[email] [software piracy] [201.158.71.36] (maglan-oem.com / srul5.com - PacNames) Microsoft 0ffice 2OO7 & Adobe Acrobat 8 Pro 79$ at Rees's amazingsoft
TomezNet
IP 201.158.71.36
(at C.NS.MX / CABLEXTREMO.COM.MX / LACNIC)
Spamvert:
rp.maglan-oem.com IP 222.122.180.189
(SBL49519 - ROK6138 Polyakov) (at rev2.kornet.net)
See Much More the same spammer sightings:
http://groups.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: [MUNGED] via 216.252.100.171; Wed, 03 Jan 2007
16:44:08 -0800
X-YahooFilteredBulk: 201.158.71.36
X-Originating-IP: [201.158.71.36]
Return-Path: <ch...@webcolos.com>
Authentication-Results: mta136.mail.re3.yahoo.com from=;
domainkeys=neutral (no sig)
Received: from 201.158.71.36 (HELO localhost) (201.158.71.36) by
mta136.mail.re3.yahoo.com with SMTP; Wed, 03 Jan 2007 16:44:08 -0800
Message-ID: <000001c72f98$823e3d80$0100007f@localhost>
From: "Moe Todd" <ch...@webcolos.com>
To: [MUNGED]
Subject: Microsoft 0ffice 2OO7 & Adobe Acrobat 8 Pro 79$ at Rees's
amazingsoft
Date: Wed, 03 Jan 2007 18:43:45 -0600
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: MICR0S0FT Outlook, Build 10.0.3416
Importance: Normal
X-MimeOLE: Produced By MICR0S0FT MimeOLE V6.00.2800.150
Content-Length: 2668
All Titles 0n Sale for Holidays.
Microsoft 0ffice 2OO7 79$
Adobe Acrobat 8 PR0 79$
Windows XP PR0 +SP2 49$
Adobe Premiere 2.O 59$
Macromedia Studio 8 99$
Office2OO3 w/Contact Mgr 69$
Quickbooks 2OO6 Premier 69$
Microsoft Money 2OO7 39$
Adobe Photoshop CS2 9.O 69$
Autodesk Autocad 2OO7 129$
Corel Grafix Suite X3 59$
Adobe Creative Suite CS2 149$
Adobe Illustrator CS2 59$
Microsoft Office XP PR0 49$
Macromedia Dreamweaver 8 49$
McAfee Internet Sec. 7 29$
Norton Antivirus Corp. 29$
Mac Specials:
Adobe Acrobat PR0 7 69$
Adobe After Effects 49$
Adobe Creative Suite 2 Premium 149$
Ableton Live 5.0.1 49$
Adobe Photoshop CS 49$
http://rp.maglan-oem.com/-software-for-mac-.php
Also see our new eB00KS:
Windows XP for Dummies
Photoshop in a Snap
Linux for dummies
All for $11 and fast-download.
See more titles: Microsoft-Mac soft-Adobe
-=New Releases=-
Microsoft 0ffice 2OO7 Enterprise
Normal Price: $899.00
0ur 0ffer: $79.95
U-save: $819.95 (89%)
Availability: Pay-and-download instantly.
http://rp.maglan-oem.com/2442.php
SalesRank: #1
Average Customer Review: *****
(based on 37261 reviews)
Adobe Acrobat 8.O PR0
Normal Price: $449.00
0ur 0ffer: $79.95
U-save: $369.05 (80%)
Availability: Available for INSTANT-download.
http://rp.maglan-oem.com/2441.php
Top-ten-ranked item.
Average Customer Review: *****
(based on 76127 reviews)
Macromedia Studio 8
Normal Price: $999.00
0ur 0ffer: $99.95
U-save: $899.05 (90%)
Availability: Can be downloaded-INSTANTLY.
http://rp.maglan-oem.com/2348.php
Best choice for professional.
Average Customer Review: *****
(based on 43025 reviews)
root:*:0:0:Charlie &:/root:/bin/sh
partition of the floppy read-write ("mount -u -o rw /mnt"). Use your
give you complete guidance.
the disk and partition where the root filesystem and kernel can
tools/rawrite.exe>, then run it:
Bit 5 Reserved, always 0.
allow from the inside. Some general rules are:
written, March 1996, was $45.00. It can be ordered directly from
or members of a group, may allocate on a per-file system basis. This
If you have a ftp-URL pointing at the the original tarball, record the
filter for ditroff files to convert the ditroff data into a form
inet x.x.x.x --> y.y.y.y netmask 0xffffffff
#
The protocols which can be specified are:
holding register, shift registers or
cable with appropriate connectors (DB-25 or DB-9, male or female) on
for inclusion in next release of the code. This will only make your
pid=`ps ax |grep kermit |grep -v grep|awk '{print $1;}'`
grunt$ kinit jane
The first keyword is machine, which, since FreeBSD only runs on
(this is after transferring a bunch of files, your numbers should be
10.3.2. * Sound cards
savecore -N /kernel.panicked /var/crash
the `keyinit' program) which it uses to generate one-time passwords;
exception handling? And if not, why not?'').
Native capacity is 2.3GB.
Lastly, you need to modify each of the shell scripts that Mathematica
it then you should add the line, re-compile and then re-install the
to acquire these.
to any internal UDP port through the firewall. ntp is another
M indicates the minor number of the master port (the last port on a
passwords having overheard one which was successfully used; the
kermit -y /etc/ppp/kermit.dial
rattan|line|diablo|lp|Diablo 630 Line Printer:
device zp0 at isa? port 0x300 net irq 10 iomem 0xd8000 vector
rate seen by the sending and receiving DTE equipment. For example, if
choice of exchanging tapes. Nearly every site has an exabyte 2 GB 8mm
PostScript is the de facto standard for high quality typesetting and
you look at existing examples before starting. Consider the following
print the result.
accounting, if you need printer accounting.
The y is more interesting. It can either be a blank, a "A-8" or a
<principal>.<instance> of the form <username>.root will allow that
provide the accounting code. But there is a bright side: you have
Appendices
operating systems will still report that the UART is only a 8250A or
text remaining in its internal buffer. It is also useful to
your machine to dial out. My sendmail line looks like
engineered the part or produced emulations that had similar behavior.
information.
lrwxr-xr-x 1 bin bin 15 Sep 5 12:50 libcrypt_p.a -> libdescrypt_p.a
message back to the source.
set parity none
Makefile, and not putting the distfile up for ftp. However, for most
4. Ensure that your NFS server has exported the root (and swap if
from the current boot.
stage to automatically do an xmkmf -a. If the `-a' flag is a problem
2. Edit the file /etc/remote. Add the following entry:
o Request to Send (RTS)
peripheral and its associated hardware is responsible for generating
disk space has fallen below the amount specified in the minfree
disk cannot be greater than 1024. Using the translation above, this is
-- END OF SPAM --
See also more spammer OEM Software sightings:
http://groups.google.com/groups/search?q=%22OEM+Software%22+group%3A*abuse&start=0&scoring=d&
See:
IP 201.158.71.36
http://www.moensted.dk/spam/?addr=201.158.71.36
http://cbl.abuseat.org/lookup.cgi?ip=201.158.71.36
http://www.spamhaus.org/query/bl?ip=201.158.71.36
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL49070
201.158.70.0/23 is listed on the Spamhaus Block List (SBL)
13-Dec-2006 06:19 GMT | SR04
Dirty block - spam flow from every IP address
1 SBL listings for IPs under the responsibility of cablextremo.com.mx
http://www.spamhaus.org/sbl/listings.lasso?isp=cablextremo.com.mx
More cablextremo.com.mx sightings:
http://groups.google.com/groups/search?q=cablextremo.com.mx+group%3A*abuse&start=0&scoring=d&
inetnum: 201.158.64/21
status: reallocated
owner: CABLEVISION DE SALTILLO SA DE CV
ownerid: MX-CSSC9-LACNIC
responsible: Comunicaciones Cablevision de Saltillo
nic-hdl: IJL
person: Ing. Javier Padilla Lugo
e-mail: ip.c...@CABLEXTREMO.COM.MX
ASN: 28518
Prefix: 201.158.64.0/21
ASN Name: IANA-RSVD-0
Country (per IP registrar): MX [Mexico]
Country IP Range: 201.128.0.0 to 201.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=28518
5 SBL/ROKSO listings for IPs under the responsibility of LACNIC
http://www.spamhaus.org/sbl/listings.lasso?isp=LACNIC
See:
rp.maglan-oem.com IP 222.122.180.189
ns1.maglan-oem.com A IN 3600 222.122.180.189
ns2.maglan-oem.com A IN 3600 121.31.56.28
ns1.srul5.com [222.122.180.189] [TTL=172800] [KR]
ns2.srul5.com [121.31.56.28] [TTL=172800] [CN]
rp.maglan-oem.com has no MX records -> maglan-oem.com has no MX records
SOA record [TTL=2560] is:
Primary nameserver: ns1.maglan-oem.com
Hostmaster E-mail address: hostm...@maglan-oem.com
Serial #: 1167769119
http://www.moensted.dk/spam/?addr=222.122.180.189
http://www.spambag.org/cgi-bin/spambag?mailfrom=kornet
Escalated Listing (Spam or Spam Support) See:
http://www.sorbs.net/lookup.shtml?222.122.180.189
http://korea.services.net/blocked.phtml?addr=222.122.180.189
http://www.spamhaus.org/query/bl?ip=222.122.180.189
No PTR records exist for 222.122.180.189 at rev2.kornet.net
More 222.122.180.189 sightings:
http://groups.google.com/groups/search?q=222.122.180.189+group%3A*abuse&start=0&scoring=d&
Org Name : Korea Telecom
Service Name : KORNET
Name : IP Administrator
Phone : +82-2-3674-5708
E-Mail : i...@krnic.kornet.net
Name : Network Abuse
Phone : +82-2-100-0000
E-mail : ab...@kornet.net => ???!!!
SEE So Much More kornet sightings (over 48,700):
http://groups.google.com/groups/search?q=kornet+group%3A*abuse&start=0&scoring=d&
route: 222.122.0.0/16
descr: Korea Telecom, Seoul, Korea
origin: AS4766
mnt-by: MAINT-AS4766
changed: chs...@soback.kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country (per IP registrar): KR [Korea-KR]
Country IP Range: 222.122.0.0 to 222.122.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL49519
222.122.180.189/32 is listed on the Spamhaus Block List (SBL/ROKSO)
03-Jan-2007 16:27 GMT | SR04
Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov.
Multiple spammer domains (hacked Fedora server?)
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK6138
23 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Constant spammer suppoert by PacNames sightings:
http://groups.google.com/groups/search?q=PacNames+group%3A*abuse&start=0&scoring=d&
Domain name: KUNIL-OEM.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Registrant hiding behind PacNames => shieldedwhois.com
Domain Registrant: (Private Contact)
(pws.bd1c4...@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Administrative, Technical Contact: (Private Contact)
(pws.bd1c4...@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Name Server: NS1.SRUL5.COM
Name Server: NS2.SRUL5.COM
Domain creaton date: 2007-01-02 01:02:21.0
Domain expiration date: 2008-01-02 06:17:10.0
More maglan-oem.com sightings:
http://groups.google.com/groups/search?q=maglan-oem.com+group%3A*abuse&start=0&scoring=d&
See also more srul5.com sightings:
http://groups.google.com/groups/search?q=srul5.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/5f58375a6af81f18
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: