Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [software piracy] [Open Proxy - 61.17.22.81] (867oem.com / srul5.com - PacNames) Three Steps to the Software You Need at the Prices You Want

0 views
Skip to first unread message

TomezNet

unread,
Jan 10, 2007, 5:00:33 PM1/10/07
to
Received From:
IP 61.17.22.81 61.17.22-81.ekm-dsl-dynamic.vsnl.net.in
(at dns.vsnl.net.in)

Open Proxy - 1144830933 (Wed Apr 12 10:35:33 2006)
http://njabl.org/cgi-bin/lookup.cgi?query=61.17.22.81

Spamvert:
ata.867oem.com IP 218.188.204.37
(SBL49748 - ROK6138 Polyakov) (NOW at bbdns1.on-nets.com / hgc.com.hk)

See Much More the same spammer sightings:
http://groups.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&

Received at an address harvested from this abuse group.

More info below:
====================

X-Apparently-To: [MUNGED] via 216.252.100.180; Wed, 10 Jan 2007
10:49:39 -0800
X-YahooFilteredBulk: 61.17.22.81
X-Originating-IP: [61.17.22.81]
Return-Path: <kenskissimm...@jamespitts.com>
Authentication-Results: mta501.mail.mud.yahoo.com from=jamespitts.com;
domainkeys=neutral (no sig)
Received: from 61.17.22.81 (HELO localhost) (61.17.22.81) by
mta501.mail.mud.yahoo.com with SMTP; Wed, 10 Jan 2007 10:49:39 -0800
Message-ID: <000001c734e7$b315f980$0100007f@localhost>
From: "Caden Hayes" <kenskissimm...@jamespitts.com>
To: [MUNGED]
Subject: Three Steps to the Software You Need at the Prices You Want
Date: Thu, 11 Jan 2007 00:19:55 +0500
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3210
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.200
Content-Length: 748

Christmas discounts! Special New Year offers!
TOP 1O ITEMS!

$79 Microsoft Windows Vista Ultimate
$79 MS Office Enterprise 2007
$79 Adobe Acrobat 8 Pro
$49 Windows XP Pro w/SP2
$99 Macromedia Studio 8
$59 Adobe Premiere 2.0
$59 Corel Grafix Suite X3
$59 Adobe Illustrator CS2
$129 Autodesk Autocad 2007
$149 Adobe Creative Suite 2
http://ata.867oem.com/?488F6C08B3C9FBDD5A4B40E282391434538D&t0

Mac Specials:
Adobe Acrobat PR0 7 $69
Adobe After Effects $49
Adobe Creative Suite 2 Premium $149
Ableton Live 5.0.1 $49
Adobe Photoshop CS $49
http://ata.867oem.com/-software-for-mac-.php?488F6C08B3C9FBDD5A4B40E282391434538D&t6

See more by this manufacturers:
Microsoft....Mac....Adobe....Borland....Macromedia
http://ata.867oem.com/?488F6C08B3C9FBDD5A4B40E282391434538D&t4

Microsoft Windows Vista Ultimate
Retail price: $399.00
Proposition: $79.95
Your benefit: $319.05 (80%)
Availability: Can be downloaded INSTANTLY.

http://ata.867oem.com/2480.php?488F6C08B3C9FBDD5A4B40E282391434538D&t3
Best choice for home and professional. (46862 reviews)

Microsoft Office 2007 Enterprise Edition
Regular price: $899.00
Our offer: $79.95
You save: $819.95 (89%)
Availability: Pay and download instantly.

http://ata.867oem.com/2442.php?488F6C08B3C9FBDD5A4B40E282391434538D&t1
Sales Rank: #1 (101912 reviews)

Adobe Acrobat 8.0 Professional
Market price: $449.00
We propose: $79.95
Your profit: $369.05 (80%)
Availability: Available for INSTANT download.

http://ata.867oem.com/2441.php?488F6C08B3C9FBDD5A4B40E282391434538D&t2
Top-ranked item. (25739 reviews)

-- END OF SPAM --

See also more spammer OEM Software sightings:
http://groups.google.com/groups/search?q=%22OEM+Software%22+group%3A*abuse&start=0&scoring=d&

See:
IP 61.17.22.81 61.17.22-81.ekm-dsl-dynamic.vsnl.net.in

http://www.moensted.dk/spam/?addr=61.17.22.81
http://cbl.abuseat.org/lookup.cgi?ip=61.17.22.81
http://www.spamhaus.org/query/bl?ip=61.17.22.81
http://dsbl.org/listing?61.17.22.81

More vsnl.net.in sightings:
http://groups.google.com/groups/search?q=vsnl.net.in+group%3A*abuse&start=0&scoring=d&

inetnum: 61.17.0.0 - 61.17.255.255
netname: VSNL-IN
descr: Videsh Sanchar Nigam Ltd
person: VSNL Tech
nic-hdl: VT43-AP
e-mail: ip....@vsnl.co.in
changed: kapilku...@vsnl.co.in 20040312
mnt-by: MAINT-VSNL-AP

postmaster and abuse[]vsnl.net.in are listed in rfc-ignorant.org
database

route: 61.17.0.0/17
descr: DISHNET Route Object
origin: AS10199
mnt-by: VSNL-MAINT-MCI
changed: gps...@giasbm01.vsnl.net.in
ASN: 4755
ASN Name: VSNL-AS (Videsh Sanchar Nigam Ltd. Autonomous System)
Country (per IP registrar): IN [India]
Country IP Range: 61.17.0.0 to 61.17.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4755

7 SBL/ROKSO listings for IPs under the responsibility of vsnl.net.in
http://www.spamhaus.org/sbl/listings.lasso?isp=vsnl.net.in

See:
ata.867oem.com IP 218.188.204.37
ns1.srul5.com [218.188.204.37] [TTL=172800] [HK]
ns2.srul5.com [121.31.56.28] [TTL=172800] [CN]

ns1.867oem.com A IN 3600 218.188.204.37
ns2.867oem.com A IN 3600 121.31.56.28

ata.867oem.com has no MX records -> 867oem.com has no MX records

SOA record [TTL=2560] is:
Primary nameserver: ns1.867oem.com
Hostmaster E-mail address: hostm...@867oem.com
Serial #: 1168449179

http://www.moensted.dk/spam/?addr=218.188.204.37

NO PTR stuck in a loop at bbdns1.on-nets.com / hgc.com.hk

inetnum: 218.188.0.0 - 218.189.255.255
netname: HGC
descr: Hutchison Global Communications
e-mail: hgcne...@hgc.com.hk
remarks: Send spam reports to ab...@on-nets.com => ???

abuse[]on-nets.com is listed in rfc-ignorant.org database
abuse[]hgc.com.hk is listed in rfc-ignorant.org database
postmaster and abuse[]hutchcity.com are listed in rfc-ignorant.org
database

route: 218.188.128.0/17
descr: HGC RBS
origin: AS9304
mnt-by: MAINT-AS9304
changed: ra...@hutchcity.com
ASN: 9304
ASN Name: HUTCHISON-AS-AP (Hutchison Global Communications)
Country (per IP registrar): HK [Hong Kong]
Country IP Range: 218.188.0.0 to 218.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9304

2 SBL listings for IPs under the responsibility of hanaro.com
http://www.spamhaus.org/sbl/listings.lasso?isp=hanaro.com

37 SBL/ROKSO listings for IPs under the responsibility of hgc.com.hk
http://www.spamhaus.org/SBL/listings.lasso?isp=hgc.com.hk

Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD

Constant spammer support by PacNames sightings:
http://groups.google.com/groups/search?q=PacNames+group%3A*abuse&start=0&scoring=d&

Registrant hiding behind PacNames => shieldedwhois.com

Domain name: 867OEM.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/

Domain Registrant: (Private Contact)
(pws.e4c2db28804cd29[]shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US

Telephone: +1.5016348793
Fax:

Administrative, Technical Contact: (Private Contact)
(pws.e4c2d...@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US

Telephone: +1.5016348793
Fax:

Name Server: NS1.SRUL5.COM
Name Server: NS2.SRUL5.COM

Domain creaton date: 2007-01-02 00:50:39.0
Domain expiration date: 2008-01-02 06:05:15.0

More 867oem.com sightings:
http://groups.google.com/groups/search?q=867oem.com+group%3A*abuse&start=0&scoring=d&

See also more srul5.com sightings:
http://groups.google.com/groups/search?q=srul5.com+group%3A*abuse&start=0&scoring=d&

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/4202de8f3b06846a

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages