Paste-1221239030:v:use_geshi-1:v:type-text

[SleePy]

Return-path: <jsclee@ms47.hinet.net>
Envelope-to: xxxx@xxxxxx.com
Delivery-date: Fri, 12 Sep 2008 02:16:57 -0700
Received: from 66.89.158.2.ptr.us.xo.net ([66.89.158.2])
   by server.xxxxxx.com with esmtp (Exim 4.69)
   (envelope-from <jsclee@ms47.hinet.net>)
   id 1Ke4lp-0003PV-5D
   for xxxx@xxxxxx.com; Fri, 12 Sep 2008 02:16:57 -0700
Message-ID: <04752.rob@hiroshi>
Date: Fri, 12 Sep 2008 07:29:32 +0000
From: "ICS Monitoring Team" <jsclee@ms47.hinet.net>
User-Agent: Thunderbird 2.0.0.12 (Windows/20080213)
MIME-Version: 1.0
To: "client" <xxxx@xxxxxx.com>
Content-Type: multipart/mixed;
 boundary="830E5B4FC2D61AD"
X-Spam-Status: Yes, score=19.6
X-Spam-Score: 196
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.brainsg.com", has
   identified this incoming email as possible spam.  The original message
   has been attached to this so you can view it (if it isn't spam) or label
   similar future email.  If you have any questions, see
   the administrator of that system for details.
   Content preview:  Your internet access is going to get suspended The Internet
   Service Provider Consorcium was made to protect the rights of software authors,
   artists. We conduct regular wiretapping on our networks, to monitor criminal
   acts. [...]
   Content analysis details:   (19.6 points, 4.0 required)
   pts rule name              description
   ---- ---------------------- --------------------------------------------------
   3.0 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
   [66.89.158.2 listed in zen.spamhaus.org]
   4.4 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
   2)
   3.5 HELO_DYNAMIC_SPLIT_IP  Relay HELO'd using suspicious hostname (Split
   IP)
   1.9 TVD_RCVD_IP            TVD_RCVD_IP
   2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
   [Blocked - see <http://www.spamcop.net/bl.shtml?66.89.158.2>]
   2.1 RCVD_NUMERIC_HELO      Received: contains an IP address used for HELO
   2.0 BAYES_80               BODY: Bayesian spam probability is 80 to 95%
   [score: 0.8241]
   0.6 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is a abuseable web server
   [66.89.158.2 listed in dnsbl.sorbs.net]
   0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
   dynamic-looking rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Your internet access is going to get suspended

This is a multi-part message in MIME format.

--830E5B4FC2D61AD
Content-Type: text/plain;
 charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Your internet access is going to get suspended

The Internet Service Provider Consorcium was made to protect the rights of software authors, artists.
We conduct regular wiretapping on our networks, to monitor criminal acts.

We are aware of your illegal activities on the internet wich were originating from

You can check the report of your activities in the past 6 month that we have attached. We strongly advise you to stop your activities regarding the illegal downloading of copyrighted material of your internet access will be suspended.

Sincerely
ICS Monitoring Team