[email] [drugs - Legal RX] [69.143.15.92] (iisaz.hk - 195.141.152.21 - zafferbod.com - fatbast.com - lebee4ae.com - guardlessrod.com) Of milton and sidney were.
TomezNet
IP 69.143.15.92 c-69-143-15-92.hsd1.va.comcast.net
(at dns.inflow.pa.bo.comcast.net / dns.cmc.co.denver.comcast.net)
Spamvert:
iisaz.hk IP 125.79.17.103
(SBL52205 - ROK3095) (at dns.zzptt.fj.cn / chinanet-fj)
See Yambo Pharmacy image hosting:
http://195.141.152.21:8080/legalrx/images/award_bestpharma.gif
IP 195.141.152.21
(SBL50221) (at pchighway.com / ns1.sunrise.ch)
Web:
Copyright 1994-2007 © International Legal RX medications All rights
reserved.
More Yambo Financials Legal RX sightings:
http://groups.google.com/groups/search?q=%22Legal+RX%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Loretta Flowers <gcou...@windemere.com>
X-Message-Info: txF49lGdW42nHUFbk1uxnJvsSyF0veSce5f4JX2TIiU=
Received: from tomts26-srv.bellnexxia.net ([209.226.175.189]) by bay0-
pamc1-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sun, 11 Mar 2007 00:32:54 -0800
Received: from [MUNGED]
by toip17.srvr.bell.ca with ESMTP; 11 Mar 2007 04:32:51 -0400
Received: (qmail 16235 invoked by uid 110); 11 Mar 2007 04:32:50 -0400
Delivered-To: [MUNGED]
Received: (qmail 16232 invoked from network); 11 Mar 2007 04:32:50
-0400
Received: from c-69-143-15-92.hsd1.va.comcast.net (HELO LTMPEFFERNVC-
B.BartonMalow.Com) (69.143.15.92)
by [MUNGED] with SMTP; 11 Mar 2007 04:32:50 -0400
Return-Path: <gcou...@windemere.com>
Received: from 216.129.90.46 (HELO inbound.electric.net)
by [MUNGED] with esmtp (X9R2/8,Z@J <0D4)
id 4/+4O6-ZD27Q9-5)
for [MUNGED]; Sun, 11 Mar 2007 08:32:50 +0300
From: "Loretta Flowers" <gcou...@windemere.com>
To: <[MUNGED]>
Subject: Of milton and sidney were.
Date: Sun, 11 Mar 2007 08:32:50 +0300
Message-ID: <01c763b7$daa2dd20$6c822ecf@gcoulter>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C76396.53913D20"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4963.1700
Thread-Index: Aca6Q0:6T7KC0SQLAT>1805LMV,@PB==
X-OriginalArrivalTime: 11 Mar 2007 08:32:55.0037 (UTC)
FILETIME=[DD8ABAD0:01C763B7]
This is a multi-part message in MIME format.
------=_NextPart_000_0006_01C76396.53913D20
Content-Type: text/plain;
charset="iso-8859-2"
Content-Transfer-Encoding: 7bit
Learn more.... Levctira 11. 91
Propheica 1. 09
Eretic0n Bundle Cauilis+ Vabigra + 3 Dellivery 10.64
Paoxil 2. 05
Lorazepsam 1. 76
Zolmoft 1. 14
Prtozac 3. 39
Learn more....
------=_NextPart_000_0006_01C76396.53913D20
Content-Type: text/html;
charset="iso-8859-2"
Content-Transfer-Encoding: quoted-printable
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office"
xmlns:w=3D"urn:sc=
hemas-microsoft-com:office:word" xmlns=3D"http://www.w3.org/TR/REC-
html40">
<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html;
charset=3Diso-8859-2">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered
medium)">
</head>
<body>
<a href=3D"http://iisaz.hk/?38798924"> Learn more.... </a>
<table >
<tr><td> Levctira </td><td> 11. 91</td></tr>
<tr><td> Propheica </td><td> 1. 09</td></tr>
<tr><td> Eretic0n Bundle Cauilis+ Vabigra + 3 Dellivery </td><td>
10.64</td> </tr>
<tr><td> Paoxil </td><td> 2. 05</td></tr>
<tr><td> Lorazepsam </td><td> 1. 76</td></tr>
<tr><td> Zolmoft </td><td> 1. 14</td></tr>
<tr><td> Prtozac </td><td> 3. 39</td></tr>
</table>
<a href=3D"http://iisaz.hk/?[MUNGED]"> Learn more.... </a>
</body>
</html>
------=_NextPart_000_0006_01C76396.53913D20--
-- END OF SPAM --
See:
IP 69.143.15.92 c-69-143-15-92.hsd1.va.comcast.net
http://www.moensted.dk/spam/?addr=69.143.15.92
http://www.spamhaus.org/query/bl?ip=69.143.15.92
http://www.spamhaus.org/pbl/query/PBL114751
http://spamcop.net/w3m?action=checkblock&ip=69.143.15.92
Spam source - http://wpbl.info/record?ip=69.143.15.92
Comcast Cable Communications, Inc. JUMPSTART-3 (NET-69-136-0-0-1)
69.136.0.0 - 69.143.255.255
Comcast Cable Communications, Inc. DC-20 (NET-69-143-0-0-1)
69.143.0.0 - 69.143.255.255
More comcast.net sightings:
http://groups.google.com/groups/search?q=comcast.net+group%3A*abuse&start=0&scoring=d&
CustName: Comcast Cable Communications, Inc.
NetRange: 69.143.0.0 - 69.143.255.255
CIDR: 69.143.0.0/16
NetName: DC-20
NetHandle: NET-69-143-0-0-1
Parent: NET-69-136-0-0-1
NetType: Reassigned
route: 69.143.0.0/16
descr: Comcast Cable Communications, Inc.
1800 Bishops Gate Blvd
Mt Laurel, NJ 08054
origin: AS33657
mnt-by: MNT-CMCS
changed: tony_...@nospam.cable.comcast.net
ASN: 33657
ASN Name: DNEO-OSP7
Country (per IP registrar): US [United States]
Country IP Range: 69.128.0.0 to 69.143.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=33657
22 SBL/ROKSO listings for IPs under the responsibility of comcast.net
http://www.spamhaus.org/sbl/listings.lasso?isp=comcast.net
See:
iisaz.hk IP 125.79.17.103
NS2.LEBEE4AE.COM [63.223.11.14 (NO GLUE)] [US]
NS2.ZAFFERBOD.COM [63.223.11.14 (NO GLUE)] [US]
NS1.FATBAST.COM [85.136.20.235 (NO GLUE)] [ES]
NS1.GUARDLESSROD.COM [85.136.20.235 (NO GLUE)] [ES]
[iisaz.hk has 1 MX record mail.iisaz.hk (10)]
http://www.moensted.dk/spam/?addr=125.79.17.103
http://www.spamhaus.org/query/bl?ip=125.79.17.103
http://www.spamhaus.org/pbl/query/PBL117001
125.79.17.103 NO PTR stuck in a loop at dns.zzptt.fj.cn
inetnum: 125.79.0.0 - 125.79.255.255
netname: CHINANET-FJ
descr: CHINANET Fujian province network
descr: China Telecom
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-FJ
status: ALLOCATED PORTABLE
changed: hm-ch...@apnic.net
person: FUJIANNET HOSTMASTER
nic-hdl: FH71-AP
e-mail: fj...@fjdcb.fz.fj.cn
remarks: send spam reports and abuse reports
remarks: to ab...@fjdcb.fz.fj.cn => ???
postmaster and abuse[]fjdcb.fz.fj.cn are listed in rfc-ignorant.org
database
abuse[]fz.fj.cn is listed in rfc-ignorant.org database
route: 125.78.0.0/15
descr: China Telecom Fujian Province
origin: AS4134
mnt-by: MAINT-AS4134
changed: tia...@cndata.com
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country (per IP registrar): CN [China]
Country IP Range: 125.64.0.0 to 125.95.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL52205
125.79.17.103/32 is listed on the Spamhaus Block List (SBL/ROKSO)
10-Mar-2007 23:19 GMT | SR20
Yambo Financials.
Yambo botnet webhosts and nameservers (compromised systems)
2 SBL/ROKSO listings for IPs under the responsibility of chinanet-fj
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-fj
Let see whois:
Domain Name: IISAZ.HK
Contract Version: HKDNR latest version
Registrant Contact Information:
Holder English Name (It should be the same as your legal name on your
HKID card or other relevant documents): KIKI OKOLASADAS
Holder Chinese Name:
Email: wanyang...@safe-mail.net
Domain Name Commencement Date: 2007-03-02
Country: US
Expiry Date: 2008-03-02
Re-registration Status: Complete
Name of Registrar: HKDNR
Account Name: HK1822744T
Technical Contact:
First name: JOHNNY
Last name: SIMPSON
Company Name: KIKI OKOLASADAS
Name Servers Information:
NS1.GUARDLESSROD.COM
NS2.LEBEE4AE.COM
NS1.FATBAST.COM
NS2.ZAFFERBOD.COM
More iisaz.hk sightings:
http://groups.google.com/groups/search?q=iisaz.hk+group%3A*abuse
See Yambo Pharmacy image hosting:
http://195.141.152.21:8080/legalrx/images/award_bestpharma.gif
IP 195.141.152.21
http://www.moensted.dk/spam/?addr=195.141.152.21
http://www.spamhaus.org/query/bl?ip=195.141.152.21
inetnum: 195.141.152.0 - 195.141.152.255
netname: PCHW-CH-NET
descr: PC-Highway Ltd
status: ASSIGNED PA
notify: ip-...@sunrise.net
mnt-by: AS6730-MNT
changed: danilo...@sunrise.net
nic-hdl: IL564-RIPE
notify: in...@pchighway.com
route: 195.141.0.0/16
descr: CH-SUNRISE-970513
descr: sunrise / TDC Switzerland AG
origin: AS6730
notify: ip-...@sunrise.net
ASN: 6730
ASN Name: SUNRISE (sunrise (TDC Switzerland AG))
Country (per IP registrar): CH [Switzerland]
Country IP Range: 195.141.0.0 to 195.141.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=6730
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL50221
195.141.152.21/32 is listed on the Spamhaus Block List (SBL/ROKSO)
19-Jan-2007 21:51 GMT | SR20
Yambo Financials
3 SBL/ROKSO listings for IPs under the responsibility of pchighway.com
http://www.spamhaus.org/sbl/listings.lasso?isp=pchighway.com
postmaster and abuse[]sunrise.net are listed in rfc-ignorant.org
database
1 SBL/ROKSO listings for IPs under the responsibility of sunrise.net
http://www.spamhaus.org/sbl/listings.lasso?isp=sunrise.net
See:
NS2.LEBEE4AE.COM IP 63.223.11.14 => SBL49084
ns2.lebee4ae.com has no MX records -> [lebee4ae.com has 1 MX record
mail.lebee4ae.com (10)]
See:
ns2.lebee4ae.com IP 83.15.82.74 => SBL50921
83.15.82.74 PTR record: eja74.internetdsl.tpnet.pl
at ns2.tpnet.pl / telekomunikacja.pl
More lebee4ae.com sightings:
http://groups.google.com/groups/search?q=LEBEE4AE.COM+group%3A*abuse&start=0&scoring=d&
See:
NS2.ZAFFERBOD.COM IP 63.223.11.14 => SBL49084 at pccwglobal.com
NS2.ZAFFERBOD.COM has no MX records -> [ZAFFERBOD.COM has 1 MX record
mail.ZAFFERBOD.COM (10)]
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... zafferbod.com
Creation Date........ 2006-12-23 22:54:32
Registration Date.... 2006-12-23 22:54:32
Expiry Date.......... 2007-12-23 22:54:32
Organisation Name.... zhou fei
Organisation Address. fu jian xiamen
Organisation Address.
Organisation Address. xia men
Organisation Address. 321000
Organisation Address. FJ
Organisation Address. CN
Admin Name........... zhou fei
Admin Address........ fu jian xiamen
Admin Address........
Admin Address........ xia men
Admin Address........ 321000
Admin Address........ FJ
Admin Address........ CN
Admin Email.......... admin[]champakdagon.com
Admin Phone.......... +86.59232100232
Admin Fax............ +86.59232100232
Tech Name............ zhou fei
Tech Address......... fu jian xiamen
Tech Address.........
Tech Address......... xia men
Tech Address......... 321000
Tech Address......... FJ
Tech Address......... CN
Tech Email........... ad...@champakdagon.com
Tech Phone........... +86.59232100232
Tech Fax............. +86.59232100232
Bill Name............ zhou fei
Bill Address......... fu jian xiamen
Bill Address.........
Bill Address......... xia men
Bill Address......... 321000
Bill Address......... FJ
Bill Address......... CN
Bill Email........... ad...@champakdagon.com
Bill Phone........... +86.59232100232
Bill Fax............. +86.59232100232
Name Server.......... ns2.zafferbod.com
Name Server.......... ns1.zafferbod.com
More zafferbod.com sightings:
http://groups.google.com/groups/search?q=ZAFFERBOD.COM+group%3A*abuse&start=0&scoring=d&
See:
NS1.FATBAST.COM IP 85.136.20.235 => SBL49493
ns1.fatbast.com has no MX records -> [fatbast.com has 1 MX record
mail.fatbast.com (10)]
See:
ns1.fatbast.com IP 63.223.11.14 => SBL49084
More fatbast.com sightings:
http://groups.google.com/groups/search?q=FATBAST.COM+group%3A*abuse&start=0&scoring=d&
See:
NS1.GUARDLESSROD.COM IP 85.136.20.235 => SBL49493 now at ono.com
(OLD IP 63.223.11.14)
NS1.GUARDLESSROD.COM has no MX records -> [GUARDLESSROD.COM has 1 MX
record mail.GUARDLESSROD.COM (10)]
More guardlessrod.com sightings:
http://groups.google.com/groups/search?q=GUARDLESSROD.COM+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/7329868a2514c954
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/24da9e288403b880
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/6e3001f86cb3b320
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: