Spamvert:
26qd8f7wqspxlkkfp22f722k.tarnalnh.com IP 221.4.247.51
tarnalnh.com IP 221.4.247.51
(SBL40805) (at CNCGROUP-GD)
gh.alkyleneja.com IP 222.170.97.137 => (ROK4932 - SBL41604)
vk.alkyleneja.com IP 222.51.91.98 => (ROK4932 - SBL41603 / SBL41402)
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.166; Tue, 09 May 2006
12:05:42 -0700
X-YahooFilteredBulk: 220.78.73.30
X-Originating-IP: [220.78.73.30]
Return-Path: <hfr...@griffinsforge.com>
Authentication-Results: mta218.mail.mud.yahoo.com
from=griffinsforge.com; domainkeys=neutral (no sig)
Received: from 207.228.2.... (EHLO xxx.web-hosting.com) (207.228.2....
by mta218.mail.mud.yahoo.com with SMTP; Tue, 09 May 2006 12:05:42 -0700
Received: from -1212692088 ([220.78.73.30]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k49J5Yd26481 for <xx..xx@xx..xx.com>; Tue,
9 May 2006 15:05:39 -0400 (EDT)
Received: from griffinsforge.com (-1212167600 [-1212166552]) by
ghosef.com (Qmailv1) with ESMTP id 6D50DBA45F for <xx..xx@xx..xx.com>;
Tue, 09 May 2006 13:50:10 -0500
Date: Tue, 09 May 2006 13:50:10 -0500
From:"Tremulously U. Ameliorate" <hfr...@griffinsforge.com>
X-Mailer: The Bat! (v2.00.4) Personal
X-Priority: 3
Message-ID: <0194810956.2...@griffinsforge.com>
To: xx..xx@xx..xx.com
Subject: Software
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by Ameriserv.net Anti-Virus E-Gateway
Content-Length: 627
What IS 0EM software and why do you care?
Need s0ftware? Click here.
New software on our site:
Dreamweaver MX 2004 $69.95
Office XP Professional - $79.95
FreeHand MX - $69.95
Photoshop CS with ImageReady CS - $99.95
Windows Millenium - $59.95
Works 7 - $69.95
Encarta Encyclopedia Delux 2004 (3CD) - $89.95
Visual Studio .NET Architect Edition (8CD) - $139.95
Visio 2003 Professional - $69.95
Photoshop 7 - $69.95
Illustrator CS - $69.95
Streets and Trips 2004 North America (2CD) - $69.95
SQL Server 2000 Enterprise Edition - $69.95
PhotoRetouch Pro 3.0 - $59.95
Our site:
http://26qd8f7wqspxlkkfp22f722k.tarnalnh.com/
-- END OF SPAM --
See:
IP 220.78.73.30
http://www.moensted.dk/spam/?addr=220.78.73.30
http://cbl.abuseat.org/lookup.cgi?ip=220.78.73.30
http://www.spamhaus.org/query/bl?ip=220.78.73.30
http://www.spamcop.net/bl.shtml?220.78.73.30
IPv4 Address : 220.78.73.0-220.78.73.255
Network Name : KORNET-INFRA000001
Connect ISP Name : KORNET
Organization ID : ORG1600
Org Name : Korea Telecom
Address : Jungja-dong, Bundang-gu, Sungnam-ci
route: 220.72.0.0/13
descr: KORnet Powered BY Korea Telecom
origin: AS4766
mnt-by: MAINT-AS4766
changed: chinny7...@kornet.net
http://www.cidr-report.org/cgi-bin/as-report?as=4766
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 220.64.0.0 to 220.95.255.255
24 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
See Spamvert:
26qd8f7wqspxlkkfp22f722k.tarnalnh.com IP 221.4.247.51
gh.alkyleneja.com A IN 3600 222.170.97.137
vk.alkyleneja.com A IN 3600 222.51.91.98
26qd8f7wqspxlkkfp22f722k.tarnalnh.com has no MX records -> tarnalnh.com
has no MX records
http://www.moensted.dk/spam/?addr=221.4.247.51
http://www.spamhaus.org/query/bl?ip=221.4.247.51
inetnum: 221.4.0.0 - 221.5.127.255
netname: CNCGROUP-GD
descr: CNC Group Guangdong province network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
route: 221.4.0.0/16
descr: CNC Group CHINA169 Guangdong Province Network
origin: AS17816
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
http://www.cidr-report.org/cgi-bin/as-report?as=17816
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40805
221.4.247.0/24 is listed on the Spamhaus Block List (SBL)
06-May-2006 22:53 GMT | SR02
Dirty Block
5 SBL/ROKSO listings for IPs under the responsibility of CNCGROUP-GD
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-GD
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : tarnalnh.com (TARNAL3-BMN-DOM)
Registrar : BookMyName
Registrant / Admin Contact :
PERSON
Michael LANBERG (LANBER2-BMN-PE)
Jaison Park Ave #67
85456 Huego
VIRGIN ISLANDS, BRITISH
phone : +44 020 81330788
fax :
e-mail : lostorkil[]yahoo.com
Billing Contact :
PERSON
Michael LANBERG (LANBER2-BMN-PE)
Jaison Park Ave #67
85456 Huego
VIRGIN ISLANDS, BRITISH
phone : +44 020 81330788
fax :
e-mail : lost...@yahoo.com
Technical Contact :
PERSON
Michael LANBERG (LANBER2-BMN-PE)
Jaison Park Ave #67
85456 Huego
VIRGIN ISLANDS, BRITISH
phone : +44 020 81330788
fax :
e-mail : lost...@yahoo.com
Domain servers :
vk.alkyleneja.com (VAC3-BMN-HST)
gh.alkyleneja.com (GAC5-BMN-HST)
Created on 05/07/2006 16:45:49
Updated on 05/07/2006 18:05:11
Expires on 05/07/2007 12:45:48
See:
gh.alkyleneja.com IP 222.170.97.137 => (ROK4932 - SBL41604)
vk.alkyleneja.com IP 222.51.91.98 => (ROK4932 - SBL41603 / SBL41402)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41402
222.32.0.0/11 is listed on the Spamhaus Block List (SBL)
09-May-2006 08:57 GMT | SR02
bulletproof porn-spam host "ChinaTietong" network
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41603
222.51.91.98/32 is listed on the Spamhaus Block List (SBL/ROKSO)
08-May-2006 21:11 GMT | SR22
Leo Kuvayev / BadCow
Spammer DNS - vk.alkyleneja.com
24 SBL/ROKSO listings for IPs under the responsibility of crc.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=crc.net.cn
Let see whois:
Registrar: TUCOWS INC.
Registrant:
Bazil silver
Huangton Avenu
#72
Jolyway, Lion 19323
SY
Domain name: ALKYLENEJA.COM
Administrative Contact:
Cooperman, Neil NELSONT...@yahoo.com
Huangton Avenu
#72
Jolyway, Lion 19323
SY
+44.02081330788
Technical Contact:
Fenison, Elden el...@cybcon.com
30240 SW Parkway #10
Wilsonville, OR 97070
US
+1.5032484449 Fax: +1.5036827701
Registration Service Provider:
CyberConnectics, sup...@cybcon.com
503-248-4449
503-682-7701 (fax)
http://www.cyberconnectics.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: TUCOWS, INC.
Record last updated on 07-May-2006.
Record expires on 07-May-2007.
Record created on 07-May-2006.
Domain servers in listed order:
VK.ALKYLENEJA.COM 222.51.91.98
GH.ALKYLENEJA.COM 222.170.97.137
Domain status: ACTIVE
More alkyleneja.com sightings:
http://groups.google.com/groups/search?q=alkyleneja.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/cc23de5f75137c85
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: