[email] [software piracy] [209.30.97.226] (kunil-oem.com / srul5.com - PacNames) Buy OEM Software
TomezNet
IP 209.30.97.226 209-30-97-226.ded.swbell.net
(at ns2.swbell.net / sbc.com)
Spamvert:
kunil-oem.com IP 222.122.180.189
(SBL49519 - ROK6138 Polyakov) (at rev2.kornet.net)
See Much More the same spammer sightings:
http://groups.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: [MUNGED] via 216.252.100.179; Wed, 03 Jan 2007
10:37:49 -0800
X-YahooFilteredBulk: 209.30.97.226
X-Originating-IP: [209.30.97.226]
Return-Path: <epd-switz...@wonfuproductions.com>
Authentication-Results: mta287.mail.mud.yahoo.com
from=wonfuproductions.com; domainkeys=neutral (no sig)
Received: from 209.30.97.226 (HELO localhost) (209.30.97.226) by
mta287.mail.mud.yahoo.com with SMTP; Wed, 03 Jan 2007 10:37:49 -0800
Message-ID: <000001c72f66$1cd15900$0100007f@localhost>
From: "Hayden Davis" <epd-switz...@wonfuproductions.com>
To: [MUNGED]
Subject: Buy OEM Software
Date: Wed, 03 Jan 2007 12:48:55 -0600
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3160
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.200
Content-Length: 654
Christmas discounts! Special New Year offers!
T0P 1O ITEMS N0W!
$79 Microsoft Windows Vista Ultimate
$79 MS Office Enterprise 2007
$79 Adobe Acrobat 8 Pro
$49 Windows XP Pro w/SP2
$99 Macromedia Studio 8
$59 Adobe Premiere 2.0
$59 Corel Grafix Suite X3
$59 Adobe Illustrator CS2
$129 Autodesk Autocad 2007
$149 Adobe Creative Suite 2
http://kunil-oem.com/?488F6C08B3C9FBDD5A4B40E282391434538D&t0
See more by this manufacturers:
Microsoft....Mac....Adobe....Borland....Macromedia
http://kunil-oem.com/?488F6C08B3C9FBDD5A4B40E282391434538D&t4
Microsoft Windows Vista Ultimate
Retail price: $399.00
Proposition: $79.95
Your benefit: $319.05 (80%)
Availability: Can be downloaded INSTANTLY.
http://kunil-oem.com/2480.php?488F6C08B3C9FBDD5A4B40E282391434538D&t3
Best choice for home and professional. (46862 reviews)
Microsoft Office 2007 Enterprise Edition
Regular price: $899.00
Our offer: $79.95
You save: $819.95 (89%)
Availability: Pay and download instantly.
http://kunil-oem.com/2442.php?488F6C08B3C9FBDD5A4B40E282391434538D&t1
Sales Rank: #1 (101912 reviews)
Adobe Acrobat 8.0 Professional
Market price: $449.00
We propose: $79.95
Your profit: $369.05 (80%)
Availability: Available for INSTANT download.
http://kunil-oem.com/2441.php?488F6C08B3C9FBDD5A4B40E282391434538D&t2
Top-ranked item. (25739 reviews)
-- END OF SPAM --
See also more spammer OEM Software sightings:
http://groups.google.com/groups/search?q=%22OEM+Software%22+group%3A*abuse&start=0&scoring=d&
See also more spammer sightings:
http://groups.google.com/groups/search?q=oemguy.com+group%3A*abuse&start=0&scoring=d&
See:
IP 209.30.97.226 209-30-97-226.ded.swbell.net
http://www.moensted.dk/spam/?addr=209.30.97.226
http://www.spamhaus.org/query/bl?ip=209.30.97.226
http://cbl.abuseat.org/lookup.cgi?ip=209.30.97.226
Exploitable Server See: http://www.sorbs.net/lookup.shtml?209.30.97.226
More swbell.net sightings:
http://groups.google.com/groups/search?q=swbell.net+group%3A*abuse&start=0&scoring=d&
SBC Internet Services SBCIS-SIS80 (NET-209-30-0-0-1)
209.30.0.0 - 209.30.255.255
First Financial Community Credit Union SBC20903009719226060327113245
(NET-209-30-97-192-1)
209.30.97.192 - 209.30.97.255
CustName: First Financial Community Credit Union
Address: 2455 Price Road
NetRange: 209.30.97.192 - 209.30.97.255
CIDR: 209.30.97.192/26
NetName: SBC20903009719226060327113245
NetHandle: NET-209-30-97-192-1
Parent: NET-209-30-0-0-1
OrgAbuseName: Abuse - Southwestern Bell Internet
OrgAbusePhone: +1-800-648-1626
OrgAbuseEmail: ab...@sbcglobal.net
postmaster and abuse[]sbcglobal.net are listed in rfc-ignorant.org
database
whois and abuse[]sbc.com are listed in rfc-ignorant.org database
route: 209.30.0.0/16
descr: ARIN Allocation
SBC Internet Services
origin: AS7132
mnt-by: MAINT-AS7132
changed: back...@sbis.sbc.com
ASN: 7132
ASN Name: SBIS-AS
Country (per IP registrar): US [United States]
Country IP Range: 209.30.0.0 to 209.31.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=7132
58 SBL/ROKSO listings for IPs under the responsibility of sbc.com
http://www.spamhaus.org/sbl/listings.lasso?isp=sbc.com
7 SBL/ROKSO listings for IPs under the responsibility of swbell.net
http://www.spamhaus.org/sbl/listings.lasso?isp=swbell.net
See:
kunil-oem.com IP 222.122.180.189
ns1.srul5.com [222.122.180.189] [TTL=172800] [KR]
ns2.srul5.com [121.31.56.28] [TTL=172800] [CN]
NS records at nameservers are:
ns1.kunil-oem.com [222.122.180.189] [TTL=3600]
ns2.kunil-oem.com [121.31.56.28] [TTL=3600]
kunil-oem.com has no MX records
SOA record [TTL=2560] is:
Primary nameserver: ns1.kunil-oem.com
Hostmaster E-mail address: hostm...@kunil-oem.com
Serial #: 1167773620
http://www.moensted.dk/spam/?addr=222.122.180.189
http://www.spambag.org/cgi-bin/spambag?mailfrom=kornet
Escalated Listing (Spam or Spam Support) See:
http://www.sorbs.net/lookup.shtml?222.122.180.189
http://korea.services.net/blocked.phtml?addr=222.122.180.189
http://www.spamhaus.org/query/bl?ip=222.122.180.189
No PTR records exist for 222.122.180.189 at rev2.kornet.net
Org Name : Korea Telecom
Service Name : KORNET
Name : IP Administrator
Phone : +82-2-3674-5708
E-Mail : i...@krnic.kornet.net
Name : Network Abuse
Phone : +82-2-100-0000
E-mail : ab...@kornet.net => ???!!!
SEE Much More kornet sightings (over 48,700):
http://groups.google.com/groups/search?q=kornet+group%3A*abuse&start=0&scoring=d&
route: 222.122.0.0/16
descr: Korea Telecom, Seoul, Korea
origin: AS4766
mnt-by: MAINT-AS4766
changed: chs...@soback.kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country (per IP registrar): KR [Korea-KR]
Country IP Range: 222.122.0.0 to 222.122.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
More 222.122.180.189 sightings:
http://groups.google.com/groups/search?q=222.122.180.189+group%3A*abuse&qt_s=Search
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL49519
222.122.180.189/32 is listed on the Spamhaus Block List (SBL/ROKSO)
03-Jan-2007 16:27 GMT | SR04
Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov.
Multiple spammer domains (hacked Fedora server?)
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK6138
23 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Constant spammer suppoert by PacNames sightings:
http://groups.google.com/groups/search?q=PacNames+group%3A*abuse&start=0&scoring=d&
Domain name: KUNIL-OEM.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Registrant hiding behind PacNames => shieldedwhois.com
Domain Registrant: (Private Contact)
(pws.dfc20ec5e9b4824[]shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Administrative, Technical Contact: (Private Contact)
(pws.dfc20...@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Name Server: NS1.SRUL5.COM
Name Server: NS2.SRUL5.COM
Domain creaton date: 2007-01-02 00:39:11.0
Domain expiration date: 2008-01-02 05:53:47.0
More kunil-oem.com sightings:
http://groups.google.com/groups/search?q=kunil-oem.com+group%3A*abuse&qt_s=Search
See also more srul5.com sightings:
http://groups.google.com/groups/search?q=srul5.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/bebdd4ec0ced9d82
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: