[email] [drugs - Legal RX] (abieswyvern.com - 221.134.72.59 - hnewsonline.info - thedback.info - kolftoy.info - treadregain.info) Penis launcher
TomezNet
IP 125.191.62.42
(at ns2.dacom.co.kr / f.dns.kr / bora.net / powercomm.com)
Spamvert:
abieswyvern.com IP 212.13.179.19
(SBL46003 / ROK3095) (at ns.nursat.net)
See NEW Yambo Pharmacy image hosting:
http://221.134.72.59:8080/legalrx/images/
IP 221.134.72.59 221-134-72-59.sify.net
(at sdns.sify.net / sifycorp.com / vsnl.net.in)
More info below:
====================
X-SID-PRA: Converse O. Huffiest <He...@greenquilt.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW437kBKHtG1Bx57bquIJ8/Gzz6pgY5eNu8E=
Received: from tomts48-srv.bellnexxia.net ([209.226.175.192]) by
bay0-pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 7 Sep 2006 20:58:57 -0700
Received: from [MUNGED]
by toip4.bellnexxia.net with ESMTP; 07 Sep 2006 23:58:49 -0400
Received: (qmail 14254 invoked by uid 110); 7 Sep 2006 23:58:48 -0400
Delivered-To: [MUNGED]
Received: (qmail 14227 invoked from network); 7 Sep 2006 23:58:48 -0400
Received: from unknown (HELO -1218341648) (125.191.62.42)
by [MUNGED] with SMTP; 7 Sep 2006 23:58:48 -0400
Received: from greenquilt.com (-1218231984 [-1213258952])
by gordonpowles-media.com (Qmailv1) with ESMTP id 94142BA878
for <[MUNGED]>; Thu, 07 Sep 2006 23:56:22 -0700
Date: Thu, 07 Sep 2006 23:56:22 -0700
From: "Converse O. Huffiest" <He...@greenquilt.com>
X-Mailer: The Bat! (v2.00.2) Personal
X-Priority: 3
Message-ID: <2767669425.2...@greenquilt.com>
To: [MUNGED]
Subject: Penis launcher
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-AntiVirus: scanned for viruses by AMaViS 0.2.1 (http://amavis.org/)
Return-Path: He...@greenquilt.com
X-OriginalArrivalTime: 08 Sep 2006 03:58:57.0773 (UTC)
FILETIME=[1C2949D0:01C6D2FB]
The most widely prescribed drugs are available online here. No doctor
appointment is necessary. Our Online physicians will review your short
online application and issue a prescription.
You won't find a better deal anywhere on price or service for your
medication. Guaranteed!
[MUNGED]
-- END OF SPAM --
See:
IP 125.191.62.42
http://www.moensted.dk/spam/?addr=125.191.62.42
http://cbl.abuseat.org/lookup.cgi?ip=125.191.62.42
http://www.spamhaus.org/query/bl?ip=125.191.62.42
http://tqmcube.com/cgi-bin/rbltqm?ip=125.191.62.42
http://korea.services.net/blocked.phtml?addr=125.191.62.42
IPv4 Address : 125.191.48.0-125.191.63.255
Network Name : Xpeed-INFRA
Connect ISP Name : Xpeed
Organization ID : ORG779668
Org Name : POWERCOMM
E-Mail : i...@powercomm.com
route: 125.188.0.0/14
descr: Proxy-Registered Route Object by DACOM(AS3786)
origin: AS17858
remarks: This route object is for a DACOM's customer route
remarks: which is being exported under this origin AS.
remarks:
remarks: This route object was automatically created to prevent
remarks: some DACOM peer from rejecting this route because
remarks: they may create their filter based on Route Registry DB.
notify: n...@bora.net
mnt-by: MAINT-AS3786
changed: yunc...@bora.net
ASN: 17858
ASN Name: KRNIC-ASBLOCK-AP (KRNIC)
Country IP Range: 125.176.0.0 to 125.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=17858
3 SBL/ROKSO listings for IPs under the responsibility of powercomm.com
http://www.spamhaus.org/sbl/listings.lasso?isp=powercomm.com
4 SBL/ROKSO listings for IPs under the responsibility of bora.net
http://www.spamhaus.org/sbl/listings.lasso?isp=bora.net
16 SBL/ROKSO listings for IPs under the responsibility of dacom.co.kr
http://www.spamhaus.org/sbl/listings.lasso?isp=dacom.co.kr
See:
abieswyvern.com IP 212.13.179.19
ns1.hnewsonline.info [61.222.250.4 (NO GLUE)] [TW] (HiNet)
ns1.thedback.info [206.51.234.79 (NO GLUE)] [US] => SBL46387
ns2.kolftoy.info [206.51.234.79 (NO GLUE)] [US] => SBL46387
ns2.treadregain.info [NO GLUE; No A record]
abieswyvern.com has no MX records
http://www.moensted.dk/spam/?addr=212.13.179.19
http://www.spamhaus.org/query/bl?ip=212.13.179.19
More 212.13.179.19 sightings:
http://groups.google.com/groups/search?q=212.13.179.19+group%3A*abuse
inetnum: 212.13.179.0 - 212.13.179.255
netname: IC-KSN
descr: Info-Center Ltd
descr: 1 May St., 90/2, Kostanay
country: KZ [Kazakstan]
person: Arthur Kalagov
changed: a...@art.kz
changed: ip-...@ripn.net
notify: ip-...@ripn.net
route: 212.13.160.0/19
descr: Nursat
descr: Almaty, Kazakstan
origin: AS5434
notify: n...@nursat.net
mnt-by: AS5434-MNT
changed: n...@nursat.net
source: RIPE
route: 212.13.160.0/19
descr: Nursat regions
descr: Almaty, Kazakstan
origin: AS8825
notify: ana...@nursat.net
http://www.cidr-report.org/cgi-bin/as-report?as=8825
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL46003
212.13.179.19/32 is listed on the Spamhaus Block List (SBL/ROKSO)
05-Sep-2006 02:58 GMT | SR23
Yambo Financials
Spam webhosting / nameserver / compromised host (n)
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK3095
1 SBL/ROKSO listings for IPs under the responsibility of nursat.net
http://www.spamhaus.org/sbl/listings.lasso?isp=nursat.net
See NEW Yambo Pharmacy image hosting:
http://221.134.72.59:8080/legalrx/images/
IP 221.134.72.59 221-134-72-59.sify.net
http://www.moensted.dk/spam/?addr=221.134.72.59
221.134.72.59 PTR record: 221-134-72-59.sify.net
inetnum: 221.134.72.56 - 221.134.72.63
netname: CLAASNET
country: IN
descr: CLAAS INDIA LIMITED
route: 221.134.72.0/24
descr: Satyam Infoway Pvt.Ltd.,
country: IN
route: 221.134.72.0/24
descr: Satyam Infoway Route Object
origin: AS9583
mnt-by: VSNL-MAINT-MCI
changed: gps...@giasbm01.vsnl.net.in
route: 221.134.72.0/24
descr: Sify Limited
origin: AS9796
mnt-by: MAINT-IN-SIFY
country: IN
changed: ipa...@sifycorp.com
changed: hm-ch...@apnic.net
ASN: 9583
ASN Name: SIFY-AS-IN (Sify Limited)
Country IP Range: 221.134.0.0 to 221.135.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9583
4 SBL/ROKSO listings for IPs under the responsibility of sifycorp.com
http://www.spamhaus.org/sbl/listings.lasso?isp=sifycorp.com
8 SBL/ROKSO listings for IPs under the responsibility of vsnl.net.in
http://www.spamhaus.org/sbl/listings.lasso?isp=vsnl.net.in
See:
ns1.hnewsonline.info IP 61.222.250.4
61.222.250.4 PTR record: 61-222-250-4.HINET-IP.hinet.net
at vns2.hinet.net
route: 61.222.0.0/16
descr: (HiNet) Chunghwa Telecom Co., Ltd.
origin: AS3462
member-of: RS-COMM_NSFNET
mnt-by: MAINT-AS3462
changed: cyk...@ms1.hinet.net
http://www.cidr-report.org/cgi-bin/as-report?as=3462
45 SBL/ROKSO listings for IPs under the responsibility of hinet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=hinet.net
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/c95f6c48922ba1f0
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: