1 X-Real-To: <mitya@example.com>
2 Received: from [194.87.5.31] (HELO sinbin.d-s.example.com)
3 by cgp.example.com (CommuniGate Pro SMTP 4.0.6/D4)
4 with ESMTP-TLS id 125035761 for mitya@example.com; Thu, 11 Dec 2003 15:17:46 +0300
5 Received: (from daemon@localhost)
6 by sinbin.d-s.example.com (8.12.9p1/8.11.6) id hBBCHjN0031595
7 for mitya@example.com; Thu, 11 Dec 2003 15:17:45 +0300 (MSK)
8 (envelope-from noc@rt3.mx.example.com)
9 Received: from d-s.example.com by sinbin.d-s.example.com with ESMTP id hBBCHjar031575;
10 (8.12.9p2/D) Thu, 11 Dec 2003 15:17:45 +0300 (MSK)
11 X-Real-To: <mitya@example.com>
12 Sender: <noc@rt3.mx.example.com> (Network Operation Center)
14 Date: Thu, 11 Dec 2003 15:17:45 +0300
15 Message-ID: <redirect-137509289@d-s.example.com>
16 X-Original-Return-Path: <vox19@b92.d-s.example.com>
17 Received: from [194.87.0.16] (HELO mail.d-s.example.com)
18 by d-s.example.com (CommuniGate Pro SMTP 4.1.5/D1)
19 with ESMTP id 120757484 for noc@rt3.mx.example.com; Mon, 27 Oct 2003 09:40:53 +0300
20 Received: from [194.87.0.22] (HELO moscvax.d-s.example.com)
21 by mail.d-s.example.com (CommuniGate Pro SMTP 4.1.5/D)
22 with ESMTP-TLS id 107945800 for noc@rt3.mx.example.com; Mon, 27 Oct 2003 09:40:53 +0300
23 Received: from d-s.example.com (mx.d-s.example.com [194.87.0.32])
24 by moscvax.d-s.example.com (8.12.9/8.12.9) with ESMTP id h9R6erFm062621
25 for <security@d.example.com>; Mon, 27 Oct 2003 09:40:53 +0300 (MSK)
26 (envelope-from vox19@b92.d-s.example.com)
27 Received: by d-s.example.com (CommuniGate Pro PIPE 4.1.5/D1)
28 with PIPE id 120757490; Mon, 27 Oct 2003 09:40:53 +0300
29 Received: from [194.87.2.108] (HELO b92.d-s.example.com)
30 by d-s.example.com (CommuniGate Pro SMTP 4.1.5/D1)
31 with ESMTP-TLS id 120757480 for security@d.example.com; Mon, 27 Oct 2003 09:40:52 +0300
32 Received: from b92.d-s.example.com (localhost [127.0.0.1])
33 by b92.d-s.example.com (8.12.8p1/8.12.3) with ESMTP id h9R6eqIe014669
34 for <security@d.example.com>; Mon, 27 Oct 2003 09:40:52 +0300 (MSK)
35 (envelope-from vox19@b92.d-s.example.com)
36 Received: from localhost (localhost [[UNIX: localhost]])
37 by b92.d-s.example.com (8.12.8p1/8.12.3/Submit) id h9R6epst014668
38 for security@d.example.com; Mon, 27 Oct 2003 09:40:51 +0300 (MSK)
39 From: "Stanislav" <drstas@d.example.com>
40 Subject: Fwd: scanning my ports
41 X-Original-Date: Mon, 27 Oct 2003 10:40:51 +0400
42 User-Agent: KMail/1.5.4
43 X-Original-To: security@d.example.com
45 Content-Type: Multipart/Mixed;
46 boundary="Boundary-00=_z3Ln/tUeUBipHgx"
47 X-Original-Message-Id: <200310270940.51758.vox19@d.example.com>
48 X-Spam-Checker-Version: SpamAssassin 2.60-jumbo.demos (1.212-2003-09-23-exp)
50 X-Spam-Status: No, hits=-6.8 required=5.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
51 HTML_MESSAGE,SUBJECT_RT autolearn=ham version=2.60-jumbo.demos
52 X-Spam-Report: -6.8 points, 5.0 required;
53 * -3.0 SUBJECT_RT Tracking system
54 * 1.0 FROM_ENDS_IN_NUMS From: ends in numbers
55 * 0.1 HTML_MESSAGE BODY: HTML included in message
56 * -4.9 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
60 --Boundary-00=_z3Ln/tUeUBipHgx
61 Content-Type: text/plain;
63 Content-Transfer-Encoding: 7bit
64 Content-Disposition: inline
70 ---------- Forwarded Message ----------
72 Subject: [DEMOS #12148] scanning my ports
73 Date: Sunday 26 October 2003 20:19
74 From: 1stwizard@isp.example.com
75 To: no-reply@d-r.example.com
77 This transaction appears to have no content
79 -------------------------------------------------------
87 http://www.di.example.com
89 --Boundary-00=_z3Ln/tUeUBipHgx
90 Content-Type: text/plain;
93 Content-Transfer-Encoding: 7bit
94 Content-Disposition: inline
96 Somebody at IP 127.0.0.1 scanned my ports.
97 --Boundary-00=_z3Ln/tUeUBipHgx
98 Content-Type: text/html;
101 Content-Transfer-Encoding: 7bit
102 Content-Disposition: inline
105 <META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
106 <META content="IncrediMail 1.0" name=GENERATOR>
107 <!--IncrdiXMLRemarkStart>
109 <X-FID>BA285063-5BCE-11D4-AF8D-0050DAC67E11</X-FID>
111 <X-FIT>Letter</X-FIT>
112 <X-FCOL>Elegant Paper</X-FCOL>
113 <X-FCAT>Stationery</X-FCAT>
114 <X-FDIS>Rice Fields</X-FDIS>
115 <X-Extensions>SU1CTDEsNDEsgUmBSTAkkcGNgZmVTY0wNCxNhYUoiU0kOMEoTYGBjYEoJDSZnSyFhUksSU1CTDIsMCwsSU1CTDMsMCwsVHlwZVZlcnNpb24sMywxLjAs</X-Extensions>
116 <X-BG>8E549F43-079D-11D8-B0F9-00B0D0B65B96</X-BG>
117 <X-BGT>repeat</X-BGT>
118 <X-BGC>#eff3f7</X-BGC>
119 <X-BGPX>left</X-BGPX>
121 <X-ASN>ANIM3D00-NONE-0000-0000-000000000000</X-ASN>
123 <X-ASH>ANIM3D00-NONE-0000-0000-000000000000</X-ASH>
125 <X-AN>6486DDE0-3EFD-11D4-BA3D-0050DAC68030</X-AN>
127 <X-AP>6486DDE0-3EFD-11D4-BA3D-0050DAC68030</X-AP>
129 <X-AD>C3C52140-4147-11D4-BA3D-0050DAC68030</X-AD>
131 <X-AUTO>X-ASN,X-ASH,X-AN,X-AP,X-AD</X-AUTO>
134 <IncrdiXMLRemarkEnd-->
136 <BODY style="BACKGROUND-POSITION: left 0px; FONT-SIZE: 12pt; MARGIN: 0px 10px 10px; COLOR: #00005b; BACKGROUND-REPEAT: repeat; FONT-FAMILY: Arial" text=#00005b bgColor=#eff3f7 background=cid:8E549F43-079D-11D8-B0F9-00B0D0B65B96 scroll=yes SIGCOLOR="0" X-ADF="0" X-AD="C3C52140-4147-11D4-BA3D-0050DAC68030" X-APF="1" X-AP="6486DDE0-3EFD-11D4-BA3D-0050DAC68030" X-ANF="0" X-AN="6486DDE0-3EFD-11D4-BA3D-0050DAC68030" X-ASHF="1" X-ASH="ANIM3D00-NONE-0000-0000-000000000000" X-ASNF="0" X-ASN="ANIM3D00-NONE-0000-0000-000000000000" X-FVER="2.0" X-FID="BA285063-5BCE-11D4-AF8D-0050DAC67E11" X-FIT="Letter" X-FCOL="Elegant Paper" X-FCAT="Elegant Paper" X-FDIS="Rice Fields" ORGYPOS="0">
137 <TABLE id=INCREDIMAINTABLE cellSpacing=0 cellPadding=2 width="100%" border=0>
140 <TD id=INCREDITEXTREGION style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; FONT-SIZE: 12pt; PADDING-BOTTOM: 0px; CURSOR: auto; PADDING-TOP: 0px" vAlign=top width="100%">
141 <DIV>Somebody at IP 127.0.0.1 scanned my ports. </DIV>
143 <DIV> </DIV></TD></TR>
145 <TD id=INCREDIFOOTER width="100%">
146 <TABLE cellSpacing=0 cellPadding=0 width="100%">
149 <TD width="100%"></TD>
150 <TD id=INCREDISOUND vAlign=bottom align=middle></TD>
151 <TD id=INCREDIANIM vAlign=bottom align=middle></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY></HTML>
152 --Boundary-00=_z3Ln/tUeUBipHgx
153 Content-Type: image/jpeg;
154 charset="iso-8859-1";
156 Content-Transfer-Encoding: base64
157 Content-Disposition: inline; filename="BackGrnd.jpg"
159 /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAHgAA/+4AIUFk
160 b2JlAGTAAAAAAQMAEAMCAwYAAAHbAAAC1gAABZX/2wCEABALCwsMCxAMDBAX
161 Dw0PFxsUEBAUGx8XFxcXFx8eFxoaGhoXHh4jJSclIx4vLzMzLy9AQEBAQEBA
162 QEBAQEBAQEABEQ8PERMRFRISFRQRFBEUGhQWFhQaJhoaHBoaJjAjHh4eHiMw
163 Ky4nJycuKzU1MDA1NUBAP0BAQEBAQEBAQEBAQP/CABEIAGUAcwMBIgACEQED
164 EQH/xACAAAEBAQEAAAAAAAAAAAAAAAAAAQIGAQEBAAAAAAAAAAAAAAAAAAAA
165 ARABAAICAwEAAgMAAAAAAAAAAQARIQIxQRIiQDIQMFARAAICAgIBBAIDAQEA
166 AAAAAAERACExQVFhcYGRobECEsHhMtHxEgEAAAAAAAAAAAAAAAAAAABQ/9oA
167 DAMBAAIRAxEAAADtRZYE1ASghQFgUZoCkKSwLmhcllAEqkSkqFAlhUomoAS3
168 IoJqFlDNpFEAQFE1AIVYAWIVKAJRNZpYCwVmmshKACA0CBAUCBYGwf/aAAgB
169 AgABBQD8B/yP/9oACAEDAAEFAPz6/or8H//aAAgBAQABBQC2+ZeHjbD+saX6
170 hwXeDW1Rg4xLLTa+m7ZiIEsI1MTiHP1dYpvFADiFM1/X6nq9byuwdPPz5oFo
171 fWlEMQ9ULKrWq2ppG9Y2J6INQma9lVTRdlUKgHzXXSEECw1SYu5WsGoJPkis
172 ZYpx31GvXZQ/JM3VwShzVTsp1EZbBI8LcaUSih86+s2Zl4Wp6+lAZnVsDkjd
173 ku5m+lJTdXDG2SHM9M2wKX1YxsaZTTwmoVrYnqsMrM652yjs01K0mtbGAz6Y
174 5dpfqNz06qpq5QNjiIjiZtbhtceNuf0jyeqGgu6rXMvI4omPWbPMYzEfMI+a
175 xHnFvOP4/9oACAECAgY/AGP/2gAIAQMCBj8AY//aAAgBAQEGPwB72Yucb1Bf
176 IhFEaeZ+xRXFQELN+HEUQdjU0Xn4g9gRCQcpw1yajGYsP/kFvUzvjUBWrIMF
177 HI2OJQNEAjiEEFdTmfG/MTHq5RFOnpTV3kzCBx7x4YOD1AV5uYJvnqMA0hep
178 jfwpYCwC4Bx3q55zeZRBCw9TkoIuHw78RdczSNH2mgqcLpRC+RASAkA3B13m
179 cYd5mR84c/yOx4lWtRAZ6mGDhiP9WgXVyhWA+xDgMOWGMsTg/wBTz8SjjXrP
180 8hHIlX1MZ6mDzgc/cIV/iyN1GBR0MQMKjnEzvvMz8mUkErKlfqU63iV+IKNH
181 7mNZBLFQEpEDeDOV32IVn8WR4caoywqI2p695mbZzNUQIcKfk0bo+0NpCqn7
182 CiQiNGXkdQen1DpjGeZ7WNw3pK+I93maCPc16+Zkf6XxMCsFwAkaiIB57vc/
183 IAhZ/HqZBBbB0ZokAEOGxsYqBgPp8agQBu4VSMJdqx6SwDsGBrTmAR93uZGX
184 6KePowEADAIjoX8gw459CICaW/MLGvodQfkDW71zBxRHtB3j3jC4PMIYoAgK
185 NfPMCQNN7jCzvlzXPopzhQvNZY3CRya9ZrEFfRE0iCB5mscZuVYfKmAi94uE
186 3Q8qfytQ7xD0svmFcmaxNPI8iMjh3pmF2HbzqeUi+YkiD/MrOl5LmbwPuWVf
187 mXpv3hDH8qAjPpiZHXkRnSd6ZhB53mejzKV6US0K9TCCLyCeIhtETX5MsHBG
188 JkD/ANiFkMCE2qGoCdZ8Q8AMGpYFqEhdhRIYH3CF3d1M/Mexma+4CwdQ2Ddc
189 x0exAlmj04QUQd8QWLB/iB5GxmEg5TENVZqPYzFV8eHAy9T/AEc8a4n3Ov6g
190 /VwvE6lpQ4VNysXzhS8esOO8w/rlF/rypjV3B5H1Knr8T//Z
192 --Boundary-00=_z3Ln/tUeUBipHgx--