[an error occurred while processing this directive]
The report for this spam can be found at: 2007 Deadbeats Page 02.
This file was discovered to have the W32.Netsky.T@mm virus. Discovered on May 10, 2008
The portion containing the virus hsa been removed.
Return-Path: <>
Received: from 178511.ds.nac.net (216.118.117.51) by studio42.com with ESMTP
(Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>;
Sun, 8 Apr 2007 07:44:54 -0700
Received: from mail by 178511.ds.nac.net with local (Exim 4.50)
id 1HaYgf-0004Ox-Ji
for chris@studio42.com; Sun, 08 Apr 2007 10:48:13 -0400
X-Failed-Recipients: sales@crawlability.com
Auto-Submitted: auto-generated
From: Mail Delivery System <Mailer-Daemon@178511.ds.nac.net>
To: chris@studio42.com
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1HaYgf-0004Ox-Ji@178511.ds.nac.net>
Date: Sun, 08 Apr 2007 10:48:13 -0400
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
sales@crawlability.com
This message has been rejected because it has
a potentially executable attachment
information7.pif
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it.
------ This is a copy of the message, including all the headers. ------
Return-path: <chris@studio42.com>
Received: from [59.178.83.74] (helo=crawlability.com)
by 178511.ds.nac.net with esmtp (Exim 4.50)
id 1HaYgX-0004OS-Tm
for sales@crawlability.com; Sun, 08 Apr 2007 10:48:13 -0400
From: chris@studio42.com
To: sales@crawlability.com
Subject: Hello
Date: Sun, 8 Apr 2007 07:46:32 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
This is a multi-part message in MIME format.
------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Please see the information.
Thanks
------=_NextPart_000_0016----=_NextPart_000_0016--
Take care to note that I am skipping the headers from.NAC.NET and onto the
headers of the abusive messages, assuming they are intact:
[studio42@flatus studio42]$ host 59.178.83.74
74.83.178.59.in-addr.arpa domain name pointer triband-del-59.178.83.74.bol.net.i
n.
[studio42@flatus studio42]$ whois 59.178.83.74@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 59.176.0.0 - 59.185.255.255
netname: MTNLISP
descr: MTNL CAT B ISP
country: IN
admin-c: DC59-AP
tech-c: DC59-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-IN-MTNL
mnt-routes: MAINT-IN-MTNL
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20041130
source: APNIC
person: Deepak Chanduka
address: Mahanagar Telephone Nigam Ltd., Jeevan Bharati Building,
address: Tower 1, 12th Floor, 124, Connaught Circus, New Delhi
country: IN
phone: +91-11-3732212
fax-no: +91-11-3718117
e-mail: mtnlco@giasdl01.vsnl.net.in
nic-hdl: DC59-AP
mnt-by: MAINT-NULL
changed: hostmaster@apnic.net 19981224
source: APNIC
[an error occurred while processing this directive]