Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [drugs] (kaumanua.info - Tucows.com - REGISTERFLY.COM) Wanna get a drink?

0 views
Skip to first unread message

TomezNet

unread,
Sep 27, 2006, 6:02:14 PM9/27/06
to
Received From:
IP 61.94.128.72
(at ns3.telkom.net.id / telekommalaysia.com.hk)

Spamvert:
www.kaumanua.info IP 216.40.47.17
(SBL44852 - SBL45242) (at dns1.tucows.com /
redirect.managednsservice.com)

More 10 cm or up to 4 sightings:
http://groups.google.com/groups/search?q=%2210+cm+or+up+to+4%22+group%3A*abuse&start=0&scoring=d&

More info below:
====================

X-SID-PRA: Kip Crain <URN...@design-group.com>
X-SID-Result: TempError
X-Message-Info: lDUZrA13SoVsAyMRchuXjQzZ/BmrJNkO+Jz9aNNI+rs=
Received: from tomts21-srv.bellnexxia.net ([209.226.175.183]) by
bay0-pamc1-f6.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 27 Sep 2006 08:36:02 -0700
Received: from [MUNGED]
by toip7.bellnexxia.net with ESMTP; 27 Sep 2006 11:35:51 -0400
Received: (qmail 9710 invoked by uid 110); 27 Sep 2006 11:35:51 -0400
Delivered-To: [MUNGED]
Received: (qmail 9626 invoked from network); 27 Sep 2006 11:35:47 -0400
Received: from softdnserror (HELO [MUNGED]) (61.94.128.72)
by [MUNGED] with SMTP; 27 Sep 2006 11:35:47 -0400
Received: from stucco.starnetusa.net (vicksburg.starnetusa.net
[106.88.4.188])
by ignition.starnetusa.net with ESMTP id 2C573160
for <URN...@design-group.com>; Thu, 28 Sep 2006 06:31:05 -0100
Message-Id:
<6.7.5.29.2.200311...@submitting.starnetusa.net>
X-Sender: URN...@design-group.com (Unverified)
X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
Date: Thu, 28 Sep 2006 11:32:05 +0400
From: "Kip Crain" <URN...@design-group.com>
To: [MUNGED]
Subject: Wanna get a drink?
Return-Path: URN...@design-group.com
X-OriginalArrivalTime: 27 Sep 2006 15:36:03.0240 (UTC)
FILETIME=[A3EE5280:01C6E24A]

Sensationall revoolution in medicine!

E'''nlarge your p''enis up to 10 cm or up to 4 i'c'h'e's!

Its h'erbal solution what hasnt side effect, but has 100% guaranted
results!

Dont lose your chance and but know wihtout doubts, you will be
impressed with results!

Clisk here http://kaumanua.info

That deep part of himó the part the dope couldn't reachó tried
to warn him to shut his mouth, just shut it, but what was the sense?
When the police come tomorrow looking for their missing lamb, she said,
we don't want the to see anything out of the ordinary, do we, Paul?
Here was yet another Bakersfield Journal clipping, this one dated July
19th, 1957.

-- END OF SPAM --

See:
IP 61.94.128.72

http://www.moensted.dk/spam/?addr=61.94.128.72

NO PTR - stuck in a loop at ns3.telkom.net.id (Duplicate zone found)

More telkom.net.id sightings:
http://groups.google.com/groups/search?q=telkom.net.id+group%3A*abuse&start=0&scoring=d&

inetnum: 61.94.128.0 - 61.94.128.255
netname: TLKM_D2_DIALUP_SRG
country: ID [Indonesia]
descr: PT TELKOM INDONESIA
descr: Serang, Banten
admin-c: AN163-AP
tech-c: IS49-AP

route: 61.94.128.0/24
descr: Trans for AS7713
origin: AS7713
remarks: tech contact mail to r...@telekommalaysia.com.hk
notify: rt...@telekommalaysia.com.hk
mnt-by: MAINT-TMHKNTT
changed: r...@telekommalaysia.com.hk
ASN: 17974
ASN Name: TELKOMNET-AS2-AP (PT TELEKOMUNIKASI INDONESIA)
Country IP Range: 61.94.0.0 to 61.94.255.255
Country fraud profile: High

http://www.cidr-report.org/cgi-bin/as-report?as=17974

1 SBL listings for IPs under the responsibility of telkom.net.id
http://www.spamhaus.org/sbl/listings.lasso?isp=telkom.net.id

See:
kaumanua.info IP 216.40.47.17
dns3.registerfly.com. [65.22.7.10 (NO GLUE; CNAME
encountered->ns3.mdnsservice.com.)] [CA]
dns2.registerfly.com. [64.97.159.10 (NO GLUE; CNAME
encountered->ns2.mdnsservice.com.)] [CA]
dns1.registerfly.com. [216.40.47.18 (NO GLUE; CNAME
encountered->ns1.mdnsservice.com.)] [CA]

B9.INFO.AFILIAS-NST.ORG [204.74.113.33]

dns1.registerfly.com [216.40.47.18]
dns2.registerfly.com [64.97.159.10]
dns3.registerfly.com [65.22.7.10]

kaumanua.info has no MX records

http://www.moensted.dk/spam/?addr=216.40.47.17
http://www.spamhaus.org/query/bl?ip=216.40.47.17

See Much More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44852
216.40.47.17/32 is listed on the Spamhaus Block List (SBL)

25-Jul-2006 22:51 GMT | SR04

giveawaysblog.info - redirect (come on Tucows!)
Summary report of 50th percentile resolved SpamCop spamvertised site
hosts -
8647 216.40.47.17
4104 216.40.47.18
pccwibs.info [216.40.47.17]
See: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42570

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45242
216.40.47.16/31 is listed on the Spamhaus Block List (SBL)

06-Aug-2006 09:49 GMT | SR02

haiweizhiye.info

13 SBL/ROKSO listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com

More mdnsservice.com sightings:
http://groups.google.com/groups/search?q=mdnsservice.com+group%3A*abuse&start=0&scoring=d&

OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1

route: 216.40.32.0/20
descr: IBM
origin: AS19152
mnt-by: MAINT-AS19152
ASN: 19152
ASN Name: IBMCCH-TOR
changed: dennis....@bellnexxia.com
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152

Let see whois:

Domain ID:D14863164-LRMS
Domain Name: KAUMANUA.INFO
Created On:27-Sep-2006 07:33:50 UTC
Last Updated On:27-Sep-2006 08:45:15 UTC
Expiration Date:27-Sep-2007 07:33:50 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:tubQEc5rEWVIoMmb
Registrant Name:damian ohara
Registrant Organization:damian
Registrant Street1:147 antrim road
Registrant Street2:
Registrant Street3:
Registrant City:newtownabbey
Registrant State/Province:NA
Registrant Postal Code:bt367qr
Registrant Country:GB
Registrant Phone:+442.87420761
Registrant Phone Ext.:
Registrant FAX:+442.87420761
Registrant FAX Ext.:
Registrant Email: admin[]hostpique.com
Admin ID:tubQEc5rEWVIoMmb
Admin Name:damian ohara
Admin Organization:damian
Admin Street1:147 antrim road
Admin Street2:
Admin Street3:
Admin City:newtownabbey
Admin State/Province:NA
Admin Postal Code:bt367qr
Admin Country:GB
Admin Phone:+442.87420761
Admin Phone Ext.:
Admin FAX:+442.87420761
Admin FAX Ext.:
Admin Email: ad...@hostpique.com
Billing ID:tubQEc5rEWVIoMmb
Billing Name:damian ohara
Billing Organization:damian
Billing Street1:147 antrim road
Billing Street2:
Billing Street3:
Billing City:newtownabbey
Billing State/Province:NA
Billing Postal Code:bt367qr
Billing Country:GB
Billing Phone:+442.87420761
Billing Phone Ext.:
Billing FAX:+442.87420761
Billing FAX Ext.:
Billing Email: ad...@hostpique.com
Tech ID:tubQEc5rEWVIoMmb
Tech Name:damian ohara
Tech Organization:damian
Tech Street1:147 antrim road
Tech Street2:
Tech Street3:
Tech City:newtownabbey
Tech State/Province:NA
Tech Postal Code:bt367qr
Tech Country:GB
Tech Phone:+442.87420761
Tech Phone Ext.:
Tech FAX:+442.87420761
Tech FAX Ext.:
Tech Email: ad...@hostpique.com
Name Server: DNS1.REGISTERFLY.COM
Name Server: DNS2.REGISTERFLY.COM
Name Server: DNS3.REGISTERFLY.COM

Let see whois hostpique.com:
Registrar: ENOM, INC.

Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: hostpique.com

Registrant Contact:
smship
bernd lenard (admin[]smship.net)
+49.3080932001
Fax: +1.5555555555
trollingerweg 7
illerkirchberg, na 89171
DE

Administrative Contact:
smship
bernd lenard (ad...@smship.net)
+49.3080932001
Fax: +1.5555555555
trollingerweg 7
illerkirchberg, na 89171
DE

Technical Contact:
smship
bernd lenard (ad...@smship.net)
+49.3080932001
Fax: +1.5555555555
trollingerweg 7
illerkirchberg, na 89171
DE

Status: Locked

Name Servers:
ns1.omnis.com
ns2.omnis.com

Creation date: 07 Aug 2006 06:17:16
Expiration date: 07 Aug 2007 06:17:16

More hostpique.com sightings:
http://groups.google.com/groups/search?q=hostpique.com+group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/77e833e19598fb17

AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/f590e8a3c153a71d

Cheers, Tomez


--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages