Spamvert:
m8axaz9gacrzn44hr44hrm44.ordinalcg.com IP 58.19.254.157
(ROK4932 - SBL40684 / SBL40685)
software piracy Leo Kuvayev / BadCow spam
be.apiokc.com IP 60.18.162.16
(SBL41052) (at cncgroup-ln)
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.171; Wed, 26 Apr 2006
17:03:31 -0700
X-YahooFilteredBulk: 200.141.137.254
X-Originating-IP: [200.141.137.254]
Return-Path: <la...@delphi.com>
Authentication-Results: mta152.mail.mud.yahoo.com from=delphi.com;
domainkeys=neutral (no sig)
Received: from 207.228..... (EHLO xxx.web-hosting.com) (207.228.......)
by mta152.mail.mud.yahoo.com with SMTP; Wed, 26 Apr 2006 17:03:31 -0700
Received: from -1209831280 (2001411372..54.user.veloxzone.com.br
[200.141.137.254]) by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id
k3R03E111761 for <xx..xx@xx..xx.com>; Wed, 26 Apr 2006 20:03:21 -0400
(EDT)
Received: from delphi.com (-1208349384 [-1208674848]) by
200141137254.user.veloxzone.com.br (Qmailv1) with ESMTP id D8144A71B3
for <xx..xx@xx..xx.com>; Mon, 01 May 2006 18:41:34 -0500
Date: Mon, 01 May 2006 18:41:34 -0500
From:"Grieving L. Loyaller" <la...@delphi.com>
X-Mailer: The Bat! (v2.00.4) Personal
X-Priority: 3
Message-ID: <4532787013.2...@delphi.com>
To:"Webmaster" <xx..xx@xx..xx.com>
Subject: Software
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-AntiVirus: OK! AntiVir MailGate Version 2.0.1; AVE: 6.15.0.0; VDF:
6.15.0.6
Content-Length: 619
Photoshop, Windows, Office. CHEAP.
What IS 0EM software and why do you care?
New software on our site:
Illustrator CS - $69.95
Plus! XP - $59.95
Painter 8 - $59.95
Studio MX 2004 with Director MX 2004 - $139.95
Photoshop Elements 3.0 Windows - $59.95
Exchange 2003 Enterprise Server - $69.95
Extensis Portfolio 7.0 - $59.95
Windows XP Professional - $69.95
Painter 8 - $59.95
Office 2000 Premium Edition PE (2CD) - $59.95
InDesign CS PageMaker Edition (2CD) - $69.95
Office 97 SR2 - $49.95
Windows 98 - $49.95
Office 2000 Premium Edition PE (2CD) - $59.95
Our site:
http://m8axaz9gacrzn44hr44hrm44.ordinalcg.com/
-- END OF SPAM --
See:
IP 200.141.137.254 200141137254.user.veloxzone.com.br
http://www.moensted.dk/spam/?addr=200.141.137.254
http://cbl.abuseat.org/lookup.cgi?ip=200.141.137.254
http://www.spamhaus.org/query/bl?ip=200.141.137.254
inetnum: 200.141.128/17
aut-num: AS7738
abuse-c: CGR13
owner: Telemar Norte Leste S.A.
ownerid: 002.558.134/0001-58
responsible: Marlemar Telgon
route: 200.141.0.0/16
descr: TELEMAR cidr block
origin: AS7738
mnt-by: MAINT-AS7738
changed: b...@telemar.net.br
http://www.cidr-report.org/cgi-bin/as-report?as=7738
1 SBL listings for IPs under the responsibility of telemar.net.br
http://www.spamhaus.org/sbl/listings.lasso?isp=telemar.net.br
Spamvert
m8axaz9gacrzn44hr44hrm44.ordinalcg.com IP 58.19.254.157
be.apiokc.com A IN 3600 60.18.162.16
bo.apiokc.com A IN 3600 58.19.254.157
m8axaz9gacrzn44hr44hrm44.ordinalcg.com has no MX records ->
ordinalcg.com has no MX records
http://www.moensted.dk/spam/?addr=58.19.254.157
http://www.spamhaus.org/query/bl?ip=58.19.254.157
More 58.19.254.157 sightings:
http://groups.google.com/groups/search?q=58.19.254.157+group%3A%2Aabuse
inetnum: 58.19.0.0 - 58.19.255.255
netname: CNCGROUP-HB
descr: CNCGROUP HuBei Province Network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
ASN: 9929
ASN Name: CNCNET-CN (China Netcom Corp.)
http://www.cidr-report.org/cgi-bin/as-report?as=9929
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40684
58.19.254.157/32 is listed on the Spamhaus Block List (SBL/ROKSO)
21-Apr-2006 08:09 GMT | SR02
Leo Kuvayev / BadCow
ns2.cantonec.com
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40685
58.19.254.156/31 is listed on the Spamhaus Block List (SBL)
28-Apr-2006 23:59 GMT | SR02
BESTDNSSERVICES.COM ; ns1.nettlerfl.com ; etc
4 SBL/ROKSO listings for IPs under the responsibility of cncgroup-hb
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hb
Let see whois:
Registrar: ONLINE SAS
Domain Name : ordinalcg.com (ORDINA2-BMN-DOM)
Registrar : BookMyName
Registrant / Admin Contact :
PERSON
Sople NATOR (NATOR2-BMN-PE)
Seealand str. 7
44265 Stimerton
UNITED STATES
phone : (49)7032926
fax :
e-mail : soplenator[]yahoo.com
Billing Contact :
PERSON
Sople NATOR (NATOR2-BMN-PE)
Seealand str. 7
44265 Stimerton
UNITED STATES
phone : (49)7032926
fax :
e-mail : sople...@yahoo.com
Technical Contact :
PERSON
Sople NATOR (NATOR2-BMN-PE)
Seealand str. 7
44265 Stimerton
UNITED STATES
phone : (49)7032926
fax :
e-mail : sople...@yahoo.com
Domain servers :
bo.apiokc.com (BAC3-BMN-HST)
be.apiokc.com (BAC4-BMN-HST)
Created on 04/26/2006 15:24:32
Updated on 04/26/2006 16:30:53
Expires on 04/26/2007 11:24:32
More ordinalcg.com sightings:
http://groups.google.com/groups/search?q=ordinalcg.com+group%3A%2Aabuse
See:
be.apiokc.com IP 60.18.162.16
http://www.moensted.dk/spam/?addr=60.18.162.16
http://www.spamhaus.org/query/bl?ip=60.18.162.16
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41052
60.18.162.0/24 is listed on the Spamhaus Block List (SBL)
28-Apr-2006 11:40 GMT | SR04
Dirty block
5 SBL/ROKSO listings for IPs under the responsibility of cncgroup-ln
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hb
Registrar: TUCOWS INC.
Registrant:
Animal Care Agency
Verona Street #23
Krakow, PL 29911
PL
Domain name: APIOKC.COM
Administrative Contact:
Strobber, Bob HURSHR...@yahoo.com
Verona Street #23
Krakow, PL 29911
PL
+48.223895469
Technical Contact:
Fenison, Elden el...@cybcon.com
30240 SW Parkway #10
Wilsonville, OR 97070
US
+1.5032484449 Fax: +1.5036827701
Registration Service Provider:
CyberConnectics, sup...@cybcon.com
503-248-4449
503-682-7701 (fax)
http://www.cyberconnectics.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: TUCOWS, INC.
Record last updated on 28-Apr-2006.
Record expires on 25-Apr-2007.
Record created on 25-Apr-2006.
Domain servers in listed order:
BO.APIOKC.COM 58.19.254.157
BE.APIOKC.COM 60.18.162.16
Domain status: ACTIVE
More 60.18.162.16 sightings:
http://groups.google.com/groups/search?q=60.18.162.16+group%3A%2Aabuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/a0b9f64bf42c04a9
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: