1X-Real-To: <mitya@example.com> 2Received: from [194.87.5.31] (HELO sinbin.d-s.example.com) 3 by cgp.example.com (CommuniGate Pro SMTP 4.0.6/D4) 4 with ESMTP-TLS id 125035761 for mitya@example.com; Thu, 11 Dec 2003 15:17:46 +0300 5Received: (from daemon@localhost) 6 by sinbin.d-s.example.com (8.12.9p1/8.11.6) id hBBCHjN0031595 7 for mitya@example.com; Thu, 11 Dec 2003 15:17:45 +0300 (MSK) 8 (envelope-from noc@rt3.mx.example.com) 9Received: from d-s.example.com by sinbin.d-s.example.com with ESMTP id hBBCHjar031575; 10 (8.12.9p2/D) Thu, 11 Dec 2003 15:17:45 +0300 (MSK) 11X-Real-To: <mitya@example.com> 12Sender: <noc@rt3.mx.example.com> (Network Operation Center) 13To: mitya@example.com 14Date: Thu, 11 Dec 2003 15:17:45 +0300 15Message-ID: <redirect-137509289@d-s.example.com> 16X-Original-Return-Path: <vox19@b92.d-s.example.com> 17Received: from [194.87.0.16] (HELO mail.d-s.example.com) 18 by d-s.example.com (CommuniGate Pro SMTP 4.1.5/D1) 19 with ESMTP id 120757484 for noc@rt3.mx.example.com; Mon, 27 Oct 2003 09:40:53 +0300 20Received: from [194.87.0.22] (HELO moscvax.d-s.example.com) 21 by mail.d-s.example.com (CommuniGate Pro SMTP 4.1.5/D) 22 with ESMTP-TLS id 107945800 for noc@rt3.mx.example.com; Mon, 27 Oct 2003 09:40:53 +0300 23Received: from d-s.example.com (mx.d-s.example.com [194.87.0.32]) 24 by moscvax.d-s.example.com (8.12.9/8.12.9) with ESMTP id h9R6erFm062621 25 for <security@d.example.com>; Mon, 27 Oct 2003 09:40:53 +0300 (MSK) 26 (envelope-from vox19@b92.d-s.example.com) 27Received: by d-s.example.com (CommuniGate Pro PIPE 4.1.5/D1) 28 with PIPE id 120757490; Mon, 27 Oct 2003 09:40:53 +0300 29Received: from [194.87.2.108] (HELO b92.d-s.example.com) 30 by d-s.example.com (CommuniGate Pro SMTP 4.1.5/D1) 31 with ESMTP-TLS id 120757480 for security@d.example.com; Mon, 27 Oct 2003 09:40:52 +0300 32Received: from b92.d-s.example.com (localhost [127.0.0.1]) 33 by b92.d-s.example.com (8.12.8p1/8.12.3) with ESMTP id h9R6eqIe014669 34 for <security@d.example.com>; Mon, 27 Oct 2003 09:40:52 +0300 (MSK) 35 (envelope-from vox19@b92.d-s.example.com) 36Received: from localhost (localhost [[UNIX: localhost]]) 37 by b92.d-s.example.com (8.12.8p1/8.12.3/Submit) id h9R6epst014668 38 for security@d.example.com; Mon, 27 Oct 2003 09:40:51 +0300 (MSK) 39From: "Stanislav" <drstas@d.example.com> 40Subject: Fwd: scanning my ports 41X-Original-Date: Mon, 27 Oct 2003 10:40:51 +0400 42User-Agent: KMail/1.5.4 43X-Original-To: security@d.example.com 44MIME-Version: 1.0 45Content-Type: Multipart/Mixed; 46 boundary="Boundary-00=_z3Ln/tUeUBipHgx" 47X-Original-Message-Id: <200310270940.51758.vox19@d.example.com> 48X-Spam-Checker-Version: SpamAssassin 2.60-jumbo.demos (1.212-2003-09-23-exp) 49X-Spam-Level: 50X-Spam-Status: No, hits=-6.8 required=5.0 tests=BAYES_00,FROM_ENDS_IN_NUMS, 51 HTML_MESSAGE,SUBJECT_RT autolearn=ham version=2.60-jumbo.demos 52X-Spam-Report: -6.8 points, 5.0 required; 53 * -3.0 SUBJECT_RT Tracking system 54 * 1.0 FROM_ENDS_IN_NUMS From: ends in numbers 55 * 0.1 HTML_MESSAGE BODY: HTML included in message 56 * -4.9 BAYES_00 BODY: Bayesian spam probability is 0 to 1% 57 * [score: 0.0000] 58 59 60--Boundary-00=_z3Ln/tUeUBipHgx 61Content-Type: text/plain; 62 charset="koi8-r" 63Content-Transfer-Encoding: 7bit 64Content-Disposition: inline 65 66 67FYI 68 69 70---------- Forwarded Message ---------- 71 72Subject: [DEMOS #12148] scanning my ports 73Date: Sunday 26 October 2003 20:19 74From: 1stwizard@isp.example.com 75To: no-reply@d-r.example.com 76 77This transaction appears to have no content 78 79------------------------------------------------------- 80 81 82 83-- 84best wishes, 85 86Stanislav A. Mushkat 87http://www.di.example.com 88 89--Boundary-00=_z3Ln/tUeUBipHgx 90Content-Type: text/plain; 91 charset="iso-8859-1"; 92 name=" " 93Content-Transfer-Encoding: 7bit 94Content-Disposition: inline 95 96Somebody at IP 127.0.0.1 scanned my ports. 97--Boundary-00=_z3Ln/tUeUBipHgx 98Content-Type: text/html; 99 charset="iso-8859-1"; 100 name=" " 101Content-Transfer-Encoding: 7bit 102Content-Disposition: inline 103 104<HTML><HEAD> 105<META http-equiv=Content-Type content="text/html; charset=iso-8859-1"> 106<META content="IncrediMail 1.0" name=GENERATOR> 107<!--IncrdiXMLRemarkStart> 108<IncrdiX-Info> 109<X-FID>BA285063-5BCE-11D4-AF8D-0050DAC67E11</X-FID> 110<X-FVER>2.0</X-FVER> 111<X-FIT>Letter</X-FIT> 112<X-FCOL>Elegant Paper</X-FCOL> 113<X-FCAT>Stationery</X-FCAT> 114<X-FDIS>Rice Fields</X-FDIS> 115<X-Extensions>SU1CTDEsNDEsgUmBSTAkkcGNgZmVTY0wNCxNhYUoiU0kOMEoTYGBjYEoJDSZnSyFhUksSU1CTDIsMCwsSU1CTDMsMCwsVHlwZVZlcnNpb24sMywxLjAs</X-Extensions> 116<X-BG>8E549F43-079D-11D8-B0F9-00B0D0B65B96</X-BG> 117<X-BGT>repeat</X-BGT> 118<X-BGC>#eff3f7</X-BGC> 119<X-BGPX>left</X-BGPX> 120<X-BGPY>0px</X-BGPY> 121<X-ASN>ANIM3D00-NONE-0000-0000-000000000000</X-ASN> 122<X-ASNF>0</X-ASNF> 123<X-ASH>ANIM3D00-NONE-0000-0000-000000000000</X-ASH> 124<X-ASHF>1</X-ASHF> 125<X-AN>6486DDE0-3EFD-11D4-BA3D-0050DAC68030</X-AN> 126<X-ANF>0</X-ANF> 127<X-AP>6486DDE0-3EFD-11D4-BA3D-0050DAC68030</X-AP> 128<X-APF>1</X-APF> 129<X-AD>C3C52140-4147-11D4-BA3D-0050DAC68030</X-AD> 130<X-ADF>0</X-ADF> 131<X-AUTO>X-ASN,X-ASH,X-AN,X-AP,X-AD</X-AUTO> 132<X-CNT>;</X-CNT> 133</IncrdiX-Info> 134<IncrdiXMLRemarkEnd--> 135</HEAD> 136<BODY style="BACKGROUND-POSITION: left 0px; FONT-SIZE: 12pt; MARGIN: 0px 10px 10px; COLOR: #00005b; BACKGROUND-REPEAT: repeat; FONT-FAMILY: Arial" text=#00005b bgColor=#eff3f7 background=cid:8E549F43-079D-11D8-B0F9-00B0D0B65B96 scroll=yes SIGCOLOR="0" X-ADF="0" X-AD="C3C52140-4147-11D4-BA3D-0050DAC68030" X-APF="1" X-AP="6486DDE0-3EFD-11D4-BA3D-0050DAC68030" X-ANF="0" X-AN="6486DDE0-3EFD-11D4-BA3D-0050DAC68030" X-ASHF="1" X-ASH="ANIM3D00-NONE-0000-0000-000000000000" X-ASNF="0" X-ASN="ANIM3D00-NONE-0000-0000-000000000000" X-FVER="2.0" X-FID="BA285063-5BCE-11D4-AF8D-0050DAC67E11" X-FIT="Letter" X-FCOL="Elegant Paper" X-FCAT="Elegant Paper" X-FDIS="Rice Fields" ORGYPOS="0"> 137<TABLE id=INCREDIMAINTABLE cellSpacing=0 cellPadding=2 width="100%" border=0> 138<TBODY> 139<TR> 140<TD id=INCREDITEXTREGION style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; FONT-SIZE: 12pt; PADDING-BOTTOM: 0px; CURSOR: auto; PADDING-TOP: 0px" vAlign=top width="100%"> 141<DIV>Somebody at IP 127.0.0.1 scanned my ports. </DIV> 142<DIV> </DIV> 143<DIV> </DIV></TD></TR> 144<TR> 145<TD id=INCREDIFOOTER width="100%"> 146<TABLE cellSpacing=0 cellPadding=0 width="100%"> 147<TBODY> 148<TR> 149<TD width="100%"></TD> 150<TD id=INCREDISOUND vAlign=bottom align=middle></TD> 151<TD id=INCREDIANIM vAlign=bottom align=middle></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY></HTML> 152--Boundary-00=_z3Ln/tUeUBipHgx 153Content-Type: image/jpeg; 154 charset="iso-8859-1"; 155 name="BackGrnd.jpg" 156Content-Transfer-Encoding: base64 157Content-Disposition: inline; filename="BackGrnd.jpg" 158 159/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAHgAA/+4AIUFk 160b2JlAGTAAAAAAQMAEAMCAwYAAAHbAAAC1gAABZX/2wCEABALCwsMCxAMDBAX 161Dw0PFxsUEBAUGx8XFxcXFx8eFxoaGhoXHh4jJSclIx4vLzMzLy9AQEBAQEBA 162QEBAQEBAQEABEQ8PERMRFRISFRQRFBEUGhQWFhQaJhoaHBoaJjAjHh4eHiMw 163Ky4nJycuKzU1MDA1NUBAP0BAQEBAQEBAQEBAQP/CABEIAGUAcwMBIgACEQED 164EQH/xACAAAEBAQEAAAAAAAAAAAAAAAAAAQIGAQEBAAAAAAAAAAAAAAAAAAAA 165ARABAAICAwEAAgMAAAAAAAAAAQARIQIxQRIiQDIQMFARAAICAgIBBAIDAQEA 166AAAAAAERACExQVFhcYGRobECEsHhMtHxEgEAAAAAAAAAAAAAAAAAAABQ/9oA 167DAMBAAIRAxEAAADtRZYE1ASghQFgUZoCkKSwLmhcllAEqkSkqFAlhUomoAS3 168IoJqFlDNpFEAQFE1AIVYAWIVKAJRNZpYCwVmmshKACA0CBAUCBYGwf/aAAgB 169AgABBQD8B/yP/9oACAEDAAEFAPz6/or8H//aAAgBAQABBQC2+ZeHjbD+saX6 170hwXeDW1Rg4xLLTa+m7ZiIEsI1MTiHP1dYpvFADiFM1/X6nq9byuwdPPz5oFo 171fWlEMQ9ULKrWq2ppG9Y2J6INQma9lVTRdlUKgHzXXSEECw1SYu5WsGoJPkis 172ZYpx31GvXZQ/JM3VwShzVTsp1EZbBI8LcaUSih86+s2Zl4Wp6+lAZnVsDkjd 173ku5m+lJTdXDG2SHM9M2wKX1YxsaZTTwmoVrYnqsMrM652yjs01K0mtbGAz6Y 1745dpfqNz06qpq5QNjiIjiZtbhtceNuf0jyeqGgu6rXMvI4omPWbPMYzEfMI+a 175xHnFvOP4/9oACAECAgY/AGP/2gAIAQMCBj8AY//aAAgBAQEGPwB72Yucb1Bf 176IhFEaeZ+xRXFQELN+HEUQdjU0Xn4g9gRCQcpw1yajGYsP/kFvUzvjUBWrIMF 177HI2OJQNEAjiEEFdTmfG/MTHq5RFOnpTV3kzCBx7x4YOD1AV5uYJvnqMA0hep 178jfwpYCwC4Bx3q55zeZRBCw9TkoIuHw78RdczSNH2mgqcLpRC+RASAkA3B13m 179cYd5mR84c/yOx4lWtRAZ6mGDhiP9WgXVyhWA+xDgMOWGMsTg/wBTz8SjjXrP 1808hHIlX1MZ6mDzgc/cIV/iyN1GBR0MQMKjnEzvvMz8mUkErKlfqU63iV+IKNH 1817mNZBLFQEpEDeDOV32IVn8WR4caoywqI2p695mbZzNUQIcKfk0bo+0NpCqn7 182CiQiNGXkdQen1DpjGeZ7WNw3pK+I93maCPc16+Zkf6XxMCsFwAkaiIB57vc/ 183IAhZ/HqZBBbB0ZokAEOGxsYqBgPp8agQBu4VSMJdqx6SwDsGBrTmAR93uZGX 1846KePowEADAIjoX8gw459CICaW/MLGvodQfkDW71zBxRHtB3j3jC4PMIYoAgK 185NfPMCQNN7jCzvlzXPopzhQvNZY3CRya9ZrEFfRE0iCB5mscZuVYfKmAi94uE 1863Q8qfytQ7xD0svmFcmaxNPI8iMjh3pmF2HbzqeUi+YkiD/MrOl5LmbwPuWVf 187mXpv3hDH8qAjPpiZHXkRnSd6ZhB53mejzKV6US0K9TCCLyCeIhtETX5MsHBG 188JkD/ANiFkMCE2qGoCdZ8Q8AMGpYFqEhdhRIYH3CF3d1M/Mexma+4CwdQ2Ddc 189x0exAlmj04QUQd8QWLB/iB5GxmEg5TENVZqPYzFV8eHAy9T/AEc8a4n3Ov6g 190/VwvE6lpQ4VNysXzhS8esOO8w/rlF/rypjV3B5H1Knr8T//Z 191 192--Boundary-00=_z3Ln/tUeUBipHgx-- 193 194