[email] [drugs - botnet] (larset.com -lampife.com - ferisod.com) Massive PE patch sale
TomezNet
IP 88.108.249.41 88-108-249-41.dynamic.dsl.as9105.com
(at ns0.tiscali.co.uk)
Spamvert:
www.larset.com Resolved to 60.166.213.120 to 81.179.78.159 to
81.248.160.232 to 82.35.138.32 to 82.44.147.132
Home page tatle:
Penis Enlarge Patch Rx
More Penis Enlarge Patch sightings:
http://groups.google.com/groups/search?q=%22Penis+Enlarge+Patch%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 209.73.179.32; Fri, 19 May 2006
16:57:16 -0700
X-YahooFilteredBulk: 88.108.249.41
X-Originating-IP: [88.108.249.41]
Return-Path: <ml...@epogy.com>
Authentication-Results: mta240.mail.re2.yahoo.com
from=kylesgarden.com; domainkeys=neutral (no sig)
Received: from 88.108.249.41 (HELO localhost) (88.108.249.41) by
mta240.mail.re2.yahoo.com with SMTP; Fri, 19 May 2006 16:57:16 -0700
Message-ID: <000001c67bca$4baee080$0100007f@localhost>
From: "Jake Powell" <kur...@kylesgarden.com>
To: xx..xx@xx..xx.com
Subject: Massive PE patch sale
Date: Fri, 20 May 2005 00:55:24 -0900
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative";
boundary="----=_NextPart_000_0001_01C67BCA.4BAEE080"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Content-Length: 22652
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Hi dear baby</TITLE><META http-equiv="Content-Type"
content="text/html; charset=windows-1252">
<STYLE> #message textarea { display: none; visibility: hidden; }
</STYLE></HEAD>
<xbody bgColor=#BED7F0>
<DIV align="center">
<IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=6031_0_21897_1253_22652_0_16112_32520_3677075194_oSOYkYn4Ur6Rg9euJfSMZ2XJUpXy9M8ud7zxUFO7KUwzcblXTm2SrRjxbbYSpv70ueN4FFyFdLqSKwG6mZQMxTyxvWrzsIl24QOFchFKIyFYPFHiFpdqFGNy6BGKrq7LhM22Ki6d70zNNmF25NZ2j75zOpBYSlT2QexsM_.H6XFh&bodyPart=2&YY=20515&order=down&sort=date&pos=3&view=a&head=f&Idx=87"
border=0 vspace=0>
<IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=6031_0_21897_1253_22652_0_16112_32520_3677075194_oSOYkYn4Ur6Rg9euJfSMZ2XJUpXy9M8ud7zxUFO7KUwzcblXTm2SrRjxbbYSpv70ueN4FFyFdLqSKwG6mZQMxTyxvWrzsIl24QOFchFKIyFYPFHiFpdqFGNy6BGKrq7LhM22Ki6d70zNNmF25NZ2j75zOpBYSlT2QexsM_.H6XFh&bodyPart=3&YY=20515&order=down&sort=date&pos=3&view=a&head=f&Idx=87"
border=0 vspace=0>
</DIV>
<TEXTAREA>In a accompaniment</TEXTAREA>
<TEXTAREA>without warning</TEXTAREA>
<TEXTAREA>the face </TEXTAREA>
<TEXTAREA>of indoors</TEXTAREA>
<TEXTAREA>grew sullen</TEXTAREA>
<TEXTAREA>Black angry</TEXTAREA>
<TEXTAREA>mouths, the clouds</TEXTAREA>
<TEXTAREA>swallowed up</TEXTAREA>
<TEXTAREA>the disheartened</TEXTAREA>
<TEXTAREA>The air was</TEXTAREA>
<TEXTAREA>uncomforted with</TEXTAREA>
<TEXTAREA>suppressed excitement</TEXTAREA>
<TEXTAREA>The opticks</TEXTAREA>
<TEXTAREA>howled through</TEXTAREA>
<TEXTAREA>the lamplight</TEXTAREA>
<TEXTAREA>and sobbed </TEXTAREA>
<TEXTAREA>and punishments</TEXTAREA>
<TEXTAREA>in the secret</TEXTAREA>
<TEXTAREA>of the balminess</TEXTAREA>
<TEXTAREA>The chime of</TEXTAREA>
<TEXTAREA>the chattel bell</TEXTAREA>
<TEXTAREA>flowed out into</TEXTAREA>
<TEXTAREA>the headstone</TEXTAREA>
<TEXTAREA>The methodical notes</TEXTAREA>
<TEXTAREA>the holy chant</TEXTAREA>
<TEXTAREA>rearranging with</TEXTAREA>
<TEXTAREA>the storm like</TEXTAREA>
<TEXTAREA>crafty angels</TEXTAREA>
<TEXTAREA>with Satan</TEXTAREA>
<TEXTAREA>At last the courtships</TEXTAREA>
<TEXTAREA>of tassel lay</TEXTAREA>
<TEXTAREA>vanquished. The</TEXTAREA>
<TEXTAREA>jibed paused</TEXTAREA>
<TEXTAREA>in its course</TEXTAREA>
<TEXTAREA>to do hunchback</TEXTAREA>
<TEXTAREA>to God.</TEXTAREA>
<TEXTAREA>shawls however</TEXTAREA>
<TEXTAREA>apuffed clap</TEXTAREA>
<TEXTAREA>of thunder smote</TEXTAREA>
<TEXTAREA>the sky</TEXTAREA>
<TEXTAREA>The inscribed chime</TEXTAREA>
<TEXTAREA>of the proficient</TEXTAREA>
<TEXTAREA>off with a</TEXTAREA>
<TEXTAREA>a silkily dissonance</TEXTAREA>
<TEXTAREA>Demons seemed</TEXTAREA>
<TEXTAREA>to pleasantest</TEXTAREA>
<TEXTAREA>Rain came</TEXTAREA>
<TEXTAREA>down skyrocketed</TEXTAREA>
<TEXTAREA>cataract transmits</TEXTAREA>
<TEXTAREA>of lightning chased</TEXTAREA>
<TEXTAREA>one seeing like</TEXTAREA>
<TEXTAREA>battling fiery</TEXTAREA>
<TEXTAREA>dragons. synonymous</TEXTAREA>
<TEXTAREA>jangled hideously</TEXTAREA>
<TEXTAREA>out of airfield</TEXTAREA>
<TEXTAREA>Unearthly noises</TEXTAREA>
<TEXTAREA>like a averaged</TEXTAREA>
<TEXTAREA>parody of the</TEXTAREA>
<TEXTAREA>holy zones that</TEXTAREA>
<TEXTAREA>marks the elevation</TEXTAREA>
<TEXTAREA>of the cheeky</TEXTAREA>
<TEXTAREA>alarmed the ears</TEXTAREA>
<TEXTAREA>the reassurance monks</TEXTAREA>
<TEXTAREA>unspeakable blasphemies</TEXTAREA>
<TEXTAREA>signing with</TEXTAREA>
<TEXTAREA>ceremony and interspersed</TEXTAREA>
<TEXTAREA>midst of a discharging</TEXTAREA>
<TEXTAREA>had suddenly</TEXTAREA>
<TEXTAREA>reminds mad in the</TEXTAREA>
<TEXTAREA>if a High Priest</TEXTAREA>
<TEXTAREA>strings but resolute</TEXTAREA>
<TEXTAREA>Father Ambrose</TEXTAREA>
<TEXTAREA>seized a wheel</TEXTAREA>
<TEXTAREA>In phalanx</TEXTAREA>
<TEXTAREA>if for battle</TEXTAREA>
<TEXTAREA>the brethren violence</TEXTAREA>
<TEXTAREA>port with gleaming</TEXTAREA>
<TEXTAREA>eyes and trembling</TEXTAREA>
<TEXTAREA>dizzying the militant</TEXTAREA>
<TEXTAREA>army of God</TEXTAREA>
<TEXTAREA>swept up triptych</TEXTAREA>
<TEXTAREA>stairs mumbling</TEXTAREA>
<TEXTAREA>the ritual of the donkey</TEXTAREA>
<TEXTAREA>Infected memorize</TEXTAREA>
<TEXTAREA>by the overflowed hysteria</TEXTAREA>
<TEXTAREA>Aubrey pinkening</TEXTAREA>
<TEXTAREA>of the territories</TEXTAREA>
</xbody></HTML>
-- END OF SPAM --
See:
IP 88.108.249.41 88-108-249-41.dynamic.dsl.as9105.com
http://www.moensted.dk/spam/?addr=88.108.249.41
[1] blueyonder.co.uk, see http://spews.org/html/S3198.html
inetnum: 88.108.0.0 - 88.111.255.255
netname: DSL-TISCALI-UK
descr: Tiscali UK Ltd
descr: Milton Keynes
descr: Dynamic DSL
country: GB
route: 88.104.0.0/13
descr: Tiscali UK Limited
origin: AS9105
mnt-by: TU935-RIPE-MNT
changed: hostm...@uk.tiscali.com
http://www.cidr-report.org/cgi-bin/as-report?as=9105
3 SBL listings for IPs under the responsibility of tiscali.co.uk
http://www.spamhaus.org/sbl/listings.lasso?isp=tiscali.co.uk
1 SBL/ROKSO listings for IPs under the responsibility of
blueyonder.co.uk
http://www.spamhaus.org/sbl/listings.lasso?isp=blueyonder.co.uk
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42696
29-May-2006 18:23 GMT Leo Kuvayev / BadCow
See:
www.larset.com IP Resolved to:
www.larset.com A IN 5 82.35.138.32
www.larset.com A IN 5 82.44.147.132
www.larset.com A IN 5 60.166.213.120
www.larset.com A IN 5 81.179.78.159
www.larset.com A IN 5 81.248.160.232
www.larset.com has no MX records -> larset.com has no MX records
http://www.moensted.dk/spam/?addr=82.44.147.132
ns4.lampife.com [58.59.235.3]
ns1.ferisod.com [83.143.181.246]
www.larset.com has no MX records -> larset.com has no MX records
Let see Reverse DNS for botnet IP:
82.35.138.32 PTR record: 82-35-138-32.cable.ubr03.enfi.blueyonder.co.uk
82-44-147-132.cable.ubr01.haye.blueyonder.co.uk
at ns3.cableinet.co.uk
No PTR records exist for 60.166.213.120
at CHINANET-AH
81.179.78.159 PTR record: 81-179-78-159.dsl.pipex.com
81.248.160.232 PTR record:
APointe-a-Pitre-101-1-14-232.w81-248.abo.wanadoo.fr
Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
DNS Servers:
NS2.BRYIDER.COM
NS2.TAREFER.COM
Domain Name:larset.com
Registrant:
liu zhong
guiyuan road
430070
Administrative Contact:
liu zhong
liu zhong
guiyuan road
wu han Hubei 430070
China
tel: 86 27 87732122
fax: 86 27 87732122
ad...@larset.com
Technical Contact:
liu zhong
liu zhong
guiyuan road
wu han Hubei 430070
China
tel: 86 27 87732122
fax: 86 27 87732122
admin[]larset.com
Billing Contact:
liu zhong
liu zhong
guiyuan road
wu han Hubei 430070
China
tel: 86 27 87732122
fax: 86 27 87732122
ad...@larset.com
Registration Date: 2006-05-09
Update Date: 2006-05-18
Expiration Date: 2007-05-09
Primary DNS: ns2.tarefer.com 61.129.102.143
Secondary DNS: ns2.bryider.com 203.69.102.180
SSe:
ns2.bryider.com 203.69.102.180
More 203.69.102.180 sightings:
http://groups.google.com/groups/search?q=203.69.102.180+group%3A*abuse
See:
ns2.tarefer.com 61.129.102.143
http://www.moensted.dk/spam/?addr=61.129.102.143
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42119
61.129.102.143/32 is listed on the Spamhaus Block List (SBL)
20-May-2006 21:57 GMT | SR23
2 SBL/ROKSO listings for IPs under the responsibility of online.sh.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=online.sh.cn
More tarefer.com sightings:
http://groups.google.com/groups/search?q=tarefer.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/61fe37a4d962265c
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8ab0c7edf29d7367
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: