Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [drugs - ED Med] (bandymanlk.com - delubrumik.com - scadsaa.com) Hottest new offer Have more success with women and impress them with your power and stamina in bed

0 views

Skip to first unread message

TomezNet

unread,

Jul 6, 2006, 11:00:15 AM7/6/06

Received From:
IP 218.41.159.167 p299fa7.tkyoac00.ap.so-net.ne.jp
(at dnss3.so-net.ne.jp)

Spamvert:
www.bandymanlk.com IP 61.158.31.27
(SBL42402 / SBL43397) (at cncgroup-hl)

dd.delubrumik.com IP 220.113.9.75
(SBL43773 - ROK4932) (gwbn.net.cn / CHINANET-HL)

da.scadsaa.com IP 210.17.245.172
(at ns1.pacific.net.hk)

sc.scadsaa.com IP 125.208.3.154
(SBL40669) (at ns1.euncn.com / primetelecom.cn)

More ED Med Chest Online / ED Med Choice Online Viagra sightings:
http://groups.google.com/groups/search?q=%22ED+Med%22+group%3A*abuse&start=0&scoring=d&

More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.166; Tue, 04 Jul 2006
12:46:25 -0700
X-YahooFilteredBulk: 218.41.159.167
X-Originating-IP: [218.41.159.167]
Return-Path: <rosa.m...@moscowmail.com>
Authentication-Results: mta115.mail.re2.yahoo.com
from=publicist.com; domainkeys=neutral (no sig)
Received: from 207.58.1.... (EHLO xx..xx..xx.net) (207.58.1....) by
mta115.mail.re2.yahoo.com with SMTP; Tue, 04 Jul 2006 12:46:25 -0700
Received: (qmail 20353 invoked by uid 110); 4 Jul 2006 19:46:21
-0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 19905 invoked from network); 4 Jul 2006 19:46:21
-0000
Received: from p299fa7.tkyoac00.ap.so-net.ne.jp (HELO
PC-N045135S.5auszi.com) (218.41.159.167) by xx..xx..xx.net with SMTP; 4
Jul 2006 19:46:21 -0000
Message-ID: <56168931143404.232286E154@3K0N04J6>
From: "Rosa" <Rosa.B...@publicist.com>
To: xx..xx@xx..xx.com
Subject: Hottest new offer Have more success with women and impress
them with your power and stamina in bed
Date: Wed, 5 Jul 2006 04:45:34 +0900
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: IiddZXCMYIGkRY0H2FbeBw8AzA3dXMH6kPxI
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Content-Length: 811

<html> <body bgcolor="#FFFFFF">
Know what to expect before you connect. A good lawyer must be a
great liar. Curiosity killed the cat. When dog hungry he ah nyam
calabash. When the blind leadeth the blind.. get out of the way.
<table width="86%" border="0">
<tr>
<td width="27%"></td>
<td width="4%"></td>
<td width="7%"></td>
<td width="7%"></td>
<td width="7%"></td>
<td width="2%"></td>
<td width="6%"></td>
<td width="40%"></td>
</tr>
<tr>
<td width="27%"></td>
<td width="4%">CHE</td>
<td width="7%"></td>
<td width="7%"></td>
<td width="7%"></td>
<td width="2%"></td>
<td width="6%"></td>
<td width="40%"></td>
</tr>
<tr>
<td width="27%">kyn</td>
<td width="4%"></td>
<td width="7%">AP</td>
<td width="7%"></td>
<td width="7%"></td>
<td width="2%"></td>
<td width="6%"></td>
<td width="40%">ac7</td>
</tr>
<tr>
<td width="27%">aee</td>
<td width="4%"></td>
<td width="7%"></td>
<td width="7%"></td>
<td width="7%"></td>
<td width="2%"></td>
<td width="6%"></td>
<td width="40%">sss1</td>
</tr>
<tr>
<td width="27%">hqx</td>
<td width="4%">VIA</td>
<td width="7%"></td>
<td width="7%"></td>
<td width="7%"></td>
<td width="2%"></td>
<td width="6%"></td>
<td width="40%">w6c</td>
</tr>
<tr>
<td width="27%">9um</td>
<td width="4%"></td>
<td width="7%">GRA</td>
<td width="7%"></td>
<td width="7%"></td>
<td width="2%"></td>
<td width="6%"></td>
<td width="40%">nz5</td>
</tr>
<tr>
<td width="27%" height="17">74j</td>
<td width="4%" height="17"></td>
<td width="7%" height="17"></td>
<td width="7%" height="17"></td>
<td width="7%" height="17"></td>
<td width="2%" height="17"></td>
<td width="6%" height="17"></td>
<td width="40%" height="17">dhu</td>
</tr>
<tr>
<td width="27%">i6p</td>
<td width="4%">CIA</td>
<td width="7%"></td>
<td width="7%"></td>
<td width="7%"></td>
<td width="2%"></td>
<td width="6%"></td>
<td width="40%">01e</td>
</tr>
<tr>
<td width="27%"></td>
<td width="4%"></td>
<td width="7%">LIS</td>
<td width="7%"></td>
<td width="7%"></td>
<td width="2%"></td>
<td width="6%"></td>
<td width="40%"></td>
</tr>
<tr>
<td width="27%"><a
href="http://www.bandymanlk.com">http://www.bandymanlk.com</a></td>
<td width="4%"></td>
<td width="7%"></td>
<td width="7%"></td>
<td width="7%"></td>
<td width="2%"></td>
<td width="6%"></td>
<td width="40%"></td>
</tr>
</table>
Order our magical stuff now for the amazing prices, and we will
dispatch it right away Make other men envy you and girls worship you
Most efficient products for men Unique offers on most recognized and
famous brands on Earth. Every Soldier has the Baton of a Field Marshal
in his Knapsack Any fool can criticise, condemn and complain and most
fools do Love is blind. Every cross has its inscriptions All you need
is love
</body> </html>

-- END OF SPAM --

See:
IP 218.41.159.167 p299fa7.tkyoac00.ap.so-net.ne.jp

http://www.moensted.dk/spam/?addr=218.41.159.167
http://spamcop.net/w3m?action=checkblock&ip=218.41.159.167

inetnum: 218.40.0.0 - 218.47.255.255
netname: JPNIC-NET-JP
descr: Japan Network Information Center
country: JP

route: 218.41.0.0/16
descr: Asia Netcom (proxy-registered route object)
origin: AS2527

Network Information:
a. [Network Number] 218.41.128.0/18
b. [Network Name] SO-NET
g. [Organization] SO-Net Service

route: 218.41.0.0/16
descr: Sony Communication Network Corporation
origin: AS2527
notify: n...@so-net.ne.jp
mnt-by: MAINT-AS2527
changed: ko...@scn.co.jp
ASN Name: JPNIC-ASBLOCK-AP (JPNIC)
Country IP Range: 218.40.0.0 to 218.47.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=2527

9 SBL listings for IPs under the responsibility of so-net.ne.jp
http://www.spamhaus.org/sbl/listings.lasso?isp=so-net.ne.jp

See:
www.bandymanlk.com IP 61.158.31.27
dd.delubrumik.com A IN 3600 220.113.9.75
de.delubrumik.com A IN 3600 61.158.31.27

www.bandymanlk.com has no MX records -> bandymanlk.com has no MX
records

http://www.moensted.dk/spam/?addr=61.158.31.27
http://www.spamhaus.org/query/bl?ip=61.158.31.27

More 61.158.31.27 sightings:
http://groups.google.com/groups/search?q=61.158.31.27+group%3A*abuse

inetnum: 61.158.31.0 - 61.158.31.63
netname: JMS-DCB
descr: JMS city data communication bureau
country: CN

route: 61.158.0.0/17
descr: CNC Group HeiLongJiang Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net

ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country IP Range: 61.128.0.0 to 61.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42402
61.158.31.0/26 is listed on the Spamhaus Block List (SBL)

24-May-2006 10:15 GMT | SR04

Dirty block : JMS city data communication bureau

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43397
61.158.24.0/21 is listed on the Spamhaus Block List (SBL)

15-Jun-2006 08:05 GMT | SR04

Dirty block: HEILONGJIANG Province liu chuansen

76 SBL/ROKSO listings for IPs under the responsibility of cncgroup-hl
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hl

Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : bandymanlk.com (BANDYM2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com

Registrant / Admin Contact :
PERSON
Puralamoteror PURALAMOTEROR (PURALA2-BMN-PE)

701 Portland Ave

61270-2959 Morrison
UNITED STATES
phone : (815) 772-7218
fax :
e-mail : puralamoteror[]yahoo.com

Billing Contact :
PERSON
Puralamoteror PURALAMOTEROR (PURALA2-BMN-PE)

701 Portland Ave

61270-2959 Morrison
UNITED STATES
phone : (815) 772-7218
fax :
e-mail : purala...@yahoo.com

Technical Contact :
PERSON
Puralamoteror PURALAMOTEROR (PURALA2-BMN-PE)

701 Portland Ave

61270-2959 Morrison
UNITED STATES
phone : (815) 772-7218
fax :
e-mail : purala...@yahoo.com

Domain servers :
da.scadsaa.com (DSC33-BMN-HST)
sc.scadsaa.com (SSC21-BMN-HST)

Created on 06/23/2006 09:01:19
Updated on 06/23/2006 10:04:26
Expires on 06/23/2007 05:01:19

More bandymanlk.com sightings:
http://groups.google.com/groups/search?q=bandymanlk.com+group%3A*abuse&start=0&scoring=d&

See:
dd.delubrumik.com IP 220.113.9.75

http://www.moensted.dk/spam/?addr=220.113.9.75

See:
da.scadsaa.com IP 210.17.245.172

da.scadsaa.com has no MX records -> scadsaa.com has no MX records

More 210.17.245.172 sightings:
http://groups.google.com/groups/search?q=210.17.245.172+group%3A*abuse&start=0&scoring=d&

inetnum: 210.17.128.0 - 210.17.255.255
netname: PI-HK
descr: Pacific Internet (Hong Kong) Ltd
country: HK [Hong Kong]

ASN Name: HKSUPER-HK-AP (Pacific Internet (Hong Kong) Limited)
Country IP Range: 210.17.128.0 to 210.17.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=2706

1 SBL listings for IPs under the responsibility of pacific.net.hk
http://www.spamhaus.org/sbl/listings.lasso?isp=pacific.net.hk

More scadsaa.com sightings:
http://groups.google.com/groups/search?q=scadsaa.com+group%3A*abuse

See:
sc.scadsaa.com IP 125.208.3.154

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40669
125.208.3.0/24 is listed on the Spamhaus Block List (SBL)

24-Jun-2006 23:56 GMT | SR04

Dirty block: controlled by spammers or Chinese spammer agent

1 SBL listings for IPs under the responsibility of primetelecom.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=primetelecom.cn

Let see whois:
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM

domain: scadsaa.com
owner: Vladimir Mironov
email: mervinvaughn[]yahoo.com
address: Abonentsky yashik 16
city: Moscow
state: --
postal-code: 117525
country: RU
phone: +79032772599
admin-c: mervin...@yahoo.com#0
tech-c: mervin...@yahoo.com#0
billing-c: mervin...@yahoo.com#0
nserver: sc.scadsaa.com 125.208.3.154
nserver: da.scadsaa.com 210.17.245.172
status: hold,invalid-address
created: 2006-06-19 09:36:56 UTC
modified: 2006-06-22 12:34:15 UTC
expires: 2007-06-19 05:36:57 UTC

contact-hdl: mervin...@yahoo.com#0
person: Vladimir Mironov
email: mervin...@yahoo.com
address: Abonentsky yashik 16
city: Moscow
state: --
postal-code: 117525
country: RU
phone: +79032772599

source: joker.com live whois service
query-time: 0.021433
db-updated: 2006-06-25 08:07:17

See Much More of Vladimir Mironov sightings:
http://groups.google.com/groups/search?q=%22Vladimir+Mironov%22+group%3A*abuse&start=0&scoring=d&

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages