Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From lxuabx@glmproperties.net  Tue Dec 20 00:46:02 2016
Return-Path: <lxuabx@glmproperties.net>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id D973D375254EA; Tue, 20 Dec 2016 00:46:01 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Tue, 20 Dec 2016 00:46:01 +0100
Subject: *****SPAM***** 
Message-Id: <I[20
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **********************************
X-Spam-Status: Yes, score=34.0 required=5.0 tests=BAYES_99,EMPTY_MESSAGE,
	FH_FAKE_RCVD_LINE,FSL_HELO_BARE_IP_2,INVALID_MSGID,MISSING_DATE,MISSING_FROM,
	MISSING_HEADERS,MISSING_SUBJECT,MSGID_SHORT,RCVD_DOUBLE_IP_SPAM,
	RCVD_HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,
	RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_XBL,
	RCVD_NUMERIC_HELO,RDNS_NONE,TT_MSGID_TRUNC,TVD_RCVD_IP,TVD_RCVD_IP4,
	UNCLOSED_BRACKET autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_58587139.732894B5"
Date: Tue, 20 Dec 2016 00:46:01 +0100 (CET)
From: lxuabx@glmproperties.net

This is a multi-part message in MIME format.

------------=_58587139.732894B5
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  [...] 

Content analysis details:   (34.0 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                            [93.189.251.53 listed in bl.score.senderscore.com]
 0.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [93.189.251.53 listed in zen.spamhaus.org]
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [93.189.251.53 listed in psbl.surriel.com]
 3.5 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                            [score: 1.0000]
 0.0 MSGID_SHORT            Message-ID is unusually short
 1.5 UNCLOSED_BRACKET       Headers contain an unclosed bracket
 0.0 TVD_RCVD_IP            No description available.
 0.0 TVD_RCVD_IP4           No description available.
 2.3 FH_FAKE_RCVD_LINE      RCVD line looks faked (A)
 1.4 TT_MSGID_TRUNC         Scora: Message-Id ends after left-bracket + digits
 1.0 MISSING_HEADERS        Missing To: header
 2.4 RCVD_HELO_IP_MISMATCH  Received: HELO and IP do not match, but should
 1.2 RCVD_NUMERIC_HELO      Received: contains an IP address used for HELO
 2.4 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                            [93.189.251.53 listed in bl.mailspike.net]
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <http://www.spamcop.net/bl.shtml?93.189.251.53>]
 1.4 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
                            [93.189.251.53 listed in bb.barracudacentral.org]
 1.8 MISSING_SUBJECT        Missing Subject: header
 0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
 1.8 RCVD_DOUBLE_IP_SPAM    Bulk email fingerprint (double IP) found
 1.4 MISSING_DATE           Missing Date: header
 2.3 EMPTY_MESSAGE          Message appears to have no textual parts and no
                            Subject: text
 1.0 MISSING_FROM           Missing From: header
 0.6 INVALID_MSGID          Message-Id is not valid, according to RFC 2822
 1.5 FSL_HELO_BARE_IP_2     No description available.



------------=_58587139.732894B5
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from 85.214.156.58 (unknown [93.189.251.53])
	by ift-informatik.de (Postfix) with SMTP id E324C375254E6
	for <tobias.jungblut@ift-informatik.de>; Tue, 20 Dec 2016 00:45:59 +0100 (CET)
Received: from 132.130.50.160 by 93.189.251.53; Tue, 20 Dec 2016 05:44:59 +0600
Message-ID: <I[20

------------=_58587139.732894B5--