Open Proxy - 1144830933 (Wed Apr 12 10:35:33 2006)
http://njabl.org/cgi-bin/lookup.cgi?query=61.17.22.81
Spamvert:
ata.867oem.com IP 218.188.204.37
(SBL49748 - ROK6138 Polyakov) (NOW at bbdns1.on-nets.com / hgc.com.hk)
See Much More the same spammer sightings:
http://groups.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: [MUNGED] via 216.252.100.180; Wed, 10 Jan 2007
10:49:39 -0800
X-YahooFilteredBulk: 61.17.22.81
X-Originating-IP: [61.17.22.81]
Return-Path: <kenskissimm...@jamespitts.com>
Authentication-Results: mta501.mail.mud.yahoo.com from=jamespitts.com;
domainkeys=neutral (no sig)
Received: from 61.17.22.81 (HELO localhost) (61.17.22.81) by
mta501.mail.mud.yahoo.com with SMTP; Wed, 10 Jan 2007 10:49:39 -0800
Message-ID: <000001c734e7$b315f980$0100007f@localhost>
From: "Caden Hayes" <kenskissimm...@jamespitts.com>
To: [MUNGED]
Subject: Three Steps to the Software You Need at the Prices You Want
Date: Thu, 11 Jan 2007 00:19:55 +0500
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3210
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.200
Content-Length: 748
Christmas discounts! Special New Year offers!
TOP 1O ITEMS!
$79 Microsoft Windows Vista Ultimate
$79 MS Office Enterprise 2007
$79 Adobe Acrobat 8 Pro
$49 Windows XP Pro w/SP2
$99 Macromedia Studio 8
$59 Adobe Premiere 2.0
$59 Corel Grafix Suite X3
$59 Adobe Illustrator CS2
$129 Autodesk Autocad 2007
$149 Adobe Creative Suite 2
http://ata.867oem.com/?488F6C08B3C9FBDD5A4B40E282391434538D&t0
Mac Specials:
Adobe Acrobat PR0 7 $69
Adobe After Effects $49
Adobe Creative Suite 2 Premium $149
Ableton Live 5.0.1 $49
Adobe Photoshop CS $49
http://ata.867oem.com/-software-for-mac-.php?488F6C08B3C9FBDD5A4B40E282391434538D&t6
See more by this manufacturers:
Microsoft....Mac....Adobe....Borland....Macromedia
http://ata.867oem.com/?488F6C08B3C9FBDD5A4B40E282391434538D&t4
Microsoft Windows Vista Ultimate
Retail price: $399.00
Proposition: $79.95
Your benefit: $319.05 (80%)
Availability: Can be downloaded INSTANTLY.
http://ata.867oem.com/2480.php?488F6C08B3C9FBDD5A4B40E282391434538D&t3
Best choice for home and professional. (46862 reviews)
Microsoft Office 2007 Enterprise Edition
Regular price: $899.00
Our offer: $79.95
You save: $819.95 (89%)
Availability: Pay and download instantly.
http://ata.867oem.com/2442.php?488F6C08B3C9FBDD5A4B40E282391434538D&t1
Sales Rank: #1 (101912 reviews)
Adobe Acrobat 8.0 Professional
Market price: $449.00
We propose: $79.95
Your profit: $369.05 (80%)
Availability: Available for INSTANT download.
http://ata.867oem.com/2441.php?488F6C08B3C9FBDD5A4B40E282391434538D&t2
Top-ranked item. (25739 reviews)
-- END OF SPAM --
See also more spammer OEM Software sightings:
http://groups.google.com/groups/search?q=%22OEM+Software%22+group%3A*abuse&start=0&scoring=d&
See:
IP 61.17.22.81 61.17.22-81.ekm-dsl-dynamic.vsnl.net.in
http://www.moensted.dk/spam/?addr=61.17.22.81
http://cbl.abuseat.org/lookup.cgi?ip=61.17.22.81
http://www.spamhaus.org/query/bl?ip=61.17.22.81
http://dsbl.org/listing?61.17.22.81
More vsnl.net.in sightings:
http://groups.google.com/groups/search?q=vsnl.net.in+group%3A*abuse&start=0&scoring=d&
inetnum: 61.17.0.0 - 61.17.255.255
netname: VSNL-IN
descr: Videsh Sanchar Nigam Ltd
person: VSNL Tech
nic-hdl: VT43-AP
e-mail: ip....@vsnl.co.in
changed: kapilku...@vsnl.co.in 20040312
mnt-by: MAINT-VSNL-AP
postmaster and abuse[]vsnl.net.in are listed in rfc-ignorant.org
database
route: 61.17.0.0/17
descr: DISHNET Route Object
origin: AS10199
mnt-by: VSNL-MAINT-MCI
changed: gps...@giasbm01.vsnl.net.in
ASN: 4755
ASN Name: VSNL-AS (Videsh Sanchar Nigam Ltd. Autonomous System)
Country (per IP registrar): IN [India]
Country IP Range: 61.17.0.0 to 61.17.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4755
7 SBL/ROKSO listings for IPs under the responsibility of vsnl.net.in
http://www.spamhaus.org/sbl/listings.lasso?isp=vsnl.net.in
See:
ata.867oem.com IP 218.188.204.37
ns1.srul5.com [218.188.204.37] [TTL=172800] [HK]
ns2.srul5.com [121.31.56.28] [TTL=172800] [CN]
ns1.867oem.com A IN 3600 218.188.204.37
ns2.867oem.com A IN 3600 121.31.56.28
ata.867oem.com has no MX records -> 867oem.com has no MX records
SOA record [TTL=2560] is:
Primary nameserver: ns1.867oem.com
Hostmaster E-mail address: hostm...@867oem.com
Serial #: 1168449179
http://www.moensted.dk/spam/?addr=218.188.204.37
NO PTR stuck in a loop at bbdns1.on-nets.com / hgc.com.hk
inetnum: 218.188.0.0 - 218.189.255.255
netname: HGC
descr: Hutchison Global Communications
e-mail: hgcne...@hgc.com.hk
remarks: Send spam reports to ab...@on-nets.com => ???
abuse[]on-nets.com is listed in rfc-ignorant.org database
abuse[]hgc.com.hk is listed in rfc-ignorant.org database
postmaster and abuse[]hutchcity.com are listed in rfc-ignorant.org
database
route: 218.188.128.0/17
descr: HGC RBS
origin: AS9304
mnt-by: MAINT-AS9304
changed: ra...@hutchcity.com
ASN: 9304
ASN Name: HUTCHISON-AS-AP (Hutchison Global Communications)
Country (per IP registrar): HK [Hong Kong]
Country IP Range: 218.188.0.0 to 218.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9304
2 SBL listings for IPs under the responsibility of hanaro.com
http://www.spamhaus.org/sbl/listings.lasso?isp=hanaro.com
37 SBL/ROKSO listings for IPs under the responsibility of hgc.com.hk
http://www.spamhaus.org/SBL/listings.lasso?isp=hgc.com.hk
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Constant spammer support by PacNames sightings:
http://groups.google.com/groups/search?q=PacNames+group%3A*abuse&start=0&scoring=d&
Registrant hiding behind PacNames => shieldedwhois.com
Domain name: 867OEM.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: (Private Contact)
(pws.e4c2db28804cd29[]shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Administrative, Technical Contact: (Private Contact)
(pws.e4c2d...@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Name Server: NS1.SRUL5.COM
Name Server: NS2.SRUL5.COM
Domain creaton date: 2007-01-02 00:50:39.0
Domain expiration date: 2008-01-02 06:05:15.0
More 867oem.com sightings:
http://groups.google.com/groups/search?q=867oem.com+group%3A*abuse&start=0&scoring=d&
See also more srul5.com sightings:
http://groups.google.com/groups/search?q=srul5.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/4202de8f3b06846a
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: