Return-Path: <jennipet5641@usa.net>
Received: from duskwood.digicable.hu (92.249.128.11) by studio42.com with 
ESMTP (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; 
Thu, 19 Jun 2008 19:35:52 -0700
Received: from localhost ([127.0.0.1] helo=ssl.hdsnet.hu)	by duskwood.digicable.hu 
with esmtp (Exim 4.63)	(envelope-from <jennipet5641@usa.net>)	id 1K9WLL-0001zz-Nw; 
Fri, 20 Jun 2008 04:27:15 +0200
Received: from 208.74.113.54
        (SquirrelMail authenticated user temze@hdsnet.hu)
        by ssl.hdsnet.hu with HTTP
;        Fri, 20 Jun 2008 04:27:15 +0200 (CEST)
Message-ID: <49959.208.74.113.54.1213928835.squirrel@ssl.hdsnet.hu>
Date: Fri, 20 Jun 2008 04:27:15 +0200 (CEST)
Subject: WILL
From: "Mrs.Jennifer Peters" <jennipet5641@usa.net>
Reply-To: advocatepedro_90@live.com
User-Agent: SquirrelMail/1.4.13
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-2
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;




Hello Dear

My name is Mrs.Jennifer Peters; I am a dying woman who has decided to
donate what I have to you/church. I am 59 years old and I was diagnosed
for cancer for about 2 years ago immediately after the death of my husband
who has left me everything he worked for and because the doctors told me I
will not live longer than some weeks because of my health idecided to
WILL/donate the sum of $2 500 000 Two million five hundred thousand
dollars to you for the good work of humanity and also to help the
motherless and less privilege and also for the assistance of the widows.I
wish you all the best and may the good Lord bless you abundantly and
please use the funds well and always extend the good work to others.


Here is the Contact information of my Attorney below:
Orbin Law Firm
Abogado De Justicia
Calle Embajadores,106.2,Madrid,Spain
Notario & Tribunal
Sr Pedro Antonio
Phone/Fax+34 693 220 723
Email:advocatepedro_90@live.com


Tell him that I have WILLED $2 500 000.00
to you and I have also notified him. I know I don’t know you but I have
been directed to do this. Thanks and God bless.


NB: I will appreciate your utmost confidentiality in this matter until the
task is accomplished as i don't want anything that will jeopardize my last
wish.



[studio42@flatus counter]$ host 92.249.128.11
11.128.249.92.in-addr.arpa domain name pointer duskwood.digicable.hu.
[studio42@flatus counter]$ whois 92.249.128.11@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag

% Information related to '92.249.128.0 - 92.249.131.255'

inetnum:        92.249.128.0 - 92.249.131.255
netname:        DIGI-1
descr:          DIGI Reserved for Servers
remarks:        INFRA-AW
country:        HU
admin-c:        HTS51-RIPE
tech-c:         HTS51-RIPE
status:         ASSIGNED PA
mnt-by:         HDSNET-MNT
source:         RIPE # Filtered

role:           HDSNET Technical Staff
address:        Vaci ut. 35
address:        H-1134 Budapest
address:        Hungary
phone:          +36 1  7070707
fax-no:         +36 1  7070009
remarks:        ***********************************************
remarks:        * spam or security notify to: abuse@hdsnet.hu *
remarks:        ***********************************************
abuse-mailbox:  abuse@hdsnet.hu
admin-c:        TS2976-RIPE
admin-c:        ZN102-RIPE
admin-c:        SKOA-RIPE
tech-c:         TS2976-RIPE
tech-c:         ZN102-RIPE
tech-c:         SKOA-RIPE
nic-hdl:        HTS51-RIPE
mnt-by:         HDSNET-MNT
source:         RIPE # Filtered

% Information related to '92.249.128.0/17AS20845'

route:          92.249.128.0/17
descr:          HU-HDSNET-20071115
origin:         AS20845
mnt-by:         HDSNET-MNT
source:         RIPE # Filtered

So, the abuse starts off with webmail abuse.

From where?

[studio42@flatus counter]$ host 208.74.113.54
Host 54.113.74.208.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus counter]$ whois 208.74.113.54@whois.arin.net
[whois.arin.net]

OrgName:    BringCom, Inc.
OrgID:      BRING
Address:    105 Executive Dr.
Address:    Suite 100-A
City:       Sterling
StateProv:  VA
PostalCode: 20166
Country:    US

NetRange:   208.74.112.0 - 208.74.115.255
CIDR:       208.74.112.0/22
OriginAS:   AS26452
NetName:    BRING-BLK02
NetHandle:  NET-208-74-112-0-1
Parent:     NET-208-0-0-0-0
NetType:    Direct Allocation
NameServer: NS01.BRINGCOM.NET
NameServer: NS02.BRINGCOM.NET
Comment:
RegDate:    2007-01-26
Updated:    2008-03-11

OrgAbuseHandle: ABUSE1856-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-703-709-7902
OrgAbuseEmail:  abuse@bringcom.com

OrgNOCHandle: NOC2950-ARIN
OrgNOCName:   NOC
OrgNOCPhone:  +1-703-709-7902
OrgNOCEmail:  noc@bringcom.com

OrgTechHandle: TECH282-ARIN
OrgTechName:   Tech
OrgTechPhone:  +1-703-709-7902
OrgTechEmail:  ipadmin@bringcom.com

# ARIN WHOIS database, last updated 2008-06-19 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.


Via zombie rape?