Spamvert:
ihlmail.com IP 196.25.156.153
(at igubu.saix.net / telkom.co.za)
ns1.ihlmail.com IP 212.208.63.3
at ns1.nan1.fr.uu.net / fr.mci.com / fr.verizonbusiness.com
ns2.ihlmail.com IP 217.193.140.187
at hulk.idea-lab.ch / swisscom.com / ns1.ip-plus.net
website:
© 2002 - 2005 WW3 DISTRIBUTERS LLC
More WW3 DISTRIBUTERS LLC spam sightings:
http://groups.google.com/groups/search?q=%22WW3+DISTRIBUTERS%22+group%3A*abuse
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.166; Sat, 24 Jun 2006
04:36:41 -0700
X-Originating-IP: [71.57.120.182]
Return-Path: <andrewsa...@earthlink.net>
Authentication-Results: mta124.mail.mud.yahoo.com
from=earthlink.net; domainkeys=neutral (no sig)
Received: from 207.58.1.... (EHLO xx..xx..xx.net) (207.58.1....) by
mta124.mail.mud.yahoo.com with SMTP; Sat, 24 Jun 2006 04:36:41 -0700
Received: (qmail 28259 invoked by uid 110); 24 Jun 2006 11:21:38
-0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 27617 invoked from network); 24 Jun 2006 11:21:37
-0000
Received: from c-71-57-120-182.hsd1.il.comcast.net (HELO
RAZIEL.zdiojae.org) (71.57.120.182) by xx..xx..xx.net with SMTP; 24 Jun
2006 11:21:37 -0000
Message-ID: <56075798522983.985DB08733@HBFHX0D>
From: "Andrews" <Andrewsb...@earthlink.net>
To: xx..xx@xx..xx.com
Subject: {PRE_SUBJ} Recent stuff Would you like to have stronger
ejaculation?
Date: Sat, 24 Jun 2006 06:24:21 -0500
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: XqM22wgzCL0AHu2Ppgsl22ggesjvJhrBGYr3
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Content-Length: 308
Hello Take it before go to bed and you will be able to show the
paradise for you sweetie You always dreamt to rock hard erections...
Now it's
possible to do with magic tab It is fully guaranteed - it will help
you
to shoot more and more Check up: http://ihlmail/gal/ms It's the best
thing you had ever seen!
-- END OF SPAM --
More More Size Penis Pill sightings:
http://groups.google.com/groups/search?q=%22More+Size+Penis+Pill%22+group%3A*abuse
Se also spam Re:
beauti-full.com and didysir.com
See:
IP 71.57.120.182 c-71-57-120-182.hsd1.il.comcast.net
http://www.moensted.dk/spam/?addr=71.57.120.182
http://cbl.abuseat.org/lookup.cgi?ip=71.57.120.182
http://www.spamhaus.org/query/bl?ip=71.57.120.182
http://spamcop.net/w3m?action=checkblock&ip=71.57.120.182
http://www.uceprotect.net/en/rblcheck.php?ipr=71.57.120.0 (Level 2)
Comcast Cable Communications Holdings, Inc CCCH-3-34 (NET-71-56-0-0-1)
71.56.0.0 - 71.57.191.255
Comcast Cable Communications Holdings, Inc ILLINOIS-18
(NET-71-57-0-0-1)
71.57.0.0 - 71.57.127.255
CustName: Comcast Cable Communications Holdings, Inc
NetRange: 71.57.0.0 - 71.57.127.255
CIDR: 71.57.0.0/17
NetName: ILLINOIS-18
NetHandle: NET-71-57-0-0-1
ASN Name: ATT-INTERNET3
Country IP Range: 71.57.0.0 to 71.57.127.255
http://www.cidr-report.org/cgi-bin/as-report?as=6478
77 SBL/ROKSO listings for IPs under the responsibility of comcast.net
http://www.spamhaus.org/sbl/listings.lasso?isp=comcast.net
http://www.ihlmail.com/
Redirected to:
http://www.ihlmail.com/dll/lb/
http://www.ihlmail.com/dll/lb/indexx1.html
page title => More-Size Gain 3 inches
More Size Penis Pill
See:
ihlmail.com IP 196.25.156.153
ns1.ihlmail.com A IN 300 196.25.156.153
ns2.ihlmail.com A IN 300 196.25.156.153
mx.ihlmail.com A IN 300 196.25.156.153
ns1.ihlmail.com [212.208.63.3]
ns2.ihlmail.com [217.193.140.187]
[ihlmail.com has 1 MX record mx.ihlmail.com (10)]
http://www.moensted.dk/spam/?addr=196.25.156.153
More 196.25.156.153 sightings:
http://groups.google.com/groups/search?q=196.25.156.153+group%3A*abuse
inetnum: 196.25.0.0 - 196.25.255.255
netname: SAIX
descr: Telkom SA Ltd.
organisation: ORG-TSL2-AFRINIC
org-name: Telkom SA Limited
org-type: LIR
address: Telkom SA Limited
address: Integrated Network Planning
route: 196.25.0.0/16
descr: SAIX route
origin: AS5713
mnt-by: ASN-SAIX-NET
changed: eti...@saix.net
route: 196.25.0.0/16
descr: Telkom South Africa (SAIX)
151 Frans Conradie Ave.
Parow
South Africa
origin: AS5713
notify: pie...@saix.net
notify: bez...@telkom.co.za
ASN Name: AFRINIC-ASNBLOCK-5713
Country IP Range: 196.24.0.0 to 196.25.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=5713
9 SBL listings for IPs under the responsibility of saix.net
http://www.spamhaus.org/sbl/listings.lasso?isp=saix.net
19 SBL listings for IPs under the responsibility of telkom.co.za
http://www.spamhaus.org/sbl/listings.lasso?isp=telkom.co.za
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
Surfers-Directory.com, LLC
Surfers-Directroy.com #119
5095 Napilihau St. 109B
Lahaina, HI 96761
US
Domain name: IHLMAIL.COM
Administrative Contact:
William Moffett, - nycmaui1[]aol.com
Surfers-Directroy.com #119
5095 Napilihau St. 109B
Lahaina, HI 96761
US
8085733733 Fax: 8085733733
Technical Contact:
William Moffett, - nycm...@aol.com
Surfers-Directroy.com #119
5095 Napilihau St. 109B
Lahaina, HI 96761
US
8085733733 Fax: 8085733733
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 23-Jun-2006.
Record expires on 10-May-2007.
Record created on 10-May-2006.
Domain servers in listed order:
NS2.IHLMAIL.COM 217.193.140.187
NS1.IHLMAIL.COM 212.208.63.3
Domain status: ACTIVE
More ihlmail sightings:
http://groups.google.com/groups/search?q=ihlmail+group%3A*abuse
See:
ns1.ihlmail.com IP 212.208.63.3
http://www.moensted.dk/spam/?addr=196.25.156.153
More 212.208.63.3 sightings:
http://groups.google.com/groups/search?q=212.208.63.3+group%3A*abuse
See:
ns2.ihlmail.com IP 217.193.140.187 and 196.25.156.153
More 217.193.140.187 sightings:
http://groups.google.com/groups/search?q=217.193.140.187+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/1aeb9d7be9c1af99
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/329d06e7b7c17192
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: