Spamvert:
www.sevrom.net IP 221.210.8.203
(SBL44957) (at cncgroup-hl)
www.sevrom.net IP 58.20.108.94
(SBL45203) (at cncgroup-hn)
Web:
Advanced Laboratories Inc.
Copyright Penis Enlarge Patch Rx 2005
More Penis Enlarge Patch Rx sightings:
http://groups.google.com/groups/search?q=%22Enlarge+Patch+Rx%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Odis Butcher <adva...@007group.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43vgbPr6SR9QsIJx8iHIQFSp9UEXFKK8pk=
Received: from tomts1-srv.bellnexxia.net ([209.226.175.113]) by
bay0-pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sun, 13 Aug 2006 23:37:35 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 14 Aug 2006 02:37:32 -0400
Message-Id: <58h3sd$17p...@toip3.bellnexxia.net>
Received: (qmail 28319 invoked by uid 110); 14 Aug 2006 02:30:52 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 20315 invoked from network); 14 Aug 2006 02:28:55
-0400
Received: from 167.188.192.210.dynamic.ttn.net (HELO kycs)
(210.192.188.167)
by xx..xx..xx.net with SMTP; 14 Aug 2006 02:28:55 -0400
From: "Odis Butcher" <adva...@007group.com>
To: xx..xx@xx..xx.com
Subject: Hey baby, found this site and wanted you to check it out first
Date: Mon, 14 Aug 2006 06:28:52 -0480
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_006A_01C6BFAD.F70EAF60"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Return-Path: adva...@007group.com
X-OriginalArrivalTime: 14 Aug 2006 06:37:35.0187 (UTC)
FILETIME=[20A7AA30:01C6BF6C]
This is a multi-part message in MIME format.
------=_NextPart_000_006A_01C6BFAD.F70EAF60
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Hey bro! Nice talking to you the other day!
Thought you would want to check this out, I got some for myself
cause=20
they were on sale, you should check out the site, I added the link=20
below.
Steel P@ńk@ge:
10 P@tches reg $79.95 Now $49.95 ! Fri: shipping t00!
S!lver P@ck@ge: 25 P@t(hes reg $129.95, N0w $99.95! Fri: shipping &
fri:=20
exercise m@nual included!
G01d P@ckage:
40 P@tches reg $189.95, Now $149.95! Fri: shipping & free exercise=20
m@nual inc1uded!
Platinum P@ckage:
65 P@tchesreg $259.95, Now $199.95! Fri: shipping & free exercise=20
m@nual include (Best V@lue!)
I kn0vv l!ke 10 guys wh0 have already st0(ked up on these. Here's
the=20
link to (heck out br0 L|NK
Talk to you soon!
T0 $top g0 |-|ere!
------=_NextPart_000_006A_01C6BFAD.F70EAF60
Content-Type: text/html;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html;
charset=Windows-1252">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY><html>
<body bgcolor=3D"#FFFFFF">
<font size=3D"4" color=3D"cc0066">
<center>
<b>
<i>
Hey bro! Nice talking to you the other day!
</i>
</b>
</center>
</font>
<br>
Thought you would want to check this out, I got some for
myself=20
cause they were on sale, you should check out the site, I added the
link=20
below.
<br>
<br>
<font size=3D"3" color=3D"66ccff">
<i>
<b>
Steel P@ńk@ge: </font>
</i>
</b>
10 P@tches reg $79.95 Now $49.95 ! Fri: shipping t00! <br>
<br>
<font size=3D"3" color=3D"Silver">
<i>
<b>
S!lver P@ck@ge:</font></i></b> 25 P@t(hes reg $129.95, N0w $99.95!
Fri:=20
shipping & fri: exercise m@nual included!<br><br>
<font size=3D"3" color=3D"ffcc00">
<i>
<b>
G01d P@ckage: </font>
</i>
</b>
40 P@tches reg $189.95, Now $149.95! Fri: shipping & free exercise=20
m@nual inc1uded! <br>
<br>
<font size=3D"3" color=3D"#8695ae">
<i><b>Platinum P@ckage:
</font>
</i>
</b>
65 P@tchesreg $259.95, Now $199.95! Fri: shipping & free exercise=20
m@nual include (Best V@lue!)
<br>
<br>
<b>
<center>
<a href=3D"http://www.sevrom.net/a/?90&HKgfhkjfhjF8656GFJGhf84jHGJh">
I kn0vv l!ke 10 guys wh0 have already st0(ked up on these. Here's
the=20
link to (heck out br0 L|NK </a>
<br>
<br>
<font size=3D"4" color=3D"cc0066">
<center>
<i>Talk to you soon!</i>
</font>
</center>
</b>
<br>
<br>
<br>
<br>
<font size=3D"2">
T0 $top g0 <a href=3D"http://www.sevrom.net/u.php">|-|ere!
