SUCCESS! - news.admin.net-abuse.email

Message from discussion SUCCESS!

No spammage

View profile

More options Aug 6 2004, 12:47 am

Newsgroups: news.admin.net-abuse.email

From: spammaha...@yahoo.com (No spammage)

Date: 5 Aug 2004 21:47:52 -0700

Local: Fri, Aug 6 2004 12:47 am

Subject: Re: SUCCESS!

  Reply to author
  |
  Forward
  | Print
  | View thread
  | Show original
  | Report this message
  | Find messages by this author
  

Murray Watson wrote:
> In news.admin.net-abuse.email - article <10h2v3jgbdgo434
> @corp.supernews.com>, on Wed, 04 Aug 2004 17:18:16 -0700, glgxg
> says...
> > glgxg wrote:

> > [snip]

> > > FIRST.BUENOCARTO.INFO = 221.143.42.209 / HANARO
> > > SECOND.BUENOCARTO.INFO = 221.139.2.84 / HANARO
> > > THIRD.BUENOCARTO.INFO = 61.128.198.10 / CHINANET-CQ
> > > ADDON.BUENOCARTO.INFO = 219.146.151.49 / CHINATELECOM-sd

> > > Total Domains Trend - BUENOCARTO.INFO

> > > Weeks Total Domains
> > > 08/02/04 27
> > > 07/26/04 27
> > > 07/19/04 27
> > > 07/12/04 19

> > Forgot:

> > 221.143.42.209 - IP hosts 16 Total Domains ...
> > Showing 1 - 16 out of 16

> > Domain Name
> > 1 AGBBALIE.INFO.
> ...
> [snip]

> What else shows up on the following IP,

> Canonical name: sfi.propylene3479pi11s.us
> Addresses:
> 221.143.42.37

> it and it's name servers seem to be tied via ad...@sanita77.biz

<...>
For the record, here are some domains, IPs, and DNS for others from
the same asshat (ad...@sanita77.biz):

shingle6722dryg.us (subdomain snipped b/c it's so weird I'm sure it's
a tracking method) at 221.143.42.37 using
NS3.AIRMARAMBA.BIZ and NS2.AUDI56SEW.BIZ

Order page is www.123prescription.biz at 222.55.10.19 using
NS1.AIRMARAMBA.BIZ and NS1.B2002BUKA.BIZ

ns1.b2002buka.biz = 221.143.42.92 using NS1.MOSKVA66.BIZ and
NS2.MOSKVA66.BIZ

ns1.moskva66.biz = 218.66.101.152 and ns2.moskva66.biz =
218.66.17.132.

ns1.airmaramba.biz (222.55.10.19) uses
NS1.BEER99.BIZ = 219.234.95.68 and NS1.LUNOMUN.BIZ = 61.145.118.248

Reply to author Forward