Spamvert:
jn7cpwodp9oek11eo11e611j.hacklogji.com IP 218.62.89.39
(ROK4932 - SBL42114) (at cncgroup-jl)
jn7cpwodp9oek11eo11e611j.hacklogji.com IP 58.50.7.147
(at CHINANET-HB)
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.166; Fri, 19 May 2006
11:01:52 -0700
X-YahooFilteredBulk: 222.93.214.175
X-Originating-IP: [222.93.214.175]
Return-Path: <ga...@goldenarms.net>
Authentication-Results: mta207.mail.mud.yahoo.com
from=goldenarms.net; domainkeys=neutral (no sig)
Received: from 207.228.2.... (EHLO xxx.web-hosting.com)
(207.228.2....) by mta207.mail.mud.yahoo.com with SMTP; Fri, 19 May
2006 11:01:52 -0700
Received: from -1210268016 ([222.93.214.175]) by
aries.web-hosting.com (8.11.6/8.11.1) with SMTP id k4JI1fm00908 for
<xx..xx@xx..xx.com>; Fri, 19 May 2006 14:01:42 -0400 (EDT)
Received: from goldenarms.net (-1215998744 [-1215997696]) by
golftrendsinc.com (Qmailv1) with ESMTP id B38AFD4F04 for
<xx..xx@xx..xx.com>; Fri, 19 May 2006 13:28:28 -0400
Date: Fri, 19 May 2006 13:28:28 -0400
From: "Openness R. Memento" <ga...@goldenarms.net>
X-Mailer: The Bat! (v2.00.1) Personal
X-Priority: 3
Message-ID: <6099834220.2...@goldenarms.net>
To: xx..xx@xx..xx.com
Subject: Software
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.5; AVE:
6.17.0.2; VDF: 6.17.0.5; host: golftrendsinc.com)
Content-Length: 650
You know how it? to work with stable software!
Understanding 0EM software
New software on our site:
Picture It Premium 9 - $59.95
Windows NT 4.0 Server - $49.95
Visio 2003 Professional - $69.95
Visual Studio .NET Architect Edition (8CD) - $139.95
Encarta Encyclopedia Delux 2004 (3CD) - $89.95
Painter 8 - $59.95
Dreamweaver MX 2004 $69.95
FileMaker 7.0 Professional - $69.95
Windows XP Professional With SP2 Full Version - $79.95
SQL Server 2000 Enterprise Edition - $69.95
FreeHand MX - $69.95
Windows 98 Second Edition - $49.95
Windows NT 4.0 Server - $49.95
Photo Painter 8 - $59.95
Our site:
http://jn7cpwodp9oek11eo11e611j.hacklogji.com/
-- END OF SPAM --
See:
IP 222.93.214.175
http://www.moensted.dk/spam/?addr=222.93.214.175
http://cbl.abuseat.org/lookup.cgi?ip=222.93.214.175
http://www.spamhaus.org/query/bl?ip=222.93.214.175
inetnum: 222.92.0.0 - 222.95.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
route: 222.92.0.0/14
descr: ChinaNet Jiangsu Province Network
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
http://www.cidr-report.org/cgi-bin/as-report?as=4134
3 SBL listings for IPs under the responsibility of cncgroup-js
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-js
See:
jn7cpwodp9oek11eo11e611j.hacklogji.com IP 218.62.89.39
jn7cpwodp9oek11eo11e611j.hacklogji.com IP 58.50.7.147
dd.biacetylnf.com A IN 3600 218.62.89.39
ff.biacetylnf.com A IN 3600 211.156.244.2
jn7cpwodp9oek11eo11e611j.hacklogji.com has no MX records ->
hacklogji.com has no MX records
http://www.moensted.dk/spam/?addr=218.62.89.39
http://www.spamhaus.org/query/bl?ip=218.62.89.39
More 218.62.89.39 sightings:
http://groups.google.com/groups/search?q=218.62.89.39+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42114
218.62.89.39/32 is listed on the Spamhaus Block List (SBL)
20-May-2006 21:47 GMT | SR23
Leo Kuvayev / BadCow
nigrouskg.com et al
AND:
http://www.moensted.dk/spam/?addr=58.50.7.147
inetnum: 58.48.0.0 - 58.55.255.255
netname: CHINANET-HB
descr: CHINANET Hubei province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
route: 58.48.0.0/13
descr: China Telecom HuBei province
origin: AS4134
mnt-by: MAINT-AS4134
changed: tia...@cndata.com
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
http://www.cidr-report.org/cgi-bin/as-report?as=4134
13 SBL listings for IPs under the responsibility of CHINANET-HB
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-HB
More biacetylnf.com sightings:
http://groups.google.com/groups/search?q=biacetylnf.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8c17f0976a4563a9
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/9f4093f14e85ee56
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: