Spamvert:
divyatimes.info IP 216.40.47.17
(at dns1.tucows.com / redirect.managednsservice.com)
See OLD => SBL44852 / SBL45242
www.hotworldwide.net IP 124.42.8.149
(at ns1.superready.net / dns.sinnet.com.cn / asianetcom.com)
Tucows.com ignores any SPAM complaints for months!
SEE Also More Tucows aka Fuckcows spam support sightings:
http://groups.google.com/groups/search?q=Tucows+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Wade Lauryn <Ne...@nzloos.com>
X-Message-Info: txF49lGdW43NpYgF4aeAtgL1GJB5mMIhGByYdEcMy2c=
Received: from tomts19-srv.bellnexxia.net ([209.226.175.73]) by bay0-
pamc1-f3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sun, 4 Feb 2007 17:40:28 -0800
Received: from [MUNGED]
by toip19.srvr.bell.ca with ESMTP; 04 Feb 2007 20:40:24 -0500
Received: (qmail 13434 invoked by uid 110); 4 Feb 2007 20:40:22 -0500
Delivered-To: 13-[MUNGED]
Received: (qmail 13421 invoked from network); 4 Feb 2007 20:40:22
-0500
Received: from abpf131.neoplus.adsl.tpnet.pl (HELO komp) (83.8.47.131)
by [MUNGED] with SMTP; 4 Feb 2007 20:40:22 -0500
Message-ID: <10e401c748c6$147965a0$832f0853@komp>
From: "Wade Lauryn" <Ne...@nzloos.com>
To: "Viart Catherine" <[MUNGED]>
Subject: Pete Doherty may get own reality show
Date: Mon, 05 Feb 2007 01:38:59 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: Ne...@nzloos.com
X-OriginalArrivalTime: 05 Feb 2007 01:40:28.0775 (UTC)
FILETIME=[9D934F70:01C748C6]
Hello,
Now you can order Genuine Viagra directly from Pfizer.
Here: http://divyatimes.info
All prices are tax/vat free and free same-day worldwide shipping also
included.
--
[MUNGED]
-- END OF SPAM --
See:
IP 83.8.47.131 abpf131.neoplus.adsl.tpnet.pl
http://www.moensted.dk/spam/?addr=83.8.47.131
http://spamcop.net/w3m?action=checkblock&ip=83.8.47.131
http://www.apews.org/?page=test&C=1200&ip=83.8.47.131
http://www.spamhaus.org/query/bl?ip=83.8.47.131
http://www.spamhaus.org/pbl/query/PBL042479
inetnum: 83.8.0.0 - 83.8.63.255
netname: NEOSTRADA-ADSL
descr: Neostrada Plus
descr: Wroclaw
mnt-by: TPNET
changed: hostm...@tpnet.pl
changed: hostm...@telekomunikacja.pl
remarks: DNS problems -> d...@telekomunikacja.pl
remarks: Routing problems -> regi...@tpnet.pl
postmaster and abuse[]telekomunikacja.pl are listed in rfc-
ignorant.org database
route: 83.8.0.0/13
descr: TPNET
mnt-by: AS5617-MNT
source: RIPE
changed: pawel.k...@telekomunikacja.pl
ASN: 5617
ASN Name: TPNET (Polish Telecom's commercial IP network)
Country (per IP registrar): PL [Poland]
Country IP Range: 83.0.0.0 to 83.31.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=5617
24 SBL/ROKSO listings for IPs under the responsibility of tpnet.pl
http://www.spamhaus.org/sbl/listings.lasso?isp=tpnet.pl
Spamvert URL:
http://divyatimes.info
<html>
<framesetframespacing="0"rows="100%,*"cols="100%"frameborder="no"border="0">
<framename="XYZZY2"scrolling="auto"src="http://
www.hotworldwide.net"noresize>
<framename="XYZZY"scrolling="no"noresize>
<noframes>
<h1><ahref="http://www.hotworldwide.net">http://www.hotworldwide.net</
a></h1>
<p>Please<ahref="http://www.hotworldwide.net">clickhere</
a>toviewthenon-framedversion.</p>
</noframes>
</frameset>
</html>
See:
divyatimes.info IP 216.40.47.17
dns2.registerfly.com [64.97.159.10 (NO GLUE; CNAME encountered-
>ns2.mdnsservice.com.)] [CA]
dns1.registerfly.com [216.40.47.18 (NO GLUE; CNAME encountered-
>ns1.mdnsservice.com.)] [CA]
NS records at nameservers are:
ns1.mdnsservice.com [216.40.47.18]
ns3.mdnsservice.com [65.22.7.10]
ns2.mdnsservice.com [64.97.159.10]
SOA record [TTL=300] is:
Primary nameserver: ns1.mdnsservice.com
Hostmaster E-mail address: hostm...@mdnsservice.com
Serial #: 821499330
divyatimes.info has no MX records
http://www.moensted.dk/spam/?addr=216.40.47.17
Spam Received Recently See: http://www.sorbs.net/lookup.shtml?
216.40.47.17
216.40.47.17 PTR record: redirect.managednsservice.com
at dns1.tucows.com
So Much More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&
See OLD => SBL44852 / SBL45242
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Assignment
RNOCEmail: dnsa...@tucows.com
RTechEmail: dns...@tucows.com
route: 216.40.32.0/20
descr: Tucows International
origin: AS15348
mnt-by: MAINT-AS15348
changed: ddiac...@tucows.com
ASN: 19152
ASN Name: IBMCCH-TOR
Country (per IP registrar): CA [Canada]
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
1 SBL listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
Let see whois.afilias.info:
Domain ID: D16270397-LRMS
Domain Name: DIVYATIMES.INFO
Created On: 28-Jan-2007 14:14:33 UTC
Last Updated On: 28-Jan-2007 14:14:34 UTC
Expiration Date: 28-Jan-2008 14:14:33 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status: CLIENT TRANSFER PROHIBITED
Status: CLIENT UPDATE PROHIBITED
Status: TRANSFER PROHIBITED
Registrant ID: tus20Y2IfnM1VHH3
Registrant Name: Peter Kurelja
Registrant Organization: Kurelja
Registrant Street1: PO Box 239
Registrant Street2:
Registrant Street3:
Registrant City: West Milton
Registrant State/Province: PA
Registrant Postal Code: 17844
Registrant Country: US
Registrant Phone: +1.5704126667
Registrant Phone Ext.:
Registrant FAX: +1.5704126667
Registrant FAX Ext.:
Registrant Email: heartwoodpjk[]dejazzd.com
Admin ID:tus20Y2IfnM1VHH3
Admin Name:Peter Kurelja
Admin Organization:Kurelja
Admin Street1:PO Box 239
Admin Street2:
Admin Street3:
Admin City:West Milton
Admin State/Province:PA
Admin Postal Code:17844
Admin Country:US
Admin Phone:+1.5704126667
Admin Phone Ext.:
Admin FAX:+1.5704126667
Admin FAX Ext.:
Admin Email: heartw...@dejazzd.com
Billing ID:tus20Y2IfnM1VHH3
Billing Name:Peter Kurelja
Billing Organization:Kurelja
Billing Street1:PO Box 239
Billing Street2:
Billing Street3:
Billing City:West Milton
Billing State/Province:PA
Billing Postal Code:17844
Billing Country:US
Billing Phone:+1.5704126667
Billing Phone Ext.:
Billing FAX:+1.5704126667
Billing FAX Ext.:
Billing Email: heartw...@dejazzd.com
Tech ID:tus20Y2IfnM1VHH3
Tech Name:Peter Kurelja
Tech Organization:Kurelja
Tech Street1:PO Box 239
Tech Street2:
Tech Street3:
Tech City:West Milton
Tech State/Province:PA
Tech Postal Code:17844
Tech Country:US
Tech Phone:+1.5704126667
Tech Phone Ext.:
Tech FAX:+1.5704126667
Tech FAX Ext.:
Tech Email: heartw...@dejazzd.com
Name Server: DNS1.REGISTERFLY.COM
Name Server: DNS2.REGISTERFLY.COM
See More Registrant email: heartwoodpjk[]dejazzd.com sightings:
http://groups.google.com/groups/search?q=%22heart...@dejazzd.com%22+group%3A*abuse
See:
www.hotworldwide.net IP 124.42.8.149
ns1.superready.net [124.42.8.149] [TTL=172800] [CN]
ns2.superready.net [124.42.8.149] [TTL=172800] [CN]
SOA record [TTL=600] is:
Primary nameserver: ns1.superready.net
Hostmaster E-mail address: email.mail.com
Serial #: 617
1 MX record is:
0 hotworldwide.net [TTL=600] IP=124.42.8.149 [TTL=600] [CN]
www.hotworldwide.net has no MX records -> [hotworldwide.net has 1 MX
record hotworldwide.net (0)]
http://www.moensted.dk/spam/?addr=124.42.8.149
Blocked - see http://www.spambag.org/cgi-bin/spambag?mailfrom=sinnet
No PTR records exist for 124.42.8.149 at dns.sinnet.com.cn
abuse[]sinnet.com.cn is listed in rfc-ignorant.org database
abuse[]asianetcom.com is listed in rfc-ignorant.org database
More 124.42.8.149 sightings:
http://groups.google.com/groups/search?q=124.42.8.149+group%3A*abuse
inetnum: 124.42.0.0 - 124.42.127.255
netname: SINNET
descr: Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr: 2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr: Dong Cheng Dstrict,Beijing
nic-hdl: CH471-AP
e-mail: lic...@sinnet.com.cn
changed: ip...@cnnic.cn
person: Wang Huijun
nic-hdl: WH271-AP
e-mail: che...@sinnet.com.cn
person: Chen hao
nic-hdl: CH471-CN
e-mail: lic...@sinnet.com.cn
route: 124.42.0.0/17
descr: Asia Netcom (proxy-registered route object)
origin: AS23844
remarks: This route object is for a ANC customer route
notify: anc.i...@asianetcom.com
mnt-by: MAINT-AS10026
changed: anc.i...@asianetcom.com
route: 124.42.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: y...@chinaunicom.com.cn
ASN: 23844
ASN Name: BJ-GUANGHUAN-AP (Beijing Guanghuan Xinwang Digital)
Country (per IP registrar): CN [China]
Country IP Range: 124.42.0.0 to 124.42.127.255
http://www.cidr-report.org/cgi-bin/as-report?as=23844
3 SBL listings for IPs under the responsibility of sinnet.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=sinnet.com.cn
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
grattatrola, roberto rob...@recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
postmaster and abuse[]RegisterFly.com are listed in rfc-ignorant.org
database
More hotworldwide.net sightings:
http://groups.google.com/groups?q=hotworldwide.net+group%3A*abuse
See:
ns1.superready.net IP 124.42.8.149
ns1.superready.net has no MX records -> superready.net has no MX
records
http://www.moensted.dk/spam/?addr=124.42.8.149
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
grattatrola
via gramsci 44
alessandria, NA 15100
IT
Domain name: SUPERREADY.NET
Administrative Contact:
grattatrola, roberto roberto[]recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185
Technical Contact:
grattatrola, roberto rob...@recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 02-Feb-2007.
Record expires on 20-Jan-2008.
Record created on 20-Jan-2007.
Domain servers in listed order:
DNS3.REGISTERFLY.COM 204.50.180.55
DNS2.REGISTERFLY.COM 216.40.47.16
DNS1.REGISTERFLY.COM 216.40.47.15
See More Registrant email: roberto[]recordonilne.com sightings:
http://groups.google.com/groups/search?q=%22ro...@recordonilne.com%22+group%3A*abuse
More superready.net sightings:
http://groups.google.com/groups/search?q=superready.net+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/5cc0a27f58d7462e
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: