[email] (cnlinfo.net) ???sohu!???
TomezNet
IP 211.147.247.174
(at ns1.gzidc.com)
Spamvert:
cnlinfo.net IP 61.28.28.10
sz.cnlinfo.net IP 61.28.28.10
(at etfiber.net)
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 209.73.179.37; Sat, 08 Apr 2006
00:55:42 -0700
X-YahooFilteredBulk: 211.147.247.174
X-Originating-IP: [211.147.247.174]
Return-Path: <ent...@sohu.com>
Authentication-Results: mta190.mail.mud.yahoo.com from=sohu.com;
domainkeys=neutral (no sig)
Received: from 211.147.247.174 (EHLO sohu.com) (211.147.247.174) by
mta190.mail.mud.yahoo.com with SMTP; Sat, 08 Apr 2006 00:55:42 -0700
From: "โนโนร'ยตรรธรรฎรรร3โ4" <ent...@sohu.com>
Subject: ยฅยฌรยฎร"รรรฎรร
To: xx..xx@xx..xx.com
Content-Type: text/plain;charset="GB2312"
Reply-to: ent...@sohu.com
Date: Sat, 8 Apr 2006 15:55:51 +0800
X-Priority: 3
X-Mailer: FoxMail 4.0 beta 2 [cn]
Content-Length: 576
ยฅยฌรยฎร"รรรฎรร
รโนโรบโนโนร'ยตโนร--รยขรรธยฃยจhttp://cnlinfo.netยฃยฉ3โ4ยซโนรยดรฒร"รฌยตร"รรฎรรรรรรฑร3โ4"ยฃยจhttp://sz.cnlinfo.netยฃยฉรยฟรยฐร'ร`โรรยชรรฎรรรรธรรรรรรฑยตรร'ยปรยงรรร'ยชรโซรยฟยฃยฌรรผร'โกรรร๏ฌรโกรรรรฑรรรยฟยตรรยฟโรขยฃยฌรรรรธร'โรคยฏรรรยฟร'ร`ยดรฏรโกรรฒรรยดรยกยฃ"รรฎรรร3โ4"รยชรรรรฑรรธร"ร`รรกโยฉร๏ฌโนรจยฅยขโ`รก1โ4ยดยฟรยทยขโ`1โ4ยธรทรร โนร--รยขยตรยฑรฃ1โ2โ ยฃยฌโนรยทยขโ`1โ4ยตรโนร--รยขยปโยฟรร"รรยฅร'โรร"ร3โ4ยฃยฌรรร"รรรขยทร`1โ4ยดยฟรยทยขโ`1โ4ยทรรร โรฃยธรฆยฃยฌยปรบโ`ยปยฟรรยงยฃยก
ยตรร1โ2http://sz.cnlinfo.netยฃยจรรฎรรร3โ4ยฃยฉยฃยฌยฅยฌรยฎร"รรรฎรรยฃยก
รรบร'โ`ยฟรร'ร"ร"รhttp://cnlinfo.netรรยฟยชรรรรร`1โ2ยฃยฌรรร"รบรรยดรฒรรธรรยฅยฌรยฎยฃยก
1โ4รยฅยกรรขโนยฉรรธรยทยฃยฌยฟรรรรรบยตรรรณร'ยตยปรฒรรบยธรถรรโรรยชรรธรรรรรรฑยตรยดรณร"ยฎ1โ4ร'ยฃยก
รรฎรรรรรรฑร3โ4http://sz.cnlinfo.net
รยซโรบร3โ4ยฃยบhttp://cnlinfo.net
-- END OF SPAM --
See:
IP 211.147.247.174
http://www.moensted.dk/spam/?addr=211.147.247.174
http://www.spamcop.net/bl.shtml?211.147.247.174
Exploitable Server See:
http://www.sorbs.net/lookup.shtml?211.147.247.174
[1] Global Media, see http://spews.org/html/S3056.html
More 211.147.247.174 sightings:
http://groups.google.com/groups/search?q=211.147.247.174+group%3A*abuse&start=0&scoring=d&
inetnum: 211.147.243.0 - 211.147.248.255
netname: Etrust
country: CN
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
http://www.cidr-report.org/cgi-bin/as-report?as=4134
7 SBL/ROKSO listings for IPs under the responsibility of gzidc.com
http://www.spamhaus.org/sbl/listings.lasso?isp=gzidc.com
See:
cnlinfo.net IP 61.28.28.10
sz.cnlinfo.net IP 61.28.28.10
mail.cnlinfo.net A IN 7200 61.28.28.10
ns2.cnolnic.com A IN 7200 211.152.51.15
ns1.cnolnic.com A IN 7200 211.99.204.77
Primary DNS server: ns1.cnolnic.com
Responsible Name: ro...@cnolnic.com
[cnlinfo.net has 1 MX record mail.cnlinfo.net (10)]
http://www.moensted.dk/spam/?addr=61.28.28.10
inetnum: 61.28.0.0 - 61.28.127.255
netname: EASTERNFIBERNET
country: CN
descr: Broadband IP Network based DWDM
ASN: 17490
ASN Name: ETFIBER-AS (Broadhand IP Network based DWDM
http://www.cidr-report.org/cgi-bin/as-report?as=17490
2 SBL/ROKSO listings for IPs under the responsibility of etfiber.net
http://www.spamhaus.org/sbl/listings.lasso?isp=etfiber.net
Let see whois:
Registrant:
yuanshao, cheng
shenzhen
shenzhen, Guangdong 518000
CN
Domain Name: CNLINFO.NET
Administrative Contact, Technical Contact:
yuanshao, cheng szpa...@163.net
shenzhen
shenzhen, Guangdong 518000
CN
0755-82959607 fax: 0755-82953197
Record expires on 24-Apr-2008.
Record created on 24-Apr-2003.
Database last updated on 8-Apr-2006 05:02:49 EDT.
Domain servers in listed order:
NS1.CNOLNIC.COM 211.99.204.77
NS2.CNOLNIC.COM 211.152.51.15
More cnlinfo.net sightings:
http://groups.google.com/groups/search?q=cnlinfo.net+group%3A*abuse&start=0&scoring=d&
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: