4.43) id ****
Date: Mon, 13 Jun 2005 15:25:05 -0600
From: Shaw Internet Abuse <abuse-nonverbose@sjrb.ca>
Subject: RE: (68.149.163.203) [ABUSE REPORT] Fwd: Windows XP (0) is a great upgrade for users of the now-obsolete 9x and Me line
Message-ID: <20050613****@coroner.shaw.ca>
User-Agent: Mutt/1.5.6i
Sender: <surgeon@coroner.sjrb.ca>
Thank you for your information regarding the alleged violation of the Shaw Internet Acceptable Use Policy.
Based on the information provided, we have identified the offending computer and will take appropriate action(s).
These actions may be:
- Issue a warning by email indicating a complaint has been registered
- Issue a warning that service may be suspended if activity continues
- Suspend or terminate Shaw Internet connection to customer
If your message is in regard to any threat of violence, bodily harm, or other danger, please contact your local Law Enforcement Authorities immediately!
If you feel this case also consists of illegal activity, we encourage you to issue a formal complaint with your local Law Enforcement Authorities.
If warranted, Shaw will cooperate fully with the Law Enforcement Authorities involved.
Our AUP can be located at https://secure.shaw.ca/policy/Use-Policy.asp for reference.
Regards,
Acceptable Use Policy Management Team
Shaw High-Speed Internet Service
Shaw Cablesystems G.P.
2400 - 32nd Avenue N.E.
Calgary, Alberta, T2E 9A7
Telephone: (403)750-7420
Facsimile: (403)539-6831
https://secure.shaw.ca/policy/Use-Policy.asp
Please include all previous correspondence when replying.
AUP Surgeon Analysis
~~~~~~~~~~~~~~~~~~~~
Complaint Type: trojan spam
Dated from: 12 Jun 2005 16:32:09 -0600 to: 12 Jun 2005 16:32:09 -0600
--------------- Original Message --------------------
mail originated : [68.149.163.203] = [S010600023f7c03a4.ed.shawcable.net]
target URL : lessfish.com [222.36.42.125] < [222.32.0.0 - 222.63.255.255] = CHINA RAILWAY TELECOMMUNICATIONS CENTER
----- Forwarded illegal COPY SOFTWARE SPAM of your host -----
http://4awhipsaw.lessfish.com/?F356979ea67bF539ad80Gb4ed4d7e2c8
***Also on sale:
Photoshop 8/CS $80
Macromedia MX $180
Nero 6.3 Pro $40
Roxio Easy CD 6 $30
MS Windows 2000 $50
MS SQL 2000 EE $200
Visual Studio.NET $200
pcAnywhere 11.0 $80
WinFaxPro v10.3 $40
Illustrator 11/CS $90
QuarkXPress 6 $60
PageMaker 7 $60
CorelDraw 12 $120
Norton AntiVirus $15 【以下略】
スパム報告は発信元ホストだけでなく、許す限りリンク先のホストへも報告するように心掛けています。
接続するプロバイダのアカウントは即日オンライン入会でき試用無料の場合も多く、スパマーにとって躊躇いなく使い捨てることもできますが、ドメインの確保とその作成維持にはそれなりの金と手間暇がかかるものですから、もしホストの協力を得てリンク先を不正使用で潰して行くことができれば、間接的にスパマーを追い詰める、或いはその活動範囲を狭めることも期待できます。
ここは米の弱小ネット。自動返答ですが、その後リンク先は強制削除されましたので、地元のネットを愛用していた間抜けなスパマーには打撃になったでしょう。
Received: from gollum.dreamhost.com (gollum.dreamhost.com [66.33.209.16])
Received: by gollum.dreamhost.com (Postfix, from userid 65534)
From: "DreamHost Abuse Team" <abuse@dreamhost.com>
Subject: Regarding your DreamHost Abuse message...
Hello!
This is an automated reply. Please carefully read the information below so that we may best address your complaint. To avoid this message in the future, you may use abuse-replies@dreamhost.com.
Due to the volume of complaints we receive daily we cannot guarantee a personal response to each message we receive. However, we will endeavor to reply to individual inquiries in cases where a personal response is requested or necessary. Otherwise, please rest assured that we will take necessary action to ensure our Terms of Service (as well as applicable US/state laws) are being respected.
Thank you,
- DreamHost Abuse Team
接続するプロバイダのアカウントは即日オンライン入会でき試用無料の場合も多く、スパマーにとって躊躇いなく使い捨てることもできますが、ドメインの確保とその作成維持にはそれなりの金と手間暇がかかるものですから、もしホストの協力を得てリンク先を不正使用で潰して行くことができれば、間接的にスパマーを追い詰める、或いはその活動範囲を狭めることも期待できます。
ここは米の弱小ネット。自動返答ですが、その後リンク先は強制削除されましたので、地元のネットを愛用していた間抜けなスパマーには打撃になったでしょう。
Received: from gollum.dreamhost.com (gollum.dreamhost.com [66.33.209.16])
Received: by gollum.dreamhost.com (Postfix, from userid 65534)
From: "DreamHost Abuse Team" <abuse@dreamhost.com>
Subject: Regarding your DreamHost Abuse message...
Hello!
This is an automated reply. Please carefully read the information below so that we may best address your complaint. To avoid this message in the future, you may use abuse-replies@dreamhost.com.
Due to the volume of complaints we receive daily we cannot guarantee a personal response to each message we receive. However, we will endeavor to reply to individual inquiries in cases where a personal response is requested or necessary. Otherwise, please rest assured that we will take necessary action to ensure our Terms of Service (as well as applicable US/state laws) are being respected.
Thank you,
- DreamHost Abuse Team
日本のプロバイダが、海外スパマーの踏み台にされる事も少なくありません。これは有線ブロードネットワークスからの返答ですが、今まで（直近１ヶ月で６通）英語スパムに対しては英語でレポートし続けたものの全く音沙汰なく、国内発のエロ架空請求スパムに対して初めて日本語で書いたところ、どうしたことか即日連絡して来ました。
−−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from frwd.usen.ad.jp (frwd.usen.ad.jp [221.112.20.16])
Received: from mail.usen.ad.jp (mail.usen.ad.jp [61.122.116.151])
by frwd.usen.ad.jp (Postfix) with ESMTP id ****
Received: from [172.17.82.197] (unknown [61.122.114.230])
by mail.usen.ad.jp (Postfix) with ESMTP
Received: from 172.17.82.197 (172.17.82.197)
by Trustream_SSG-600 (F-Secure/virusgw_smtp/210/Trustream_SSG-600);
X-Virus-Status: clean(F-Secure/virusgw_smtp/210/Trustream_SSG-600)
Date: ****
From: abuse <abuse@fttx.co.jp>
To: ****@***.com
Subject:
Cc: abuse@fttx.co.jp
Message-Id: <2005****ABUSE@fttx.co.jp>
X-Mailer: Becky! ver. 2.20.01 [ja]
****@****.com 様
拝啓 時下、ますますご清祥のこととお喜び申し上げます。
この度はお問い合わせをいただき、有難う御座いました。
ご指摘につきましては、弊社側にて調査・対処させて頂き
ます。ご報告、有難う御座いました。
多数の問合せをいただいているため、対処に時間がかかる場合が
ございます。何卒ご了承頂きますようお願い致します。
ご不明な点がございましたら、abuse@fttx.co.jp まで
お問い合わせください。
敬具
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
株式会社 ユーズコミュニケーションズ
カスタマーサポートセンター
URL: http://www.fttx.co.jp/
迷惑行為などに関する対応について
http://www.fttx.co.jp/jp/contact/abuse.html
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
−−−−−−−−−−−−−−−−−−−−−−−−−−
Received: from frwd.usen.ad.jp (frwd.usen.ad.jp [221.112.20.16])
Received: from mail.usen.ad.jp (mail.usen.ad.jp [61.122.116.151])
by frwd.usen.ad.jp (Postfix) with ESMTP id ****
Received: from [172.17.82.197] (unknown [61.122.114.230])
by mail.usen.ad.jp (Postfix) with ESMTP
Received: from 172.17.82.197 (172.17.82.197)
by Trustream_SSG-600 (F-Secure/virusgw_smtp/210/Trustream_SSG-600);
X-Virus-Status: clean(F-Secure/virusgw_smtp/210/Trustream_SSG-600)
Date: ****
From: abuse <abuse@fttx.co.jp>
To: ****@***.com
Subject:
Cc: abuse@fttx.co.jp
Message-Id: <2005****ABUSE@fttx.co.jp>
X-Mailer: Becky! ver. 2.20.01 [ja]
****@****.com 様
拝啓 時下、ますますご清祥のこととお喜び申し上げます。
この度はお問い合わせをいただき、有難う御座いました。
ご指摘につきましては、弊社側にて調査・対処させて頂き
ます。ご報告、有難う御座いました。
多数の問合せをいただいているため、対処に時間がかかる場合が
ございます。何卒ご了承頂きますようお願い致します。
ご不明な点がございましたら、abuse@fttx.co.jp まで
お問い合わせください。
敬具
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
株式会社 ユーズコミュニケーションズ
カスタマーサポートセンター
URL: http://www.fttx.co.jp/
迷惑行為などに関する対応について
http://www.fttx.co.jp/jp/contact/abuse.html
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
＞ASL さん フォロー有り難うございます。
以前、海外の複数のプロバイダから「毎日多数のお問い合わせを頂いているので、個別の返答は致しかねる」旨の自動応答を受け取った事があり、文面から全く期待薄だと思っていましたが（しかし本当に対処してくれる場合もあった）、事情は国内でも五十歩百歩なのかも知れません。
もし国内→国内のスパムの場合には、普段我々が使っているプロバイダに電話して「【例】 USEN からスパムが来て来て、仕事に差し支えて困っている、何とかしてくれ」と怒鳴り散らすと、時間は掛りますがメールで事務的に報告するよりずっと、何とかしてくれた事もありました。
心当りのある方は、この手段もお試し下さい。
以前、海外の複数のプロバイダから「毎日多数のお問い合わせを頂いているので、個別の返答は致しかねる」旨の自動応答を受け取った事があり、文面から全く期待薄だと思っていましたが（しかし本当に対処してくれる場合もあった）、事情は国内でも五十歩百歩なのかも知れません。
もし国内→国内のスパムの場合には、普段我々が使っているプロバイダに電話して「【例】 USEN からスパムが来て来て、仕事に差し支えて困っている、何とかしてくれ」と怒鳴り散らすと、時間は掛りますがメールで事務的に報告するよりずっと、何とかしてくれた事もありました。
心当りのある方は、この手段もお試し下さい。
MCI Worldcom から、韓国産 FAKE ROLEX に対する一応番号付きの自動返答。「全ての報告に目を通している暇はない」とハッキリ書いてあります。
"Return-Path: <nobody@uu.net>", "Precedence: junk " と書いて来るあたり、堂々としているというか。そんな横柄な態度だから、粉飾決算で会社が潰れたのよ。
−−−−−−−−−−−−−−−−−−−−−−−−
Received: from omzesmtp01.mci.com (omzesmtp01.mci.com [199.249.17.7])
Received: from cmr0.ash.ops.us.uu.net ([198.5.241.38])
by firewall.mci.com (Iplanet MTA 5.2)
with ESMTP id <****@firewall.mci.com> for ****@gmail.com; Thu,
Received: from iaremedy.corp.us.uu.net by cmr0.ash.ops.us.uu.net with ESMTP
(peer crosschecked as: iaremedy.corp.us.uu.net [153.39.95.139])
Received: by iaremedy.corp.us.uu.net id ****
Date: Thu, 19 May 2005 02:07:59 -0400 (EDT)
From: no-replies-please@mci.com (MCI Internet Abuse Investigations)
Return-Path: <nobody@uu.net>
Subject: Re: Fwd: Rolex is not for everyone, it`s for you Patti (B-TSI-018857472)
In-reply-to: Your message of "Thu, 19 May 2005 14:57:37 +0900"
<<4c11d911050518225774b021d4@mail.gmail.com>>
To: **** <****@****.com>
Errors-to: no-replies-please@mci.com
Reply-to: no-replies-please@mci.com
Message-id: <****@iaremedy.corp.us.uu.net>
Precedence: junk
Greetings,
Thank you for taking the time to submit your message regarding "Fwd: Rolex is not for everyone, it`s for you Patti" to MCI's Internet Abuse Investigations Team. We take your input very seriously.
Please be advised that you are reading an automatically generated reply to acknowledge the receipt of your recently submitted message to us. Due to the large volume of correspondence we receive, we cannot guarantee a personal reply to each report that we receive. This may be the only response you will see, but rest assured that we investigate every report that we receive. If your message is in regard to any threat of violence, bodily harm, or other danger, please contact your local law enforcement authorities immediately!
Please do not reply directly to this message, as the return address has been configured to prevent e-mail loops should your software auto-respond to inbound e-mail. Please keep in mind that MCI will not see any reply sent directly to this acknowledgement.
To ensure the best possible customer service, please refer to ticket number B-TSI-018857472 in all future correspondence with our Team, or should you call the Internet Customer Care Center. For your convenience we have included it in the Subject line of this message.
Please keep the following points in mind for future reference;
* If you wish to report a copyright violation pursuant to the Digital Millennium Copyright Act, please send your message directly to:
copyright@mci.com
* When submitting complaints about e-mail abuse, please forward the entire set of e-mail headers intact.
* You may call MCI's Internet Customer Care Center, toll free at 1-800-900-0241, 24 hours a day, seven days a week. Please refer to the ticket number located in the subject line of this message.
* To view MCI's Acceptable Use Policy (AUP), please go to:
http://www.mci.com/terms/a_u_p/
Best Regards,
MCI Internet Abuse Investigations Team
"Return-Path: <nobody@uu.net>", "Precedence: junk " と書いて来るあたり、堂々としているというか。そんな横柄な態度だから、粉飾決算で会社が潰れたのよ。
−−−−−−−−−−−−−−−−−−−−−−−−
Received: from omzesmtp01.mci.com (omzesmtp01.mci.com [199.249.17.7])
Received: from cmr0.ash.ops.us.uu.net ([198.5.241.38])
by firewall.mci.com (Iplanet MTA 5.2)
with ESMTP id <****@firewall.mci.com> for ****@gmail.com; Thu,
Received: from iaremedy.corp.us.uu.net by cmr0.ash.ops.us.uu.net with ESMTP
(peer crosschecked as: iaremedy.corp.us.uu.net [153.39.95.139])
Received: by iaremedy.corp.us.uu.net id ****
Date: Thu, 19 May 2005 02:07:59 -0400 (EDT)
From: no-replies-please@mci.com (MCI Internet Abuse Investigations)
Return-Path: <nobody@uu.net>
Subject: Re: Fwd: Rolex is not for everyone, it`s for you Patti (B-TSI-018857472)
In-reply-to: Your message of "Thu, 19 May 2005 14:57:37 +0900"
<<4c11d911050518225774b021d4@mail.gmail.com>>
To: **** <****@****.com>
Errors-to: no-replies-please@mci.com
Reply-to: no-replies-please@mci.com
Message-id: <****@iaremedy.corp.us.uu.net>
Precedence: junk
Greetings,
Thank you for taking the time to submit your message regarding "Fwd: Rolex is not for everyone, it`s for you Patti" to MCI's Internet Abuse Investigations Team. We take your input very seriously.
Please be advised that you are reading an automatically generated reply to acknowledge the receipt of your recently submitted message to us. Due to the large volume of correspondence we receive, we cannot guarantee a personal reply to each report that we receive. This may be the only response you will see, but rest assured that we investigate every report that we receive. If your message is in regard to any threat of violence, bodily harm, or other danger, please contact your local law enforcement authorities immediately!
Please do not reply directly to this message, as the return address has been configured to prevent e-mail loops should your software auto-respond to inbound e-mail. Please keep in mind that MCI will not see any reply sent directly to this acknowledgement.
To ensure the best possible customer service, please refer to ticket number B-TSI-018857472 in all future correspondence with our Team, or should you call the Internet Customer Care Center. For your convenience we have included it in the Subject line of this message.
Please keep the following points in mind for future reference;
* If you wish to report a copyright violation pursuant to the Digital Millennium Copyright Act, please send your message directly to:
copyright@mci.com
* When submitting complaints about e-mail abuse, please forward the entire set of e-mail headers intact.
* You may call MCI's Internet Customer Care Center, toll free at 1-800-900-0241, 24 hours a day, seven days a week. Please refer to the ticket number located in the subject line of this message.
* To view MCI's Acceptable Use Policy (AUP), please go to:
http://www.mci.com/terms/a_u_p/
Best Regards,
MCI Internet Abuse Investigations Team
ハングル（諺文）の Unicode 表記は化けるかな…。
Hanaro Telecom からの返答、その２。
内容は英文と同一で、文句があるなら韓国情報保護振興院の担当部署に言ってくれ、と開き直っています。
http://www.certcc.or.kr/japaness/main.htm
なぜか日本語ページまで用意されています。日本からの苦情が多いからでしょうか。
Received: from wmail.hanaro.com (wmail.hanaro.com [211.58.57.10])
Received: from [210.94.0.250] ([210.94.0.250])
by wmail.hanaro.com ([211.58.57.10])
Received: from [221.139.14.3] (abuse@hanaro.com) by
nmail.hanaro.com (Terrace Internet Messaging Server)
Message-ID: <****.JavaMail.csagent@HAMS>
From: abuse@hanaro.com
To: ****@****.com
Subject: Re: [ABUSE REPORT] Fwd: Need reliable virus protection? We have it. leila
X-TERRACE-SPAMMARK: NO (SR:15.90) (by Terrace)
안녕하십니까? 하나로 텔레콤 Security 관련 담당자입니다.
해킹 및 바이러스 신고 건은 한국 정보보호 진흥원 (KISA : WWW.KISA.OR.KR )을
통하여 접수 받고 있으므로 먼저 한국 정보보호 진흥원의 침해사고 접수/처리( cert@certcc.or.kr )
로 신고하여 주시기 바랍니다.
■하나로 텔레콤 Security 담당 : Security@hanaro.com
[Message]
Dear Sir
I am a Security Administrator in HTI.
The cases of Hacking or Virus accidents are treated by Korea Information Security Agency (WWW.KISA.OR.KR).
So report it preferentially to The KOREA Computer Emergency Response Team and
Coordination Center (CERTCC-KR : cert@certcc.or.kr).
■Hanaro telecom Inc. Security Admin : Security@hanaro.com
Hanaro Telecom からの返答、その２。
内容は英文と同一で、文句があるなら韓国情報保護振興院の担当部署に言ってくれ、と開き直っています。
http://www.certcc.or.kr/japaness/main.htm
なぜか日本語ページまで用意されています。日本からの苦情が多いからでしょうか。
Received: from wmail.hanaro.com (wmail.hanaro.com [211.58.57.10])
Received: from [210.94.0.250] ([210.94.0.250])
by wmail.hanaro.com ([211.58.57.10])
Received: from [221.139.14.3] (abuse@hanaro.com) by
nmail.hanaro.com (Terrace Internet Messaging Server)
Message-ID: <****.JavaMail.csagent@HAMS>
From: abuse@hanaro.com
To: ****@****.com
Subject: Re: [ABUSE REPORT] Fwd: Need reliable virus protection? We have it. leila
X-TERRACE-SPAMMARK: NO (SR:15.90) (by Terrace)
안녕하십니까? 하나로 텔레콤 Security 관련 담당자입니다.
해킹 및 바이러스 신고 건은 한국 정보보호 진흥원 (KISA : WWW.KISA.OR.KR )을
통하여 접수 받고 있으므로 먼저 한국 정보보호 진흥원의 침해사고 접수/처리( cert@certcc.or.kr )
로 신고하여 주시기 바랍니다.
■하나로 텔레콤 Security 담당 : Security@hanaro.com
[Message]
Dear Sir
I am a Security Administrator in HTI.
The cases of Hacking or Virus accidents are treated by Korea Information Security Agency (WWW.KISA.OR.KR).
So report it preferentially to The KOREA Computer Emergency Response Team and
Coordination Center (CERTCC-KR : cert@certcc.or.kr).
■Hanaro telecom Inc. Security Admin : Security@hanaro.com
MCI Worldcom から、どういう訳か今まで受け取った物とは別フォーマットの返答が届きました。
当月に入ってからも既に11通も報告していましたが、常に #51 の自動返答が事務的に返されてくるだけなので、徒労続きに実は give up しかけていたのですが、担当者がやっと聞く耳を持ってくれたのでしょうか。
因みに今回の対象スパムは、subject の通り男性増大薬（もちろん詐欺）。
−−−−−−−−−−−−−−−−−−−−−−−
From: etms-no-replies@mci.com <etms-no-replies@mci.com>
TO: **** <****@***.com>
Date: 2005/06/21 21:59
Subject: Re: 200506**** [ABUSE REPORT] Fwd: Get Bigger Pennis 229gs
** THE RETURN ADDRESS ON THIS MAIL HAS BEEN SET TO PREVENT MAIL LOOPS IN THE EVENT YOU ARE RUNNING SOFTWARE WHICH AUTO-REPLIES TO INBOUND MAIL. MCI WILL NOT SEE ANY REPLY SENT TO THIS EMAIL. WHEN REPLYING, PLEASE REPLY TO help4u@mci.com AND INCLUDE YOUR TICKET 200506**** IN THE SUBJECT LINE. **
Dear MCI Customer,
We have received your correspondence and forwarded it to the appropriate personnel for processing.
To help us provide you with the best possible service, please refer to trouble ticket number 20050**** in all email or phone correspondence regarding this matter. For your convenience, we have included it in the Subject line of this message, and will do so in any future email correspondence. If you should need assistance in the future on a different issue, please do not re-use this same ticket number.
Thank you,
MCI Technical Support
help4u@mci.com
Toll-free: 1-800-900-0241
International: +1 703-886-5440
http://www.mci.com/
当月に入ってからも既に11通も報告していましたが、常に #51 の自動返答が事務的に返されてくるだけなので、徒労続きに実は give up しかけていたのですが、担当者がやっと聞く耳を持ってくれたのでしょうか。
因みに今回の対象スパムは、subject の通り男性増大薬（もちろん詐欺）。
−−−−−−−−−−−−−−−−−−−−−−−
From: etms-no-replies@mci.com <etms-no-replies@mci.com>
TO: **** <****@***.com>
Date: 2005/06/21 21:59
Subject: Re: 200506**** [ABUSE REPORT] Fwd: Get Bigger Pennis 229gs
** THE RETURN ADDRESS ON THIS MAIL HAS BEEN SET TO PREVENT MAIL LOOPS IN THE EVENT YOU ARE RUNNING SOFTWARE WHICH AUTO-REPLIES TO INBOUND MAIL. MCI WILL NOT SEE ANY REPLY SENT TO THIS EMAIL. WHEN REPLYING, PLEASE REPLY TO help4u@mci.com AND INCLUDE YOUR TICKET 200506**** IN THE SUBJECT LINE. **
Dear MCI Customer,
We have received your correspondence and forwarded it to the appropriate personnel for processing.
To help us provide you with the best possible service, please refer to trouble ticket number 20050**** in all email or phone correspondence regarding this matter. For your convenience, we have included it in the Subject line of this message, and will do so in any future email correspondence. If you should need assistance in the future on a different issue, please do not re-use this same ticket number.
Thank you,
MCI Technical Support
help4u@mci.com
Toll-free: 1-800-900-0241
International: +1 703-886-5440
http://www.mci.com/
スゥェーデンから、盗撮物スパムの報告に対する自動返答。素っ気ない文面です。
Received: from mls.telia.net (mls.telia.net [194.237.170.103])
Received: from arma2.telia.net (arma2.telia.net [194.237.170.119])
by mls.telia.net (Postfix) with SMTP id ****
Subject: [ABUSE REPORT] Fwd: it's julie again -)
To: **** <***@****.com>
Content-Transfer-Encoding: quoted-printable
Date: Wed, 22 Jun 2005 12:17:56 +0200
From: noreply@telia.net
Message-Id: <200506****@mls.telia.net>
−−−−−−−−−−−−−−−−−−−−−−−−
OBS: Detta är ett automatiskt genererat mail och kan ej besvaras
OBS: This is an automatic generated e-mail. You can´t reply
Tack för ditt e-brev!
Vi har nu tagit emot din förfrågan och
vi kommer att åtgärda din anmälan så fort vi kan.
Anmäler du ett netikettbrott vill vi att du skickar in
brevhuvud (header) eller loggfiler som vi kan använda
för att spåra händelsen. Det vi behöver är IP-adress,
datum, tid och tidszon för att kunna spåra händelsen.
En icke komplett anmälan kan ej åtgärdas.
Observera att det är mycket viktigt att du anger hur
mycket din dators klocka går fel om du skickar en loggfil,
eftersom loggprogram använder sig av din dators tidsangivelser.
Vi kan spåra händelser som genererats från Telias Internettjänster.
Alla Internetoperatörer har egna Abuse-avdelningar,
varför du bör vända dig till Abuse på respektive domän
för anmälningar som inte kommer från Telia.
Mängden inkomna ärenden samt den tid utredningarna tar i
anspråk gör att vi har små möjligheter att ge återkoppling
på din anmälan, vilket vi beklagar. Alla ärenden granskas
och vi kommer att spåra och vidta åtgärder om det visar
sig att någon av Telias kunder brutit mot avtalsvillkoren,
lagen eller gällande Netikett.
Med vänlig hälsning
Telia Networks
Network Security
abuse@telia.com
Thank you for your e-mail. We will look into your question and
we will take appropriate action as soon as possible.
If you are reporting Internet abuse, please don't forget to
include a mailheader or a logfile, which we need to trace
the incident.We need the IP-address, date, time and timezone
to trace the incident.
We´re unable to investigate an incomplete report.
Please also inform us how much your computer's clock differs
from the correct time, and inform us what time zone you're in.
Depending on the volume of complaints and the time involved
in investigating these issues, we may not be able to respond
to your complaint beyond this note. We apologize for any
inconvenience this may cause. Please be assured that we take
your complaints very seriously.
Yours sincerely
TeliaSoneraSweden
Network Security
abuse@telia.com
Received: from mls.telia.net (mls.telia.net [194.237.170.103])
Received: from arma2.telia.net (arma2.telia.net [194.237.170.119])
by mls.telia.net (Postfix) with SMTP id ****
Subject: [ABUSE REPORT] Fwd: it's julie again -)
To: **** <***@****.com>
Content-Transfer-Encoding: quoted-printable
Date: Wed, 22 Jun 2005 12:17:56 +0200
From: noreply@telia.net
Message-Id: <200506****@mls.telia.net>
−−−−−−−−−−−−−−−−−−−−−−−−
OBS: Detta är ett automatiskt genererat mail och kan ej besvaras
OBS: This is an automatic generated e-mail. You can´t reply
Tack för ditt e-brev!
Vi har nu tagit emot din förfrågan och
vi kommer att åtgärda din anmälan så fort vi kan.
Anmäler du ett netikettbrott vill vi att du skickar in
brevhuvud (header) eller loggfiler som vi kan använda
för att spåra händelsen. Det vi behöver är IP-adress,
datum, tid och tidszon för att kunna spåra händelsen.
En icke komplett anmälan kan ej åtgärdas.
Observera att det är mycket viktigt att du anger hur
mycket din dators klocka går fel om du skickar en loggfil,
eftersom loggprogram använder sig av din dators tidsangivelser.
Vi kan spåra händelser som genererats från Telias Internettjänster.
Alla Internetoperatörer har egna Abuse-avdelningar,
varför du bör vända dig till Abuse på respektive domän
för anmälningar som inte kommer från Telia.
Mängden inkomna ärenden samt den tid utredningarna tar i
anspråk gör att vi har små möjligheter att ge återkoppling
på din anmälan, vilket vi beklagar. Alla ärenden granskas
och vi kommer att spåra och vidta åtgärder om det visar
sig att någon av Telias kunder brutit mot avtalsvillkoren,
lagen eller gällande Netikett.
Med vänlig hälsning
Telia Networks
Network Security
abuse@telia.com
Thank you for your e-mail. We will look into your question and
we will take appropriate action as soon as possible.
If you are reporting Internet abuse, please don't forget to
include a mailheader or a logfile, which we need to trace
the incident.We need the IP-address, date, time and timezone
to trace the incident.
We´re unable to investigate an incomplete report.
Please also inform us how much your computer's clock differs
from the correct time, and inform us what time zone you're in.
Depending on the volume of complaints and the time involved
in investigating these issues, we may not be able to respond
to your complaint beyond this note. We apologize for any
inconvenience this may cause. Please be assured that we take
your complaints very seriously.
Yours sincerely
TeliaSoneraSweden
Network Security
abuse@telia.com
- mixiユーザー
- ログインしてコメントしよう！
|
|
|
|
スパムメール料理法 更新情報
-
最新のイベント
-
まだ何もありません
-
-
最新のアンケート
-
まだ何もありません
-
スパムメール料理法のメンバーはこんなコミュニティにも参加しています
人気コミュニティランキング
- 1位
- 30代〜40代から友達作り【友活】
- 35885人
- 2位
- 酒好き
- 172004人
- 3位
- 写真を撮るのが好き
- 209877人