</a>
</font>
<br>
<br>
</center>
</body>
</html></BODY></HTML>
------=_NextPart_000_006A_01C6BFAD.F70EAF60--
-- END OF SPAM --
See:
IP 210.192.188.167 167.188.192.210.dynamic.ttn.net
http://www.moensted.dk/spam/?addr=210.192.188.167
inetnum: 210.192.128.0 - 210.192.255.255
netname: TTN-TW
descr: Taiwan Telecommunication Network Services Co.,LTD.
descr: 110 , 8F , No 89 , Sung Jen RD , Taipei
country: TW
route: 210.192.128.0/18
descr: AS6123/iAsiaWorks
origin: AS6123
mnt-by: WEBPROS-ASN-1
changed: jo...@iasiaworks.com
source: SAVVIS
route: 210.192.128.0/18
descr: AS4778/iAsiaWorks (Taiwan)
origin: AS4778
changed: jo...@iasiaworks.com
source: SAVVIS
ASN: 4747
ASN Name: UNSPECIFIED (Taiwan Telecommunication Network Services Co.
Ltd.)
Country IP Range: 210.192.128.0 to 210.192.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4747
11 SBL/ROKSO listings for IPs under the responsibility of ttn.com.tw
http://www.spamhaus.org/sbl/listings.lasso?isp=ttn.com.tw
See:
www.sevrom.net IP 58.20.108.94 and 221.210.8.203
ns1.zafrel.com [58.20.108.94] [TTL=172800] [CN]
ns2.noselt.com [221.210.8.203] [TTL=172800] [CN]
ns2.zafrel.com A IN 109295 58.20.185.4
NS records at nameservers are:
ns1.bionetiv.net [211.91.232.126]
ns2.bionetiv.net [221.210.8.201]
www.sevrom.net has no MX records -> sevrom.net has no MX records
http://www.moensted.dk/spam/?addr=221.210.8.203
http://www.spamhaus.org/query/bl?ip=221.210.8.203
More 221.210.8.203 sightings:
http://groups.google.com/groups/search?q=221.210.8.203+group%3A*abuse
inetnum: 221.208.0.0 - 221.212.255.255
netname: CNCGROUP-HL
route: 221.208.0.0/14
descr: CNC Group HeiLongjiang Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: i...@cnc-noc.net
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country IP Range: 221.208.0.0 to 221.223.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44957
221.208.0.0/14 is listed on the Spamhaus Block List (SBL)
28-Jul-2006 06:34 GMT | SR02
CNCGROUP-HL province network (escalated listing)
35 SBL/ROKSO listings for IPs under the responsibility of cncgroup-hl
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hl
See:
www.sevrom.net IP 58.20.108.94
http://www.moensted.dk/spam/?addr=58.20.108.94
http://www.spamhaus.org/query/bl?ip=58.20.108.94
inetnum: 58.20.0.0 - 58.20.255.255
netname: CNCGROUP-HN
descr: CNC Group HuNan province network
route: 58.20.0.0/16
descr: CNCGroup HuNan province network
country: CN
origin: AS9929
mnt-by: MAINT-CNCGROUP-RR
changed: hm-ch...@apnic.net
ASN: 9929
ASN Name: CNCNET-CN (China Netcom Corp.)
Country IP Range: 58.16.0.0 to 58.23.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9929
More 58.20.108.94 sightings:
http://groups.google.com/groups/search?q=58.20.108.94+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45203
58.20.108.94/32 is listed on the Spamhaus Block List (SBL)
06-Aug-2006 08:59 GMT | SR08
ns1.zafrel.com / sronul.com / myrkuri.net
2 SBL listings for IPs under the responsibility of cncgroup-hn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hn
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... sevrom.net
Creation Date........ 2006-08-04 01:34:42
Registration Date.... 2006-08-04 01:34:42
Expiry Date.......... 2007-08-04 01:34:42
Organisation Name.... feng fei
Organisation Address. shang hai
Organisation Address.
Organisation Address. shang hai
Organisation Address. 210000
Organisation Address. SH
Organisation Address. CN
Admin Name........... feng fei
Admin Address........ shang hai
Admin Address........
Admin Address........ shang hai
Admin Address........ 210000
Admin Address........ SH
Admin Address........ CN
Admin Email.......... admifnads[]163.com
Admin Phone.......... +86.2183265215
Admin Fax............ +86.2183265215
Tech Name............ feng fei
Tech Address......... shang hai
Tech Address.........
Tech Address......... shang hai
Tech Address......... 210000
Tech Address......... SH
Tech Address......... CN
Tech Email........... admi...@163.com
Tech Phone........... +86.2183265215
Tech Fax............. +86.2183265215
Bill Name............ feng fei
Bill Address......... shang hai
Bill Address.........
Bill Address......... shang hai
Bill Address......... 210000
Bill Address......... SH
Bill Address......... CN
Bill Email........... admi...@163.com
Bill Phone........... +86.2183265215
Bill Fax............. +86.2183265215
Name Server.......... ns2.noselt.com
Name Server.......... ns1.zafrel.com
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/51a9d740d6303533
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/0e923384eddef52c
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: