[email] [software piracy] [82.201.245.85] (5551oem.com / srul5.com - PacNames) Need S0ftware?
TomezNet
IP 82.201.245.85
(at link.net)
Spamvert:
5551oem.com IP 203.186.128.18
(SBL49519 - ROK6138 Polyakov) (at ctinets.com / ns1o.ctihk.com)
See Much More the same spammer sightings:
http://groups.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: [MUNGED] via 216.252.100.169; Fri, 05 Jan 2007
08:59:47 -0800
X-YahooFilteredBulk: 82.201.245.85
X-Originating-IP: [82.201.245.85]
Return-Path: <automet...@langstonhughespoetry.com>
Authentication-Results: mta183.mail.re4.yahoo.com
from=langstonhughespoetry.com; domainkeys=neutral (no sig)
Received: from 82.201.245.85 (HELO localhost) (82.201.245.85) by
mta183.mail.re4.yahoo.com with SMTP; Fri, 05 Jan 2007 08:59:47 -0800
Message-ID: <000001c730ea$c04b7680$0100007f@localhost>
From: "Joshua Parker" <automet...@langstonhughespoetry.com>
To: [MUNGED]
Subject: Need S0ftware?
Date: Fri, 04 Jan 2013 06:57:54 +0200
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3160
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.200
Content-Length: 652
Christmas discounts! Special New Year offers!
T0P 1O ITEMS N0W!
$79 Microsoft Windows Vista Ultimate
$79 MS Office Enterprise 2007
$79 Adobe Acrobat 8 Pro
$49 Windows XP Pro w/SP2
$99 Macromedia Studio 8
$59 Adobe Premiere 2.0
$59 Corel Grafix Suite X3
$59 Adobe Illustrator CS2
$129 Autodesk Autocad 2007
$149 Adobe Creative Suite 2
http://5551oem.com/?488F6C08B3C9FBDD5A4B40E282391434538D&t0
See more by this manufacturers:
Microsoft....Mac....Adobe....Borland....Macromedia
http://5551oem.com/?488F6C08B3C9FBDD5A4B40E282391434538D&t4
Microsoft Windows Vista Ultimate
Retail price: $399.00
Proposition: $79.95
Your benefit: $319.05 (80%)
Availability: Can be downloaded INSTANTLY.
http://5551oem.com/2480.php?488F6C08B3C9FBDD5A4B40E282391434538D&t3
Best choice for home and professional. (46862 reviews)
Microsoft Office 2007 Enterprise Edition
Regular price: $899.00
Our offer: $79.95
You save: $819.95 (89%)
Availability: Pay and download instantly.
http://5551oem.com/2442.php?488F6C08B3C9FBDD5A4B40E282391434538D&t1
Sales Rank: #1 (101912 reviews)
Adobe Acrobat 8.0 Professional
Market price: $449.00
We propose: $79.95
Your profit: $369.05 (80%)
Availability: Available for INSTANT download.
http://5551oem.com/2441.php?488F6C08B3C9FBDD5A4B40E282391434538D&t2
Top-ranked item. (25739 reviews)
-- END OF SPAM --
See also more spammer OEM Software sightings:
http://groups.google.com/groups/search?q=%22OEM+Software%22+group%3A*abuse&start=0&scoring=d&
See:
IP 82.201.245.85
http://www.moensted.dk/spam/?addr=82.201.245.85
http://cbl.abuseat.org/lookup.cgi?ip=82.201.245.85
http://www.spamhaus.org/query/bl?ip=82.201.245.85
More link.net sightings:
http://groups.google.com/groups/search?q=link.net+group%3A*abuse&start=0&scoring=d&
inetnum: 82.201.128.0 - 82.201.255.255
org: ORG-AFNC1-RIPE
netname: AFRINIC-NET-TRANSFERRED-20050223
inetnum: 82.201.224.0 - 82.201.255.255
netname: INTOUCH
descr: Intouch-DSL
e-mail: ezzat....@link.net
nic-hdl: eM1587-AFRINIC
route: 82.201.244.0/23
descr: LINKdotNET route
origin: AS24863
mnt-by: MAINT-LINK
changed: mha...@link.net
ASN: 24863
ASN Name: LINKdotNET-AS (LINKdotNET AS number)
Country (per IP registrar): EG [Egypt]
Country IP Range: 82.201.128.0 to 82.201.255.255
Country fraud profile: High
http://www.cidr-report.org/cgi-bin/as-report?as=24863
2 SBL listings for IPs under the responsibility of link.net
http://www.spamhaus.org/sbl/listings.lasso?isp=link.net
See:
5551oem.com IP 203.186.128.18
ns1.srul5.com [203.186.128.18] [TTL=172800] [HK] (OLS IP
222.122.180.189)
ns2.srul5.com [121.31.56.28] [TTL=172800] [CN]
NS records at your nameservers are:
ns1.5551oem.com [203.186.128.18] [TTL=3600]
ns2.5551oem.com [121.31.56.28] [TTL=3600]
5551oem.com has no MX records
SOA record [TTL=2560] is:
Primary nameserver: ns1.5551oem.com
Hostmaster E-mail address: hostm...@5551oem.com
Serial #: 1168034822
http://www.moensted.dk/spam/?addr=203.186.128.18
http://www.spamhaus.org/query/bl?ip=203.186.128.18
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL49748
203.186.128.18/32 is listed on the Spamhaus Block List (SBL)
04-Jan-2007 09:33 GMT | SR02
11 SBL/ROKSO listings for IPs under the responsibility of ctihk.com
http://www.spamhaus.org/sbl/listings.lasso?isp=ctihk.com
More 203.186.128.18 sightings:
http://groups.google.com/groups/search?q=
203.186.128.18+group%3A*abuse&start=0&scoring=d&
203.186.128.18 PTR record: 203186128018.ctinets.com
inetnum: 203.186.128.16 - 203.186.128.31
netname: HK82COM
country: HK
descr: HK82.com - Tsuen Wan
admin-c: CH134-AP
tech-c: SL113-AP
status: ASSIGNED NON-PORTABLE
changed: ken...@ctihk.com 20031028
mnt-by: MAINT-HK-CTI
source: APNIC
person: CTINETS HOSTMASTER
person: Sam Leung
nic-hdl: SL113-AP
e-mail: fio...@ctihk.com
changed: hostm...@ctihk.com 20040707
mnt-by: MAINT-HK-CTI
route: 203.186.128.0/24
descr: 9/F Tower I, Grand Century Place
193 Prince Edward Road West, Mongkok
HK
origin: AS9269
mnt-by: MAINT-AS9269
changed: saml...@ctihk.com
ASN: 9269
ASN Name: CTIHK-AS-AP (City Telecom (H.K.) Ltd.)
Country (per IP registrar): HK [Hong Kong]
Country IP Range: 203.186.0.0 to 203.186.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9269
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Constant spammer support by PacNames sightings:
http://groups.google.com/groups/search?q=PacNames+group%3A*abuse&start=0&scoring=d&
Registrant hiding behind PacNames => shieldedwhois.com
Domain Registrant: (Private Contact)
(pws.a4148...@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Administrative, Technical Contact: (Private Contact)
(pws.a4148...@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Name Server: NS1.SRUL5.COM
Name Server: NS2.SRUL5.COM
Domain creaton date: 2007-01-02 00:52:55.0
Domain expiration date: 2008-01-02 06:07:30.0
More 5551oem.com sightings:
http://groups.google.com/groups/search?q=5551oem.com+group%3A*abuse&start=0&scoring=d&
See also more srul5.com sightings:
http://groups.google.com/groups/search?q=srul5.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/bc16ad5c8e8bfe57
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: