news.admin.net-abuse.sightings Google Group

[email] JURUTAIP DIRUMAH DIPERLUKAN: RM3,800 SEBULAN (PENDAFTARAN PERCUMA)

na...@shell.connactivity.com (USENET n.a.n-a.s reports) — Mon, 13 Oct 2008 05:21:52 UT

This is guaranteed spam from unconfirmed opt-in mailing lists for spurious
addresses at poopypants.com or other vanity domains. horm...@fw.merk.com is a USENET spamtrap seed.
----------------------
From fast_advert...@yahoo.com Mon Oct 13 01:20:51 2008
Received: from n26.bullet.mail.mud.yahoo.com
(n26.bullet.mail.mud.yahoo.com [68.142.206.221]) by shell.public.com

[email] from Nellie Hewitt

na...@shell.connactivity.com (USENET n.a.n-a.s reports) — Mon, 13 Oct 2008 05:24:35 UT

This is guaranteed spam from unconfirmed opt-in mailing lists for spurious
addresses at poopypants.com or other vanity domains. horm...@fw.merk.com is a USENET spamtrap seed.
----------------------
From mykojyk...@bornfrompain.com Mon Oct 13 01:24:35 2008
Received: from leased-line-gomel-91-149-153-6 3.telecom.by

[email] SPAM 00534-10-034: Studio42 Show Request

spam-ha...@studio42.com (Spam Hater at Studio42) — Mon, 13 Oct 2008 05:10:35 UT

[link]
[studio42@flatus studio42]$ host 193.171.32.4
Host 4.32.171.193.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 193.171.3...@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.

[email] Trivia Question of the Day: 10/13

na...@shell.connactivity.com (USENET n.a.n-a.s reports) — Mon, 13 Oct 2008 05:17:54 UT

This is guaranteed spam from unconfirmed opt-in mailing lists for spurious
addresses at poopypants.com or other vanity domains. horm...@fw.merk.com is a USENET spamtrap seed.
----------------------
From f...@sploofus.com Mon Oct 13 01:17:52 2008
Received: from app1.sploofus.com (app1.sploofus.com [205.145.138.122]) by

[misc] Persistent Guestbook pr0n spammers: farlex.com, thefreedictionary.com, yourworldcasino.com, 89.com, rx32.com, rxp-forever.com, salaryper.com, paylesscasino.com, stormpaysite.com, resersite.com, bestpayper.com, worldbestdate.com

abuse-...@2008.dolphinwave.org (Admin) — Mon, 13 Oct 2008 04:51:20 UT

Persistent Guestbook pr0n spammers: farlex.com, thefreedictionary.com,
yourworldcasino.com, 89.com, rx32.com, rxp-forever.com, salaryper.com,
paylesscasino.com, stormpaysite.com, resersite.com, bestpayper.com,
WorldBestDate.com!
Spamming from the same ukrtel.net and pacificrack.com/Secured Private Network

[misc] Long-time persistent ICQ spammers, pr0n, passports and credit cards fraud: sex-trax.ru, vip-porevo.ru, kredkart.ru, dmyko.cn, freeero.ru, rakar.ru, golayapravda.com, vpornuxe.co.cc, video-hack.net, huyasebedns.ru, shir.cc, sms2video.ru, sexy9.ru, karpla.cn, sexflin.ru, tvoi-dosug.com, poleznii.ru, karding-7.ru, kreditkart.ru, new-pasport.biz, new-pasport.org, pasport111.ru

abuse-...@2008.dolphinwave.org (Admin) — Mon, 13 Oct 2008 04:51:41 UT

Long-time persistent ICQ spammers, pr0n, passports and credit cards fraud!
All are being hosted on the same MIZUNET, hostnoc.net and nac.net IPs,
with redirects farther to spam pages hosted on Alpha Red and Akrino, who
refuse to take any action against the abusers.
======= ICQ SPAM WAS ======Authorization Request 2008-10-13 06:39:49 [----] server:

[email] ¦p¦ó¦³®Ä°§C¶}µo¦¨¥»¡H

na...@shell.connactivity.com (USENET n.a.n-a.s reports) — Mon, 13 Oct 2008 04:25:14 UT

This is guaranteed spam from unconfirmed opt-in mailing lists for spurious
addresses at poopypants.com or other vanity domains. horm...@fw.merk.com is a USENET spamtrap seed.
----------------------
From ChandraTa...@ms19.hinet.net Mon Oct 13 00:25:12 2008
Received: from lycshop.de (lycshop.de [85.214.44.230]) by

[email] Relax and take your time

na...@shell.connactivity.com (USENET n.a.n-a.s reports) — Mon, 13 Oct 2008 03:32:24 UT

This is guaranteed spam from unconfirmed opt-in mailing lists for spurious
addresses at poopypants.com or other vanity domains. horm...@fw.merk.com is a USENET spamtrap seed.
----------------------
From dwu...@ueb.be Sun Oct 12 23:32:23 2008
Received: from gw-Rosno.hypernet.ru (gw-Rosno.hypernet.ru [81.90.214.214]

[email] ¤µ¤Ñ¦A¦¸¨Ó¨ì"³Ç²z¼Úªk¤pÀ]"¡A¬O¬°¤F¦Ñª¨³Ì·Rªº¼w°ê½Þ¸}¦Ó¨Ó¡ã

na...@shell.connactivity.com (USENET n.a.n-a.s reports) — Mon, 13 Oct 2008 03:26:16 UT

This is guaranteed spam from unconfirmed opt-in mailing lists for spurious
addresses at poopypants.com or other vanity domains. horm...@fw.merk.com is a USENET spamtrap seed.
----------------------
From Alberta.Ma...@msa.hinet.net Sun Oct 12 23:26:14 2008
Received: from ns.km22808-04.keymachine.de (ns.km22808-04.keymachine.de

[email] From Alex

na...@shell.connactivity.com (USENET n.a.n-a.s reports) — Mon, 13 Oct 2008 02:28:13 UT

This is guaranteed spam from unconfirmed opt-in mailing lists for spurious
addresses at poopypants.com or other vanity domains. horm...@fw.merk.com is a USENET spamtrap seed.
----------------------
From mamadou...@gmail.com Sun Oct 12 22:28:12 2008
Received: from smtp-auth-be-06.sunrise.ch (mx-auth.sunrise.ch

[email]

na...@shell.connactivity.com (USENET n.a.n-a.s reports) — Mon, 13 Oct 2008 02:24:06 UT

This is guaranteed spam from unconfirmed opt-in mailing lists for spurious
addresses at poopypants.com or other vanity domains. horm...@fw.merk.com is a USENET spamtrap seed.
----------------------
From dean...@ms82.hinet.net Sun Oct 12 22:24:01 2008
Received: from relay.ifp.kiev.ua (relay.ifp.kiev.ua [83.218.240.138]) by

[email] Bargain Wholesale Price Medipills, over 300 popular brands - International Delivery nti dtcd

ow...@hubris.net (Chris Owen) — Mon, 13 Oct 2008 02:23:01 UT

Return-Path: <egenie...@ryeco.com>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on corp.hubris.net
X-Spam-Level: sssssssss
X-Spam-Status: Yes, score=10.0 required=5.0 tests=BAYES_99,FH_RELAY_NODNS,
HUBRIS_X_REJECT_CLIENT,RCVD_IN _NOMOREFUNN,RCVD_IN_PBL,RDNS_N ONE autolearn=no

[email] From Steve Fry

na...@shell.connactivity.com (USENET n.a.n-a.s reports) — Mon, 13 Oct 2008 02:27:11 UT

This is guaranteed spam from unconfirmed opt-in mailing lists for spurious
addresses at poopypants.com or other vanity domains. horm...@fw.merk.com is a USENET spamtrap seed.
----------------------
From dwsteinbe...@steinberg.de Sun Oct 12 22:27:08 2008
Received: from SLONZLA (dynamic-vpdn-gomel-91-149-131 -5.telecom.by

[email][ST48f2a746] Control y prevencion de incendios

none_none1_inva...@yahoo.com — Mon, 13 Oct 2008 01:41:32 UT

From castalv1231234#arnet.com.ar Sun Oct 12 18:41:25 2008
Return-path: <castalv1231234#arnet.com.ar>
Envelope-to: xxxxxxxxxxx
Delivery-date: Sun, 12 Oct 2008 18:41:25 -0700
Received: from [190.244.168.240] (helo=arnet.com.ar)
by local with smtp (Exim 4.66)
(envelope-from <castalv1231234#arnet.com.ar>)

[email] (121.35.178.3) ##咨购##？！

cpoll...@embarqmail.com (Chris) — Mon, 13 Oct 2008 01:20:28 UT

An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
ab...@gddc.com.cn, wangc...@sfn.cn chinafriends
Message abstract:
Message ID: <3D.66.17849.1918D...@spam02.e mbarq.synacor.com>