Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [drugs - Canadian Pharmacy] [83.198.197.100] (blocubs.hk / datacolumn.hk / bookdiff.com / fleetpublicity.net) Online MedHelp

0 views
Skip to first unread message

TomezNet

unread,
May 23, 2007, 1:30:33 PM5/23/07
to
Received From:
IP 83.198.197.100 alille-153-1-8-100.w83-198.abo.wanadoo.fr
(at orange.fr / francetelecom.com)

datacolumn.hk
Resolved www.datacolumn.hk to 61.244.125.89 to 62.143.156.145 to
66.176.228.249 to 69.210.209.70 to 71.146.140.164 to 80.138.28.126 to
89.178.34.217 to 89.178.250.247 to 158.195.102.128 to 158.197.42.174

Spamvwert Image hosting:
http://blocubs.hk/1.jpg

blocubs.hk
Resolves to 64.85.255.75 to 69.243.7.56 to 71.138.164.123 to
71.194.127.235 to 74.142.10.35 to 75.71.147.10 to 85.176.105.22 to
89.178.59.84 to 89.178.230.253 to 140.114.192.19

http://blocubs.hk/

Title => Canadian Pharmacy

Much More Canadian Pharmacy sightings:
http://groups.google.com/groups/search?q=%22Canadian+Pharmacy%22+group%3A*abuse&start=0&scoring=d&

www.sky.bookdiff.com IP 203.70.29.108
(at my-linuxserver.com / twinkle.com.tw / seed.net.tw)

order frameset load:
http://dfabejgh.fleetpublicity.net/e/ch/index.php?action=humangrowthhormone&t=&pid=_2002&dis=&cart=

dfabejgh.fleetpublicity.net IP 217.219.86.118
fleetpublicity.net IP 217.219.86.118
(SBL54033) (at dci.co.ir)

Copyright © 2001-2007 Canadian Health&Care Mall. All rights reserved.

bookdiff.com IP 203.199.75.166
(at vsnl.net.in)

Headers Forgery by spammer.
Plenty of Forged Certificates and logos as always.

Much More info below:
====================

Return-Path: <in...@aniplaza.com>
Delivered-To: [MUNGED]
Received: (qmail 7632 invoked from network); 23 May 2007 06:11:14
-0400
Received: from alille-153-1-8-100.w83-198.abo.wanadoo.fr
(83.198.197.100)
by [MUNGED] with SMTP; 23 May 2007 06:11:14 -0400
X-Originating-IP: [561.334.9.2]
X-Originating-Email: [MUNGED]
X-Sender: [MUNGED]
Return-Path: [MUNGED]
Received: (qmail 4811 by uid 131); Wed, 23 May 2007 12:11:59 +0100
Message-Id:
<200705231311...@ALille-153-1-8-100.w83-198.abo.wanadoo.fr>
To: <[MUNGED]>
Subject: Online MedHelp
From: Ja...@viagra.com <[MUNGED]>
MIME-Version: 1.0
Importance: High
Content-Type: text/html

<style>

Hi,

Is there an easy way to make a chart automatically include new rows as
they are entered?

I currently have a spreadsheet with three columns: A, B and C.
Column A contains dates (i.e. the period, ex: June 2005)
Column B and C contains figures for the period.
<!I made a post FS/FT A? recently and when I finished it the message
said
your post will take 3-10 hours to appear. Not more than 5 minutes
later I received a E-mail reply to the post. I could not view my post
until 5.5 hours later at 12:30 in the morning. I replied back to the
E-mail and asked him how he seen the post so quickly. He said he just
seen it come up and that the post time delay may have something to do
with my ISP! I sent a question to Google groups support but their
reply was they were very busy and it may take some time to respond! I
checked their FAQ's to no avail. My ISP is a cable company DSL hi
speed line.

Can anyone shed some light on this. Is there anything the member can
do differently to see these posts as soon as they are released. If it
is the ISP what do you tell them to do differently? Is there a better
URL or IP address to access??

Appreciate any replies,
Rich>

<!When I copy and paste printed text to news group post, the line
breaks from the original publication are retained and result in
something like:
------------------------------------------
POSTED 8:54 a.m. EST; UPDATED 9:21 a.m. EST, March 5, 2007

PACKERS CHASING BELL

Bell was acquired by the Lions last week as part of the Dre' Bly
deal. As we've reported, both Bell and former Broncos tackle
George Foster are candidates to be traded again.

We're also told that the Packers contacted the Bears about the
availability of running back Thomas Jones, but the Bears said that he
is not available. It remains to be seen whether the Bears would be
willing to trade him to a team other than their intra-division
arch-rivals.
</style><a target="_blank" href="http://datacolumn.hk">
<img src="http://blocubs.hk/1.jpg">
<style>
------------------------------------------

I think it might have something to do with

Tools/Options/Send/News Sending Format

Can the off the automatic word wrap be disabled?
I've heard that there's another Two-Wheeled Tuesday somewhere
west of the city. Anyone been there or know of any others in the
area?

<!
I've seen a different version of the Macross Plus LDs called
Macross Plus International Edition. I asked somebody about
them and my friend said they're supposed to be something
similar to the Pioneer LDs, english on the digital track, japanese
on the analog, and closed captioning. Can somebody please
confirm this? (so I can go out and buy these LDs right now :)

Wilson Verardi>
<!Hi...

I'm selling on eBay (link below) a brand new condition copy of the "jp
airline-fleets international edition 96/97". This is the most
comprehensive guide to the airline fleets of all countries. Includes
info on complete fleets, types of aircraft, numbers, registration
numbers, etc. A very impressive book.

</style>

</div>

-- END OF SPAM --

SEE contact page:
Form and Also you may send us an e-mail.
You will get an answer ASAP. Customer Support (click here to mail us
sites...@globalpharmsupport.com)

globalpharmsupport.com IP N/A

AND connection to UnitedPharmSupport.com

More globalpharmsupport.com sightings:
http://groups.google.com/groups/search?q=globalpharmsupport.com+group%3A*abuse&qt_s=Search

See:
IP 83.198.197.100 alille-153-1-8-100.w83-198.abo.wanadoo.fr

http://www.moensted.dk/spam/?addr=83.198.197.100

More stock spam sightings from rima-tde.net network:
http://groups.google.com/groups/search?q=wanadoo.fr+stock+group%3A*abuse&start=0&scoring=d&

inetnum: 83.198.197.0 - 83.198.197.255
netname: IP2000-ADSL-BAS
descr: BSLIL153 Lille Bloc 2
country: FR
admin-c: WITR1-RIPE
tech-c: WITR1-RIPE
status: ASSIGNED PA
remarks: for hacking, spamming or security problems send mail
to
remarks: postm...@wanadoo.fr AND ab...@wanadoo.fr ==>> ?????

postmaster and abuse[]wanadoo.fr are listed in rfc-ignorant.org
database
abuse[]francetelecom.com is listed in rfc-ignorant.org database

Orange is the new commercial name of Wanadoo

route: 83.192.0.0/13
descr: France Telecom
origin: AS3215
mnt-by: RAIN-TRANSPAC
changed: gestio...@francetelecom.com
http://www.cidr-report.org/cgi-bin/as-report?as=3352

More wanadoo.fr sightings:
http://groups.google.com/groups/search?q=wanadoo+group%3A*abuse&start=0&scoring=d&

10 SBL/ROKSO listings for IPs under the responsibility of
francetelecom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=francetelecom.com

Spamvwert Image hosting:
http://blocubs.hk/1.jpg

http://blocubs.hk/

Title => Canadian Pharmacy

blocubs.hk
Resolves to 64.85.255.75 to 69.243.7.56 to 71.138.164.123 to
71.194.127.235 to 74.142.10.35 to 75.71.147.10 to 85.176.105.22 to
89.178.59.84 to 89.178.230.253 to 140.114.192.19

NS0.PIOTIONGANDESUNKDES.COM [64.85.255.75 (NO GLUE)] [US]
NS0.GEDSACTUNJERION.COM [69.211.14.38 (NO GLUE)] [US]
NS0.FIONKUNJERUNHEDASE.COM [217.86.5.160 (NO GLUE)] [DE]
NS0.CHITIONKDETUNLIONPSA.COM [24.238.167.239 (NO GLUE)] [US]

NS records at your nameservers are:
ns0.piotiongandesunkdes.com [64.85.255.75] [TTL=300]
ns0.chitionkdetunlionpsa.com [24.238.167.239] [TTL=300]
ns0.fionkunjerunhedase.com [65.24.170.10] [TTL=300]
ns0.gedsactunjerion.com [69.211.14.38] [TTL=300]

SOA record [TTL=300] is:
Primary nameserver: ns0.piotiongandesunkdes.com
Hostmaster E-mail address:
Serial #: 0

4 MX records are:
ns0.chitionkdetunlionpsa.com. and ns0.fionkunjerunhedase.com. both
resolve to 0.0.0.0.
ns0.chitionkdetunlionpsa.com. and ns0.piotiongandesunkdes.com. both
resolve to 0.0.0.0.
ns0.chitionkdetunlionpsa.com. and ns0.gedsactunjerion.com. both
resolve to 0.0.0.0.
ns0.fionkunjerunhedase.com. and ns0.piotiongandesunkdes.com. both
resolve to 0.0.0.0.
ns0.fionkunjerunhedase.com. and ns0.gedsactunjerion.com. both resolve
to 0.0.0.0.
ns0.piotiongandesunkdes.com. and ns0.gedsactunjerion.com. both resolve
to 0.0.0.0.

www.blocubs.hk A record is:
www.blocubs.hk A 84.50.64.210 [TTL=300] [EE]
www.blocubs.hk A 82.212.40.129 [TTL=300] [DE]
www.blocubs.hk A 66.176.228.249 [TTL=300] [US]
www.blocubs.hk A 71.146.140.164 [TTL=300] [US]
www.blocubs.hk A 71.138.164.123 [TTL=300] [US]
www.blocubs.hk A 89.178.59.84 [TTL=300] [RU]
www.blocubs.hk A 212.64.125.119 [TTL=300] [NL]
www.blocubs.hk A 158.195.102.128 [TTL=300] [EU]
www.blocubs.hk A 89.189.136.107 [TTL=300] [RU]
www.blocubs.hk A 91.89.75.52 [TTL=300] [DE]

blocubs.hk A record is:
blocubs.hk A 71.146.140.164 [TTL=300]
blocubs.hk A 71.138.164.123 [TTL=300]
blocubs.hk A 89.178.59.84 [TTL=300]
blocubs.hk A 212.64.125.119 [TTL=300]
blocubs.hk A 158.195.102.128 [TTL=300]
blocubs.hk A 89.189.136.107 [TTL=300]
blocubs.hk A 91.89.75.52 [TTL=300]
blocubs.hk A 84.50.64.210 [TTL=300]
blocubs.hk A 82.212.40.129 [TTL=300]
blocubs.hk A 66.176.228.249 [TTL=300]

3 hosts sharing ip
adsl-71-146-140-164.dsl.pltn13.sbcglobal.net
anystood.hk
basicrx.org

5 domains sharing nameservers with blocubs.hk
anystood.hk
basicrx.org
kaylane.hk
masterheart.hk
noonbaby.hk

Let see whois:
Domain Name: BLOCUBS.HK
Contract Version: HKDNR latest version

Registrant Contact Information:
Holder English Name (It should be the same as your legal name on your
HKID card or other relevant documents): LARRY UNDERHILL
Holder Chinese Name:
Email: netd...@yahoo.com
Domain Name Commencement Date: 26-04-2007
Country: US
Expiry Date: 26-04-2008
Re-registration Status: Complete
Name of Registrar: HKDNR
Account Name: HK1875928T

Technical Contact:
First name: LARRY
Last name: UNDERHILL
Company Name: LARRY UNDERHILL

Name Servers Information:
NS0.GEDSACTUNJERION.COM
NS0.FIONKUNJERUNHEDASE.COM
NS0.PIOTIONGANDESUNKDES.COM
NS0.CHITIONKDETUNLIONPSA.COM

Spamvert URL:
http://www.datacolumn.hk

Redirected to:
http://www.sky.bookdiff.com/

See:
datacolumn.hk
Resolved www.datacolumn.hk to 61.244.125.89 to 62.143.156.145 to
66.176.228.249 to 69.210.209.70 to 71.146.140.164 to 80.138.28.126 to
89.178.34.217 to 89.178.250.247 to 158.195.102.128 to 158.197.42.174

NS0.PIOTIONGANDESUNKDES.COM [64.85.255.75 (NO GLUE)] [US]
NS0.CHITIONKDETUNLIONPSA.COM [24.238.167.239 (NO GLUE)] [US]
NS0.GEDSACTUNJERION.COM [69.211.14.38 (NO GLUE)] [US]
NS0.FIONKUNJERUNHEDASE.COM [217.86.5.160 (NO GLUE)] [DE]

NS records at nameservers are:
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]
datacolumn.hk. [62.40.87.37] [71.194.127.235] [65.24.187.23]
[89.106.43.54] [86.71.46.134] [158.195.148.174] [158.195.102.128]
[75.71.147.10] [89.178.59.84] [82.137.4.38] [TTL=300]

SOA record [TTL=300] is:
Primary nameserver: datacolumn.hk
Hostmaster E-mail address: 89.106.43.54
Serial #: 1500130102

89.106.43.54 = ppp89-106-43-54.promiranet.ru

10 MX records are:
duplicate MX records.
All => datacolumn.hk and datacolumn.hk both resolve to 0.0.0.0.

www.datacolumn.hk has no MX records -> datacolumn.hk has no MX records

www.datacolumn.hk A record is:
www.datacolumn.hk A 82.137.4.38 [TTL=300] [RO]
www.datacolumn.hk A 62.40.87.37 [TTL=300] [CZ]
www.datacolumn.hk A 71.194.127.235 [TTL=300] [US]
www.datacolumn.hk A 65.24.187.23 [TTL=300] [US]
www.datacolumn.hk A 89.106.43.54 [TTL=300] [RU]
www.datacolumn.hk A 86.71.46.134 [TTL=300] [FR]
www.datacolumn.hk A 158.195.148.174 [TTL=300] [EU]
www.datacolumn.hk A 158.195.102.128 [TTL=300] [EU]
www.datacolumn.hk A 75.71.147.10 [TTL=300] [US]
www.datacolumn.hk A 89.178.59.84 [TTL=300] [RU]

6 domains sharing nameservers with datacolumn.hk
anystood.hk
basicrx.org
blocubs.hk
kaylane.hk
masterheart.hk
noonbaby.hk

Let see whois:
Domain Name: DATACOLUMN.HK
Contract Version: HKDNR latest version

Registrant Contact Information:
Holder English Name (It should be the same as your legal name on your
HKID card or other relevant documents): TIM RILEY
Holder Chinese Name:
Email: walter...@yahoo.com
Domain Name Commencement Date: 26-04-2007
Country: US
Expiry Date: 26-04-2008
Re-registration Status: Complete
Name of Registrar: HKDNR
Account Name: HK1875895T

Technical Contact:
First name: TIM
Last name: RILEY
Company Name: TIM RILEY

Name Servers Information:
NS0.GEDSACTUNJERION.COM
NS0.FIONKUNJERUNHEDASE.COM
NS0.PIOTIONGANDESUNKDES.COM
NS0.CHITIONKDETUNLIONPSA.COM

See:
www.sky.bookdiff.com IP 203.70.29.108

Copyright © 2001-2007 Canadian Health&Care Mall. All rights reserved.

bookdiff.com IP 203.199.75.166
ns.my-linuxserver.com [203.199.75.166] [TTL=172800] [IN]
ns2.my-linuxserver.com [203.199.75.167] [TTL=172800] [IN]

SOA record [TTL=38400] is:
Primary nameserver: ns.my-linuxserver.com
Hostmaster E-mail address: in...@yojnaindia.com
Serial #: 1142850819

www.sky.bookdiff.com has no MX records -> sky.bookdiff.com has no MX
records -> [bookdiff.com has 1 MX record mail.bookdiff.com (10)]

1 MX record is:
10 mail.bookdiff.com [TTL=300] IP=203.199.75.166 [TTL=300] [IN]

203.199.75.166 = linux.my-ntserver.com

http://www.moensted.dk/spam/?addr=203.70.29.108

inetnum: 203.70.0.0 - 203.70.255.255
netname: SEEDNET
descr: Digital United Inc.
descr: 9F, No. 125, Song Jiang Road
descr: Taipei, Taiwan
country: TW
person: Chyi-Chuan Yang
nic-hdl: CY74-AP
e-mail: ccy...@du.net.tw

route: 203.70.0.0/19
descr: SeedNet
Digital United Inc.
No. 220, Gangchi Rd., Taipei 114
Taiwan
origin: AS4780
mnt-by: MAINT-AS4780
changed: chun...@du.net.tw

postmaster and abuse[]seed.net.tw are listed in rfc-ignorant.org
database

IP: 203.70.29.108
Reverse: h108-203-70-29.twinkle.com.tw
Aliases:
Prefix: 203.70.0.0/19
Prefix Name: SeedNet Digital United Inc No 220, Gangchi Rd , Taipei
114 Taiwan REACH (Customer Route) REACH (Customer Route)
AS: 4780
AS Name: seednet Digital United Inc No 220, Gangchi road, Nei Hu
district Taipei, Taiwan, 11444
http://www.cidr-report.org/cgi-bin/as-report?as=4780

1 SBL/ROKSO listings for IPs under the responsibility of seed.net.tw
http://www.spamhaus.org/sbl/listings.lasso?isp=seed.net.tw

See:
bookdiff.com IP 203.199.75.166

http://www.moensted.dk/spam/?addr=203.199.75.166

inetnum: 203.199.0.0 - 203.199.255.255
netname: VSNL-IN
descr: Videsh Sanchar Nigam Ltd - India.
descr: Videsh Sanchar Bhawan, M.G. Road
descr: Fort, Bombay 400001
country: IN
person: IP Administrator
nic-hdl: IA15-AP
e-mail: ip.a...@vsnl.co.in

IP: 203.199.75.166
Reverse: linux.my-ntserver.com
Aliases:
etlasnet.com
www.etlasnet.com
www.jobsforindia.com
www.karlgomes.com
www.rajena.com
www.sanjaymaroo.com
tibriwals.com
www.tibriwals.com
Prefix: 203.199.74.0/23
Prefix Name: VSNL Route Object VSNL Route Object
AS: 4755
AS Name: VSNL AS AP Videsh Sanchar Nigam Limited India
http://www.cidr-report.org/cgi-bin/as-report?as=4755

postmaster and abuse[]vsnl.net.in are listed in rfc-ignorant.org
database

2 SBL listings for IPs under the responsibility of vsnl.net.in
http://www.spamhaus.org/sbl/listings.lasso?isp=vsnl.net.in

Let see whois:
Checking server [whois.PublicDomainRegistry.com]
Results:
Registration Service Provided By: YOJNA TECHNOSOFT PVT.LTD
Contact: +91.02232976884
Website: http://www.yojnaindia.com

Domain Name: BOOKDIFF.COM

Registrant:
Jobsguild
Ketan Chandaria (ke_...@hotmail.com)
5, Jain Apartments,
Khar Pali Road, Bandra,
Mumbai 400 050.
Mumbai
Maharashtra,400050
IN
Tel. +91.9821544115

Creation Date: 20-Mar-2006
Expiration Date: 20-Mar-2008

Domain servers in listed order:
ns.my-linuxserver.com
ns2.my-linuxserver.com

Administrative Contact:
Jobsguild
Ketan Chandaria (ke_chan[]hotmail.com)
5, Jain Apartments,
Khar Pali Road, Bandra,
Mumbai 400 050.
Mumbai
Maharashtra,400050
IN
Tel. +91.9821544115

Technical Contact:
Jobsguild
Ketan Chandaria (ke_...@hotmail.com)
5, Jain Apartments,
Khar Pali Road, Bandra,
Mumbai 400 050.
Mumbai
Maharashtra,400050
IN
Tel. +91.9821544115

Billing Contact:
Jobsguild
Ketan Chandaria (ke_...@hotmail.com)
5, Jain Apartments,
Khar Pali Road, Bandra,
Mumbai 400 050.
Mumbai
Maharashtra,400050
IN
Tel. +91.9821544115

Status:ACTIVE

SEE:
order frameset load:
http://dfabejgh.fleetpublicity.net/e/ch/index.php?action=humangrowthhormone&t=&pid=_2002&dis=&cart=

dfabejgh.fleetpublicity.net IP 217.219.86.118
ns1.fleetpublicity.net A IN 600 217.219.86.118
ns2.fleetpublicity.net A IN 600 217.219.86.118
ns3.fleetpublicity.net A IN 600 101.34.2.197
ns1.wee2pe1t.com [66.23.228.157]

dfabejgh.fleetpublicity.net has no MX records -> [fleetpublicity.net
has 1 MX record mail.fleetpublicity.net (10)]

http://www.moensted.dk/spam/?addr=217.219.86.118
http://www.spamhaus.org/query/bl?ip=217.219.86.118

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54033
217.219.86.118/32 is listed on the Spamhaus Block List (SBL/ROKSO)

28-Apr-2007 21:16 GMT | SR20

Yambo Financials.
Yambo botnet nameservers/webhosts (compromised systems)

21 SBL/ROKSO listings for IPs under the responsibility of dci.co.ir
http://www.spamhaus.org/sbl/listings.lasso?isp=dci.co.ir

See:
fleetpublicity.net IP 217.219.86.118
ns1.vigitantralu.com [66.23.228.157] [TTL=172800] [US]
ns1.wee2pe1t.com [66.23.228.157] [TTL=172800] [US]
ns2.carambolex.info [200.62.226.85 (NO GLUE)] [PE]
ns2.sumsummer.net [200.62.226.85] [TTL=172800] [PE]

NS records at nameservers are:
ns2.fleetpublicity.net [217.219.86.118] [TTL=600]
ns3.fleetpublicity.net [101.34.2.197] [TTL=600]
ns1.fleetpublicity.net [217.219.86.118] [TTL=600]

SOA record [TTL=600] is:
Primary nameserver: fleetpublicity.net
Hostmaster E-mail address: ad...@fleetpublicity.net
Serial #: 2005000000

1 MX record is:
10 mail.fleetpublicity.net [TTL=600] IP=101.34.2.197 [TTL=600] [*R]

http://www.moensted.dk/spam/?addr=217.219.86.118
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54033

More 217.219.86.118 sightings:
http://groups.google.com/groups/search?q=217.219.86.118+group%3A*abuse&start=0&scoring=d&

All DNS servers are already in sightings and net-abuse.email

Let see whois:
Domain Name: FLEETPUBLICITY.NET

Registrant [676045]:
Juan Lopez
5710 Country Sun Dr.
San Antonio
TX
78244
US

Administrative Contact [676045]:
Juan Lopez crush[]collector.org
5710 Country Sun Dr.
San Antonio
TX
78244
US
Phone: +1.2106619244

Billing Contact [676045]:
Juan Lopez cr...@collector.org
5710 Country Sun Dr.
San Antonio
TX
78244
US
Phone: +1.2106619244

Technical Contact [676045]:
Juan Lopez cr...@collector.org
5710 Country Sun Dr.
San Antonio
TX
78244
US
Phone: +1.2106619244

Domain servers in listed order:

NS1.WEE2PE1T.COM
NS2.SUMSUMMER.NET 200.62.226.85
NS1.VIGITANTRALU.COM
NS2.CARAMBOLEX.INFO

Record created on: 2007-04-09 03:08:44.0
Database last updated on: 2007-04-13 07:03:18.17
Domain Expires on: 2008-04-09 03:09:00.0

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/browse_thread/thread/ef60e2f08af21d2b/5158239c0367aae0#5158239c0367aae0

See also thread:
http://groups.google.com/group/news.admin.net-abuse.email/browse_thread/thread/495f5468b21f15dc/3026ddc916d676a3#3026ddc916d676a3

And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/5d580e04d22bb4f3

Cheers, Tomez


--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages