KORNET - Major spamhaus. Spam comes from all around of their IP space, and comes daily, unstoppable, despite on my numerous complaints. And Kornet finally begun to refuse spam complaints, cause they contain spam! [61.72.0.0 - 61.85.255.255], [61.96.0.0 - 61.111.255.255], [61.248.0.0 - 61.255.255.255], [128.134.0.0 - 128.134.255.255], [166.104.0.0 - 166.104.255.255], [168.126.0.0 - 168.126.255.255], [203.248.0.0 - 203.255.255.255], [210.90.0.0 - 210.127.255.255], [210.178.0.0 - 210.183.255.255], [210.204.0.0 - 210.207.255.255], [210.216.0.0 - 210.223.255.255], [211.32.0.0 - 211.63.255.255], [211.104.0.0 - 211.119.255.255], [211.168.0.0 - 211.255.255.255], [218.144.0.0 - 218.159.255.255], [220.72.0.0 - 220.95.255.255], [220.116.0.0 - 220.127.255.255], [221.144.0.0 - 221.168.255.255]: Access denied! === One of my complaints === Message-Id: <200112271646.fBRGkGs13713@mail.dolphinwave.org> Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse-2001@dolphinwave.org Organization: Private person To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, abuse@thrunet.com, postmaster@thrunet.com, youngkim@thrunet.com, chosy@thrunet.com, abuse@lycos.co.kr, opcenter@inempire.com, abuse@bora.net, domain@interpia98.net Subject: [email] Long-time KORNET spammers! [Fwd: =?iso-8859-1?b?W7E/sO1dP7rAzj8/yK0=?=,=?iso-8859-1?b?v7XIrSC1t7O7sO0guj8/P7/kPyC/qbHk?= =?iso-8859-1?b?ILD4wqXAzrWlISFd?= Date: Thu, 27 Dec 2001 18:46:17 +0200 X-Mailer: KMail [version 1.3.2] X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-PGP-key: 0xAAE2A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Status: R X-Status: N Spammer: [211.109.97.231] Thrunet IP block [211.109.97.0 - 211.109.97.255]. Mail from: returnad11@lycos.co.kr Spamvertised web page: http://www.imars.co.kr [211.174.63.246] KIDC-INFRA - INEMPIRE IP block [211.174.60.000 - 211.174.63.255]. Upstream: Bora.net (sel12012gw1-pos2-2-c.rt.bora.net). ---------- Forwarded Message ---------- Received: from [211.109.97.231] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id ragqfaaa for <###>; Thu, 27 Dec 2001 18:38:55 +0200 Reply-To: returnad11@lycos.co.kr Return-Path: returnad11@lycos.co.kr From: To: ### Subject: [占쏙옙화,화 占쏙옙 占승ο옙!! Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Fri, 28 Dec 2001 01:23:55 +0900 Message-Id: <16385523468703@lycos.co.kr> Status: R X-Status: N mail
 
*占싱�
         ::4~40占쏙옙 ,占� v占�
*橘호
         :: 3~20占쏙옙 ,占� v占�  
*橘호 확占�
  
*E-mail
 *占쏙옙占� 占쏙옙占시깍옙 帽求占�  
*占�
   
*占싸듸옙호
 -

占� 占쏙옙 颯占쏙옙譴퓐占싫몌옙占쏙옙 駕4求占쏙옙占쏙옙 占쏙옙/占� 占쏙옙占쏙옙駕첼占폹r> [Mars] 키탄占쏙옙첨x占� 占�/font> 클占쏙옙
Copyright 占�2001 Mars Inc . All right reserved 恣댐옙占�: 02)2141-0433
------------------------------------------------------- ======= PREVIOUS SPAM HEADERS ======= Received: from [211.174.59.122] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id sdkkfaaa for <###>; Fri, 9 Nov 2001 16:21:53 +0200 Date: Fri Nov 09 23:14:02 GMT+09:00 2001 Subject: 占식� 占쏙옙占�*占�*; 占�4求占�[占� From: "占�*關占�" To: ### MIME-Version: 1.0 Content-type: text/html; charset=euc-kr Content-transfer-encoding: 8bit X-Mailer: Netpion Messaging Server v1.5.5 X-NetpionMsgID: 1005315242406.10150.1.1.882510 Message-Id: <14215379921592@return.netimore.com> Status: R X-Status: N Received: from [211.229.82.180] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id rqlbfaaa for <###>; Fri, 5 Oct 2001 01:26:18 +0200 Reply-To: junjihyunboji@yahoo.co.kr Return-Path: junjihyunboji@yahoo.co.kr From: AV To: ### Subject: [占쏙옙占� 棅逃占쏙옙트訶占�!! Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Fri, 5 Oct 2001 08:31:41 +0900 Message-Id: <23261828139233@yahoo.co.kr> Status: R X-Status: N Received: from [211.55.33.239] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id rcrkfaaa for <###>; Mon, 12 Nov 2001 21:02:43 +0200 Received: (from iuser@localhost) by localhost.localdomain (8.10.1/8.10.1) id fADCVjW19805; Tue, 13 Nov 2001 03:31:45 -0900 Date: Tue, 13 Nov 2001 03:31:45 -0900 Message-Id: <200111131231.fADCVjW19805@localhost.localdomain> To: ### From: ad@69timetv.com Subject: [占�*占싫�채占� 占폢0체탐占� 占쏙옙 占싣�!!! Content-Type: text/html; charset=ks_c_5601-1987 Status: R X-Status: N Received: from [61.82.102.130] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id xcylfaaa for <###>; Tue, 20 Nov 2001 20:02:18 +0200 Reply-To: soolzip434222rt@yahoo.com Return-Path: soolzip434222rt@yahoo.com From: 占쏙옙占퐏oolzip434222rt@yahoo.com> To: ### Subject: 占쏙옙커占쏙옙占쌩걱몌옙占쏙옙占쏙옙[占� Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Wed, 21 Nov 2001 03:01:20 +1000 Message-Id: <18021822242210@yahoo.com> Status: R X-Status: N Received: from [211.210.145.99] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id ksjnfaaa for <###>; Thu, 29 Nov 2001 15:32:00 +0200 Reply-To: admin@sexdc.co.kr Return-Path: admin@sexdc.co.kr From: 占쏙옙占쏙옙 To: <###> Subject: 占쏙옙 占쏙옙占� 占� 占�- 占폮ender: 占쏙옙占쏙옙 Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Thu, 29 Nov 2001 22:23:00 +0900 X-Priority: 3 X-Mailer: Mailtouch 1.0 Message-Id: <13320082757133@sexdc.co.kr> Status: R X-Status: N Received: from [211.48.62.166] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id bksnfaaa for <###>; Sat, 1 Dec 2001 08:59:37 +0200 Received: from localhost (211.104.24.108) by relay6.kornet.net; 1 Dec 2001 15:49:36 +0900 Message-ID: <3c087d803c0eb61a@relay6.kornet.net> (added by relay6.kornet.net) Reply-To: salearea3@airtkcketauction.co.kr Return-Path: salearea3@airtkcketauction.co.kr From: (占�)占실곤옙 To: ### Subject: [占쏙옙 占쏙옙占� 占실곤옙... Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Sat, 1 Dec 2001 15:55:51 +0900 Status: R X-Status: N Received: from [211.192.233.238] by mail.eilatcity.co.il (NTMail 7.00.0018/AB0123.45.bebcd4a9) with ESMTP id viaaaaaa for ###; Wed, 5 Dec 2001 12:20:09 +0000 Reply-To: kobiz@kobiz.net Return-Path: kobiz@kobiz.net From: kobiz.net To: <###> Subject: 占� 占쏙옙占쏙옙트 占쏙옙.(占�,틸占�,튜카占쏙옙占�) ........(占� Sender: kobiz.net Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Wed, 5 Dec 2001 19:22:29 +0900 X-Priority: 3 X-Mailer: Mailtouch 1.0 Message-Id: <10200942700562@mail.eilatcity.co.il> X-VSMLoop: eilatcity.co.il Status: R X-Status: N Received: from [211.201.95.213] by mail.eilatcity.co.il (NTMail 7.00.0018/AB0123.45.bebcd4a9) with ESMTP id vsiaaaaa for ###; Fri, 7 Dec 2001 20:41:11 +0200 Reply-To: webmaster@smilefoot.co.kr Return-Path: webmaster@smilefoot.co.kr From: 腑占� To: ### Subject: (占쌌뱄옙占�){,:占�*,參 占쏙옙Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Sat, 8 Dec 2001 03:40:55 +0900 Message-Id: <18411138807240@mail.eilatcity.co.il> X-Status: N Received: from [211.211.247.57] by mail.eilatcity.co.il (NTMail 7.00.0018/AB0123.45.bebcd4a9) with ESMTP id mhobaaaa for ###; Mon, 17 Dec 2001 20:57:26 +0200 Reply-To: returnxm@kukamail.com Return-Path: returnxm@kukamail.com From: 占� To: <###> Subject: (占쏙옙占쌤울옙~~~~~ Sender: 占� Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Tue, 18 Dec 2001 03:55:09 +0900 X-Mailer: Mailtouch 1.8-cfdfbigk-aognbg-Aafle Message-Id: <18572691131074@mail.eilatcity.co.il> Status: R X-Status: N Received: from [211.218.223.161] by mail.eilatcity.co.il (NTMail 7.00.0018/AB0123.45.bebcd4a9) with ESMTP id fyxbaaaa for ###; Thu, 20 Dec 2001 07:49:36 +0200 Received: from zolatv ([211.218.223.161]) by zolatv with Microsoft SMTPSVC(5.0.2195.2966); Thu, 20 Dec 2001 04:41:15 +0900 To: From: jawi@jawisex.com Subject: 占�'[占� Date: Thu, 20 Dec 2001 04:41:15 +0900 Message-Id: <37245.195317719910400.889064@localhost> MIME-Version: 1.0 Content-Type: text/html; charset=euc-kr Content-Transfer-Encoding: 8bit Return-Path: jawi@jawisex.com X-OriginalArrivalTime: 19 Dec 2001 19:41:15.0451 (UTC) FILETIME=[1F1550B0:01C188C5] Status: R X-Status: N Received: from [61.254.182.116] by mail.eilatcity.co.il (NTMail 7.00.0018/AB0123.45.bebcd4a9) with ESMTP id rybcaaaa for ###; Fri, 21 Dec 2001 06:33:36 +0200 Reply-To: boksang2@geopia.com Return-Path: boksang2@geopia.com From: *占쏙옙boksang2@geopia.com> To: ### Subject: 크 占쌈곤옙占쏙옙 [占� Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Fri, 21 Dec 2001 14:03:17 +0900 Message-Id: <04333655902738@mail.eilatcity.co.il> Status: R X-Status: N Received: from [211.243.80.216] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id cmmofaaa for <###>; Fri, 21 Dec 2001 20:55:03 +0200 Reply-To: goodluck@shopstory.co.kr Return-Path: goodluck@shopstory.co.kr From: 占� To: ### Subject: (占� 占�: 품占쏙옙求占쏙옙품 占폻 Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Sat, 22 Dec 2001 02:56:45 +0900 Message-Id: <18550328701883@shopstory.co.kr> Status: R X-Status: N Received: from [211.202.28.3] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id unoofaaa for <###>; Sat, 22 Dec 2001 15:50:59 +0200 Reply-To: ithr@jobnews.co.kr Return-Path: ithr@jobnews.co.kr From: 占� To: ### Subject: [占� *恝占쏙옙占쏙옙 占쏙옙求占� Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Sat, 22 Dec 2001 22:40:24 +0900 Message-Id: <13505920007465@jobnews.co.kr> Status: R X-Status: N Received: from [211.211.50.241] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id pblpfaaa for <###>; Wed, 26 Dec 2001 05:45:40 +0200 Reply-To: ace_phone@yahoo.co.kr Return-Path: ace_phone@yahoo.co.kr From: 占쏙옙 To: ### Subject: [占신놂옙占� 占싣�!!칼占�; 占�*占썲립求占� Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Wed, 26 Dec 2001 12:31:36 +0900 Message-Id: <03454082543960@yahoo.co.kr> Status: R X-Status: N Received: from [211.196.217.22] by mailserver.eilatcity.co.il (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id pnypfaaa for <###>; Thu, 27 Dec 2001 07:09:45 +0200 Reply-To: kobiz@kobiz.net Return-Path: kobiz@kobiz.net From: kobiz To: <###> Subject: 홰占싹쇽옙...............................................................(占� Sender: kobiz Mime-Version: 1.0 Content-Type: text/html; charset="ks_c_5601-1987" Date: Thu, 27 Dec 2001 13:54:48 +0900 X-User: 1.96-iljlhomw-humkht-Gglqt Message-Id: <05094554660273@kobiz.net> Status: R X-Status: N === abuse@kornet.net bounces cause it sees spam in complaints === Path: uni-berlin.de!fu-berlin.de!cox.net!newsfeed-east.nntpserver.com !nntpserver.com!news-west.rr.com!cyclone.austin.rr.com !twister.austin.rr.com.POSTED!53ab2750!not-for-mail From: "Spam Buster" Newsgroups: news.admin.net-abuse.email Subject: Korea waking up... sort of... wrong side of the bed Lines: 17 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1106 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-ID: Date: Thu, 07 Nov 2002 03:34:11 GMT NNTP-Posting-Host: 66.69.163.222 X-Complaints-To: abuse@rr.com X-Trace: twister.austin.rr.com 1036640051 66.69.163.222 (Wed, 06 Nov 2002 21:34:11 CST) NNTP-Posting-Date: Wed, 06 Nov 2002 21:34:11 CST Organization: Road Runner - Texas Xref: uni-berlin.de news.admin.net-abuse.email:1852605 Sent spam complaint to abuse@kornet.net Bounced with: : 211.48.62.132 failed after I sent the message. Remote host said: 550 Rejected by spam rule (by korean-MIC). Illegal spam string position. Anybody know how you spell "DUH!" in Korean? SB === And about their open proxies, abusable by spammers, problem === Path: uni-berlin.de!fu-berlin.de!image.surnet.ru!surnet.ru!newsfeed.rt.ru!rt.ru !not-for-mail From: Michael Tokarev Newsgroups: news.admin.net-abuse.email Subject: (C&C) Korean proxies example Date: Sun, 17 Nov 2002 02:54:37 +0300 Organization: Telecom Service, JSC Lines: 155 Message-ID: <3DD6DABD.9010302@tls.msk.ru> NNTP-Posting-Host: gate.corpit.ru Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Trace: news.caravan.ru 1037490815 59111 217.23.151.253 (16 Nov 2002 23:53:35 GMT) X-Complaints-To: usenet@caravan.ru NNTP-Posting-Date: Sat, 16 Nov 2002 23:53:35 +0000 (UTC) User-Agent: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1 X-Accept-Language: en, ru Xref: uni-berlin.de news.admin.net-abuse.email:1858962 After some thoughts, I think there is no big harm if I'll made this information public. Ok. Almost all of us knows the open proxy problem in Korean networks. Here is a funnies one I've ever can think about... 218.145.25/24 network, wich belongs to Kornet. List of HTTP CONNECT proxies listening on port 8080: Input_IP port output_IP 218.145.25.14:8080 218.145.25.14 218.145.25.15:8080 218.145.25.15 218.145.25.16:8080 218.145.25.16 218.145.25.17:8080 218.145.25.17 218.145.25.18:8080 218.145.25.18 218.145.25.19:8080 218.145.25.19 218.145.25.20:8080 218.145.25.20 218.145.25.21:8080 218.145.25.21 218.145.25.22:8080 218.145.25.22 218.145.25.44:8080 218.145.25.44 218.145.25.50:8080 218.145.25.50 218.145.25.53:8080 218.145.25.53 218.145.25.75:8080 218.145.25.75 218.145.25.77:8080 218.145.25.77 218.145.25.78:8080 218.145.25.78 218.145.25.79:8080 218.145.25.79 218.145.25.80:8080 218.145.25.80 218.145.25.81:8080 218.145.25.81 218.145.25.82:8080 218.145.25.82 218.145.25.83:8080 218.145.25.83 218.145.25.84:8080 218.145.25.84 218.145.25.85:8080 218.145.25.85 And now the fun begins. Output IP is the IP address used by a proxy to connect to a target's server. I.e. you connect to a proxy listening on the address A and tell it to connect to some target. It when connects to the target FROM the IP address B which isn't necessary the same as original A. Watch. Slowly. Input_IP port Output_IP 218.145.25.11:80 218.145.25.14 218.145.25.12:80 218.145.25.15 218.145.25.13:80 218.145.25.16 218.145.25.14:80 218.145.25.17 218.145.25.15:80 218.145.25.18 218.145.25.16:80 218.145.25.19 218.145.25.17:80 218.145.25.20 218.145.25.18:80 218.145.25.21 218.145.25.19:80 218.145.25.22 218.145.25.20:80 218.145.25.11 218.145.25.21:80 218.145.25.12 218.145.25.22:80 218.145.25.13 218.145.25.43:80 218.145.25.46 218.145.25.44:80 218.145.25.47 218.145.25.45:80 218.145.25.48 218.145.25.46:80 218.145.25.49 218.145.25.47:80 218.145.25.50 218.145.25.48:80 218.145.25.51 218.145.25.49:80 218.145.25.52 218.145.25.50:80 218.145.25.53 218.145.25.51:80 218.145.25.43 218.145.25.52:80 218.145.25.44 218.145.25.53:80 218.145.25.45 218.145.25.75:80 218.145.25.78 218.145.25.76:80 218.145.25.79 218.145.25.77:80 218.145.25.80 218.145.25.78:80 218.145.25.81 218.145.25.79:80 218.145.25.82 218.145.25.80:80 218.145.25.83 218.145.25.81:80 218.145.25.84 218.145.25.82:80 218.145.25.85 218.145.25.83:80 218.145.25.86 218.145.25.84:80 218.145.25.75 218.145.25.85:80 218.145.25.76 218.145.25.86:80 218.145.25.77 218.145.25.128:80 218.145.25.15 218.145.25.130:80 218.145.25.17 218.145.25.131:80 218.145.25.18 218.145.25.133:80 218.145.25.20 218.145.25.135:80 218.145.25.22 218.145.25.136:80 218.145.25.11 218.145.25.137:80 218.145.25.12 218.145.25.138:80 218.145.25.13 218.145.25.139:80 218.145.25.14 218.145.25.140:80 218.145.25.15 218.145.25.142:80 218.145.25.17 218.145.25.143:80 218.145.25.18 218.145.25.144:80 218.145.25.19 218.145.25.146:80 218.145.25.21 218.145.25.148:80 218.145.25.11 218.145.25.149:80 218.145.25.12 218.145.25.150:80 218.145.25.13 218.145.25.152:80 218.145.25.15 218.145.25.154:80 218.145.25.17 218.145.25.155:80 218.145.25.18 218.145.25.157:80 218.145.25.20 218.145.25.159:80 218.145.25.22 218.145.25.160:80 218.145.25.46 218.145.25.161:80 218.145.25.47 218.145.25.163:80 218.145.25.49 218.145.25.164:80 218.145.25.50 218.145.25.166:80 218.145.25.52 218.145.25.167:80 218.145.25.53 218.145.25.168:80 218.145.25.43 218.145.25.169:80 218.145.25.44 218.145.25.172:80 218.145.25.47 218.145.25.173:80 218.145.25.48 218.145.25.175:80 218.145.25.50 218.145.25.178:80 218.145.25.53 218.145.25.179:80 218.145.25.43 218.145.25.180:80 218.145.25.44 218.145.25.181:80 218.145.25.45 218.145.25.183:80 218.145.25.47 218.145.25.184:80 218.145.25.48 218.145.25.185:80 218.145.25.49 218.145.25.186:80 218.145.25.50 218.145.25.188:80 218.145.25.43 218.145.25.189:80 218.145.25.44 218.145.25.190:80 218.145.25.45 218.145.25.191:80 218.145.25.46 218.145.25.192:80 218.145.25.79 218.145.25.193:80 218.145.25.80 218.145.25.194:80 218.145.25.81 218.145.25.195:80 218.145.25.82 218.145.25.196:80 218.145.25.83 218.145.25.197:80 218.145.25.84 218.145.25.198:80 218.145.25.85 218.145.25.199:80 218.145.25.86 218.145.25.200:80 218.145.25.75 218.145.25.201:80 218.145.25.76 218.145.25.202:80 218.145.25.77 218.145.25.203:80 218.145.25.78 218.145.25.204:80 218.145.25.79 218.145.25.205:80 218.145.25.80 218.145.25.206:80 218.145.25.81 218.145.25.207:80 218.145.25.82 218.145.25.208:80 218.145.25.83 218.145.25.209:80 218.145.25.84 218.145.25.210:80 218.145.25.85 218.145.25.211:80 218.145.25.86 218.145.25.212:80 218.145.25.75 218.145.25.213:80 218.145.25.76 218.145.25.214:80 218.145.25.77 218.145.25.215:80 218.145.25.78 218.145.25.216:80 218.145.25.79 218.145.25.217:80 218.145.25.80 218.145.25.218:80 218.145.25.81 218.145.25.220:80 218.145.25.83 218.145.25.221:80 218.145.25.84 218.145.25.222:80 218.145.25.85 218.145.25.223:80 218.145.25.86 /mjt === And here is how Kornet "handles" their spammers === Path: uni-berlin.de!fu-berlin.de!nf3.bellglobal.com!sjc70.webusenet.com !news.webusenet.com!feed.news.sonic.net!typhoon.sonic.net!not-for-mail From: Kevin McMurtrie Newsgroups: news.admin.net-abuse.email Subject: Re: Kornet - do they ever reply to LARTS? References: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit User-Agent: MT-NewsWatcher/3.2 (PPC Mac OS X) Message-ID: Lines: 10 Date: Wed, 15 Jan 2003 05:06:59 GMT NNTP-Posting-Host: 208.201.231.97 X-Complaints-To: abuse@sonic.net X-Trace: typhoon.sonic.net 1042607219 208.201.231.97 (Tue, 14 Jan 2003 21:06:59 PST) NNTP-Posting-Date: Tue, 14 Jan 2003 21:06:59 PST Xref: uni-berlin.de news.admin.net-abuse.email:1899343 In article , "Dougal" wrote: >Has anyone around here ever had a response from a LART to kornet? About 15 out of more than 1000 complaints. All said the spammer was warned. I haven't found a single customer terminated from Kornet. Spamming services company www.itnsoft.com is still up and runnning on Kornet. === New IP range, new spam - my complaint === From: Admin Reply-To: abuse-Jun@2004.dolphinwave.org Organization: Private person Subject: [email] Spam (drugs: greathealingdeals.biz/e0591.com/ns1.bp123.biz/thebestmail.us/semipopular.com/onlinermt566.com)! [Fwd: Hello hyn larger/thicker penis rcuef] Date: Mon, 14 Jun 2004 12:11:32 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1736452 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, , abuse_hb@public.wh.hb.cn, postmaster@dc.wh.hb.cn, postmaster@public.wh.hb.cn, spam_hb@public.wh.hb.cn, anti-spam@ns.chinanet.cn.net, postmaster@wh.hb.cn, zhangyl68@public.wh.hb.cn, ipadmin_jz@jzinfo.com, spam_jz@jzinfo.com, abuse_jz@jzinfo.com, postmaster@jzinfo.com, zhx@jzinfo.com, postmaster@bestregistrar.com, Jeff@b2.net, abuse@tierra.net, postmaster@domaindiscover.com, ctsummary@special.abuse.net, postmaster@paycenter.com.cn, anti-spam@chinanet.cn.net, abuse@nrw.net, abuse@enom.com, abuse@internap.com, bonbu@kt.co.kr, postmaster@kornet.net, spamrelay@certcc.or.kr, abuse@abuse.kornet.net X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200406141211.32453@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Spammer: [221.155.139.31] Spamvertised web page: greathealingdeals.biz [211.147.224.47] Registrar: JOKER.COM Previously spamvertised web page: semipopular.com [no IP, no DNS] Registrar: bestregistrar.com. Spammer's nameservers: ====================== ns5.e0591.com [211.147.224.47] Registrar: paycenter.com.cn. ns1.bp123.biz [211.147.224.47] Registrar: ENOM ns1.thebestmail.us [no IP] Registrar: ENOM ns1.onlinermt566.com [61.183.59.21] ns2.onlinermt566.com [61.183.59.22] ns3.onlinermt566.com [no IP] ns4.onlinermt566.com [no IP] Registrar: domaindiscover.com. ---------- Forwarded Message ---------- Received: from 221.155.139.31 ([221.155.139.31]) by mail.dolphinwave.org (8.12.8/8.12.8) with SMTP id i5E7bVFp014461 for webmaster@###; Mon, 14 Jun 2004 10:37:45 +0300 Received: from unknown (HELO EBEADF) (192.168.65.190) by 221.155.139.31 with SMTP; Mon, 14 Jun 2004 03:37:35 +0000 Message-ID: <00d701c451c0$e7ef3200$d742fad3@EBEADF> From: "kass" To: "jami" Subject: Hello hyn larger/thicker penis rcuef Date: Mon, 14 Jun 2004 03:37:24 +0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00D4_01C451C4.6201322D" X-Priority: 3 X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.25.0.62; VDF 6.25.0.92 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: text part ------------------------------------------------------- You've heard about these pills on TV, in the news, and online and
have probably asked yourself, "Do they really work?" The answer is
YES! IGF2 is a powerful erection enhancing product that will
create erections so strong and full that over time your penis will
actually grow as a direct result! If you would like a more
satisfying sex life then IGF2 is for you!

Get more information here!

Check out here: CLICK HERE




Carl Sandburg. It includes such well-known poems as
New visitor? Are you a new reader of the HyperTextBooks?
the complete text of Joseph Conrad's Heart of Darkness.
This is uothiz : webmaster@###