1X-Real-To: <mitya@example.com>
2Received: from [194.87.5.31] (HELO sinbin.d-s.example.com)
3  by cgp.example.com (CommuniGate Pro SMTP 4.0.6/D4)
4  with ESMTP-TLS id 125035761 for mitya@example.com; Thu, 11 Dec 2003 15:17:46 +0300
5Received: (from daemon@localhost)
6	by sinbin.d-s.example.com (8.12.9p1/8.11.6) id hBBCHjN0031595
7	for mitya@example.com; Thu, 11 Dec 2003 15:17:45 +0300 (MSK)
8	(envelope-from noc@rt3.mx.example.com)
9Received: from d-s.example.com by sinbin.d-s.example.com with ESMTP id hBBCHjar031575;
10	(8.12.9p2/D) Thu, 11 Dec 2003 15:17:45 +0300 (MSK)
11X-Real-To: <mitya@example.com>
12Sender: <noc@rt3.mx.example.com> (Network Operation Center)
13To: mitya@example.com
14Date: Thu, 11 Dec 2003 15:17:45 +0300
15Message-ID: <redirect-137509289@d-s.example.com>
16X-Original-Return-Path: <vox19@b92.d-s.example.com>
17Received: from [194.87.0.16] (HELO mail.d-s.example.com)
18  by d-s.example.com (CommuniGate Pro SMTP 4.1.5/D1)
19  with ESMTP id 120757484 for noc@rt3.mx.example.com; Mon, 27 Oct 2003 09:40:53 +0300
20Received: from [194.87.0.22] (HELO moscvax.d-s.example.com)
21  by mail.d-s.example.com (CommuniGate Pro SMTP 4.1.5/D)
22  with ESMTP-TLS id 107945800 for noc@rt3.mx.example.com; Mon, 27 Oct 2003 09:40:53 +0300
23Received: from d-s.example.com (mx.d-s.example.com [194.87.0.32])
24	by moscvax.d-s.example.com (8.12.9/8.12.9) with ESMTP id h9R6erFm062621
25	for <security@d.example.com>; Mon, 27 Oct 2003 09:40:53 +0300 (MSK)
26	(envelope-from vox19@b92.d-s.example.com)
27Received: by d-s.example.com (CommuniGate Pro PIPE 4.1.5/D1)
28  with PIPE id 120757490; Mon, 27 Oct 2003 09:40:53 +0300
29Received: from [194.87.2.108] (HELO b92.d-s.example.com)
30  by d-s.example.com (CommuniGate Pro SMTP 4.1.5/D1)
31  with ESMTP-TLS id 120757480 for security@d.example.com; Mon, 27 Oct 2003 09:40:52 +0300
32Received: from b92.d-s.example.com (localhost [127.0.0.1])
33	by b92.d-s.example.com (8.12.8p1/8.12.3) with ESMTP id h9R6eqIe014669
34	for <security@d.example.com>; Mon, 27 Oct 2003 09:40:52 +0300 (MSK)
35	(envelope-from vox19@b92.d-s.example.com)
36Received: from localhost (localhost [[UNIX: localhost]])
37	by b92.d-s.example.com (8.12.8p1/8.12.3/Submit) id h9R6epst014668
38	for security@d.example.com; Mon, 27 Oct 2003 09:40:51 +0300 (MSK)
39From: "Stanislav" <drstas@d.example.com>
40Subject: Fwd: scanning my ports
41X-Original-Date: Mon, 27 Oct 2003 10:40:51 +0400
42User-Agent: KMail/1.5.4
43X-Original-To: security@d.example.com
44MIME-Version: 1.0
45Content-Type: Multipart/Mixed;
46  boundary="Boundary-00=_z3Ln/tUeUBipHgx"
47X-Original-Message-Id: <200310270940.51758.vox19@d.example.com>
48X-Spam-Checker-Version: SpamAssassin 2.60-jumbo.demos (1.212-2003-09-23-exp)
49X-Spam-Level:
50X-Spam-Status: No, hits=-6.8 required=5.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
51	HTML_MESSAGE,SUBJECT_RT autolearn=ham version=2.60-jumbo.demos
52X-Spam-Report: -6.8 points, 5.0 required;
53	* -3.0 SUBJECT_RT Tracking system
54	*  1.0 FROM_ENDS_IN_NUMS From: ends in numbers
55	*  0.1 HTML_MESSAGE BODY: HTML included in message
56	* -4.9 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
57	*      [score: 0.0000]
58
59
60--Boundary-00=_z3Ln/tUeUBipHgx
61Content-Type: text/plain;
62  charset="koi8-r"
63Content-Transfer-Encoding: 7bit
64Content-Disposition: inline
65
66
67FYI
68
69
70----------  Forwarded Message  ----------
71
72Subject: [DEMOS #12148] scanning my ports
73Date: Sunday 26 October 2003 20:19
74From: 1stwizard@isp.example.com
75To: no-reply@d-r.example.com
76
77This transaction appears to have no content
78
79-------------------------------------------------------
80
81
82
83--
84best wishes,
85
86Stanislav A. Mushkat
87http://www.di.example.com
88
89--Boundary-00=_z3Ln/tUeUBipHgx
90Content-Type: text/plain;
91  charset="iso-8859-1";
92  name=" "
93Content-Transfer-Encoding: 7bit
94Content-Disposition: inline
95
96Somebody at IP 127.0.0.1 scanned my ports.
97--Boundary-00=_z3Ln/tUeUBipHgx
98Content-Type: text/html;
99  charset="iso-8859-1";
100  name=" "
101Content-Transfer-Encoding: 7bit
102Content-Disposition: inline
103
104<HTML><HEAD>
105<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
106<META content="IncrediMail 1.0" name=GENERATOR>
107<!--IncrdiXMLRemarkStart>
108<IncrdiX-Info>
109<X-FID>BA285063-5BCE-11D4-AF8D-0050DAC67E11</X-FID>
110<X-FVER>2.0</X-FVER>
111<X-FIT>Letter</X-FIT>
112<X-FCOL>Elegant Paper</X-FCOL>
113<X-FCAT>Stationery</X-FCAT>
114<X-FDIS>Rice Fields</X-FDIS>
115<X-Extensions>SU1CTDEsNDEsgUmBSTAkkcGNgZmVTY0wNCxNhYUoiU0kOMEoTYGBjYEoJDSZnSyFhUksSU1CTDIsMCwsSU1CTDMsMCwsVHlwZVZlcnNpb24sMywxLjAs</X-Extensions>
116<X-BG>8E549F43-079D-11D8-B0F9-00B0D0B65B96</X-BG>
117<X-BGT>repeat</X-BGT>
118<X-BGC>#eff3f7</X-BGC>
119<X-BGPX>left</X-BGPX>
120<X-BGPY>0px</X-BGPY>
121<X-ASN>ANIM3D00-NONE-0000-0000-000000000000</X-ASN>
122<X-ASNF>0</X-ASNF>
123<X-ASH>ANIM3D00-NONE-0000-0000-000000000000</X-ASH>
124<X-ASHF>1</X-ASHF>
125<X-AN>6486DDE0-3EFD-11D4-BA3D-0050DAC68030</X-AN>
126<X-ANF>0</X-ANF>
127<X-AP>6486DDE0-3EFD-11D4-BA3D-0050DAC68030</X-AP>
128<X-APF>1</X-APF>
129<X-AD>C3C52140-4147-11D4-BA3D-0050DAC68030</X-AD>
130<X-ADF>0</X-ADF>
131<X-AUTO>X-ASN,X-ASH,X-AN,X-AP,X-AD</X-AUTO>
132<X-CNT>;</X-CNT>
133</IncrdiX-Info>
134<IncrdiXMLRemarkEnd-->
135</HEAD>
136<BODY style="BACKGROUND-POSITION: left 0px; FONT-SIZE: 12pt; MARGIN: 0px 10px 10px; COLOR: #00005b; BACKGROUND-REPEAT: repeat; FONT-FAMILY: Arial" text=#00005b bgColor=#eff3f7 background=cid:8E549F43-079D-11D8-B0F9-00B0D0B65B96 scroll=yes SIGCOLOR="0" X-ADF="0" X-AD="C3C52140-4147-11D4-BA3D-0050DAC68030" X-APF="1" X-AP="6486DDE0-3EFD-11D4-BA3D-0050DAC68030" X-ANF="0" X-AN="6486DDE0-3EFD-11D4-BA3D-0050DAC68030" X-ASHF="1" X-ASH="ANIM3D00-NONE-0000-0000-000000000000" X-ASNF="0" X-ASN="ANIM3D00-NONE-0000-0000-000000000000" X-FVER="2.0" X-FID="BA285063-5BCE-11D4-AF8D-0050DAC67E11" X-FIT="Letter" X-FCOL="Elegant Paper" X-FCAT="Elegant Paper" X-FDIS="Rice Fields" ORGYPOS="0">
137<TABLE id=INCREDIMAINTABLE cellSpacing=0 cellPadding=2 width="100%" border=0>
138<TBODY>
139<TR>
140<TD id=INCREDITEXTREGION style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; FONT-SIZE: 12pt; PADDING-BOTTOM: 0px; CURSOR: auto; PADDING-TOP: 0px" vAlign=top width="100%">
141<DIV>Somebody at IP 127.0.0.1 scanned my ports. </DIV>
142<DIV>&nbsp;</DIV>
143<DIV>&nbsp;</DIV></TD></TR>
144<TR>
145<TD id=INCREDIFOOTER width="100%">
146<TABLE cellSpacing=0 cellPadding=0 width="100%">
147<TBODY>
148<TR>
149<TD width="100%"></TD>
150<TD id=INCREDISOUND vAlign=bottom align=middle></TD>
151<TD id=INCREDIANIM vAlign=bottom align=middle></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY></HTML>
152--Boundary-00=_z3Ln/tUeUBipHgx
153Content-Type: image/jpeg;
154  charset="iso-8859-1";
155  name="BackGrnd.jpg"
156Content-Transfer-Encoding: base64
157Content-Disposition: inline; filename="BackGrnd.jpg"
158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191
192--Boundary-00=_z3Ln/tUeUBipHgx--
193
194