[phish] [UCE] [email] [VA] Security Measures
Shmuel (Seymour J.) Metz
by your customer. Please deal with him. Thank you. I am sending this
both to the domains shown in the header data and to their upstream
providers, as listed in WHOIS.
AG, FTC: this fraudulent (identity theft) spam, with forged header
data, violates S877, the you CAN-SPAM act of 2003.
chestertonholdings.com: ad...@chestertonholdings.com, the contact for
identity theft spam domain lfm12.net, is yours, and you provide DNS.
nameking.com: you are the registry for identity theft spam domain
lfm12.net
oversee.net: identity theft spam site http://www.lfm12.net/disen/ is
at www.lfm12.net [204.13.161.31] in your IP space.
Patriot.net: please block 216.253.190/24; please consider blocking a
wider range.
Xspedius Communications Co.: the identity theft spam was sent from
[216.253.190.170] in your IP space.
If the header or INTERNIC information identifying you was a forgery, I
recommend that you take appropriate steps to prevent that misuse of
your domain name. Likewise if someone was bouncing their message
traffic off of your port 25 without authorization. IANAL, but several
court cases suggest that you may have good cause for legal action.
Should you decide to pursue litigation against the sender, I will be
willing to sign an affidavit that I did in fact receive the message
that I am forwarding.
If you were the victim of relay rape, you may want to take a look at
www.sendmail.org, http://relays.osirusoft.com/mtafix/,
hexadecimal.uoregon.edu/antirelay/ and
anti-relay.unicom.com/anti-relay/ for information on blocking spam
relays.
If you are the customer, your bulk E-mail constitutes postage-due
advertising, which is unethical and not a good way to earn customer
good will. In several court cases, judges have held it to constitute
theft of service and trespass. I demand that you remove me from all
present and future mailing lists, and will take appropriate steps if I
receive any further junk E-mail from you.
Deobfuscation analysis of H:\COMM\MAIL\MR2ICE\MAIL\44A9CBFC.RCV
e-mail and URL list for host GEO.YAHOO.COM:
URL: http://geo.yahoo.com/serv?sv001548&t
e-mail and URL list for host GEOCITIES.COM:
URL: http://geocities.com/js_source/geov2.js
e-mail and URL list for host US.I1.YIMG.COM:
URL: http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js
e-mail and URL list for host VISIT.GEOCITIES.YAHOO.COM:
URL: http://visit.geocities.yahoo.com/visit.gif?us1149115522
e-mail and URL list for host WWW.LFM12.NET:
URL: http://www.lfm12.net/disen/
e-mail and URL list for host WWW.MERCYHOME.ORG:
URL: http://www.mercyhome.org/images/content/pagebuilder/21721.jpg
e-mail and URL list for host [216.253.190.170]:
SMTP: [216.253.190.170]
GEO.YAHOO.COM:
: spam site http://geo.yahoo.com/serv?sv001548&t is at GEO.YAHOO.COM.
BWwhois --shift 1 --stripdisclaimer YAHOO.COM 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: YAHOO.COM
whois server for *.com is whois.crsnic.net ...
connected to whois.crsnic.net [199.7.55.74:43] ...
connected to whois.markmonitor.com [64.124.14.21:43] ...
Registrant:
Yahoo! Inc.
(DOM-272993)
701 First Avenue Sunnyvale
CA
94089 US
Domain Name: yahoo.com
Registrar Name: Markmonitor.com
Registrar Whois: whois.markmonitor.com
Registrar Homepage: http://www.markmonitor.com
Administrative Contact:
Domain Administrator
(NIC-1382062)
Yahoo! Inc.
701 First Avenue Sunnyvale
CA
94089 US
domai...@yahoo-inc.com +1.4083493300 Fax- +1.4083493301
Technical Contact, Zone Contact:
Domain Administrator
(NIC-1372925)
Yahoo! Inc.
701 First Avenue Sunnyvale
CA
94089 US
domai...@yahoo-inc.com +1.4083493300 Fax- +1.4083493301
Created on..............: 1995-Jan-18.
Expires on..............: 2012-Jan-19.
Record last updated on..: 2006-May-17 11:10:55.
Domain servers in listed order:
NS4.YAHOO.COM
NS5.YAHOO.COM
NS1.YAHOO.COM
NS2.YAHOO.COM
NS3.YAHOO.COM
nslookup -type=any GEO.YAHOO.COM 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
GEO.YAHOO.COM canonical name = ck1.geo.vip.scd.YAHOO.COM
Authoritative answers can be found from:
YAHOO.COM nameserver = ns1.YAHOO.COM
YAHOO.COM nameserver = ns2.YAHOO.COM
YAHOO.COM nameserver = ns3.YAHOO.COM
YAHOO.COM nameserver = ns4.YAHOO.COM
YAHOO.COM nameserver = ns5.YAHOO.COM
ns1.YAHOO.COM internet address = 66.218.71.63
ns2.YAHOO.COM internet address = 66.163.169.170
ns3.YAHOO.COM internet address = 217.12.4.104
ns4.YAHOO.COM internet address = 68.142.196.63
ns5.YAHOO.COM internet address = 216.109.116.17
GEOCITIES.COM:
: spam site http://geocities.com/js_source/geov2.js is at
GEOCITIES.COM.
BWwhois --shift 1 --stripdisclaimer GEOCITIES.COM 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: GEOCITIES.COM
whois server for *.com is whois.crsnic.net ...
connected to whois.crsnic.net [199.7.59.74:43] ...
connected to whois.markmonitor.com [64.124.14.21:43] ...
Registrant:
Yahoo! Inc. (DOM-272971)
701 First Avenue
Sunnyvale CA 94089
US
Domain Name: geocities.com
Registrar Name: Markmonitor.com
Registrar Whois: whois.markmonitor.com
Registrar Homepage: http://www.markmonitor.com
Administrative Contact:
Domain Administrator (NIC-1382062) Yahoo! Inc.
701 First Avenue
Sunnyvale CA 94089
US
domai...@yahoo-inc.com
+1.4083493300
Fax- +1.4083493301
Technical Contact, Zone Contact:
Domain Administrator (NIC-1372925) Yahoo! Inc.
701 First Avenue
Sunnyvale CA 94089
US
domai...@yahoo-inc.com
+1.4083493300
Fax- +1.4083493301
Created on..............: 1995-Dec-15.
Expires on..............: 2012-Dec-14.
Record last updated on..: 2006-May-17 11:10:55.
Domain servers in listed order:
NS1-92.AKAM.NET
NS4.YAHOO.COM
ASIA1.AKAM.NET
NS1.YAHOO.COM
NS5.YAHOO.COM
EUR1.AKAM.NET
NS2.YAHOO.COM
USE1.AKAM.NET
NS1-79.AKAM.NET
NS3.YAHOO.COM
NS5.YAHOO.COM
nslookup -type=any GEOCITIES.COM 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
GEOCITIES.COM preference = 1, mail exchanger = mx2.mail.yahoo.COM
GEOCITIES.COM preference = 1, mail exchanger = mx3.mail.yahoo.COM
GEOCITIES.COM preference = 5, mail exchanger = mx4.mail.yahoo.COM
GEOCITIES.COM preference = 1, mail exchanger = mx1.mail.yahoo.COM
GEOCITIES.COM
origin = hidden-master.yahoo.COM
mail addr = hostmaster.yahoo-inc.COM
serial = 2006050301
refresh = 3600 (1 hour)
retry = 900 (15 mins)
expire = 604800 (7 days)
minimum ttl = 600 (10 mins)
GEOCITIES.COM internet address = 66.218.77.68
GEOCITIES.COM nameserver = ns1-79.akam.net
GEOCITIES.COM nameserver = ns1-92.akam.net
GEOCITIES.COM nameserver = ns1.yahoo.COM
GEOCITIES.COM nameserver = ns2.yahoo.COM
GEOCITIES.COM nameserver = ns3.yahoo.COM
GEOCITIES.COM nameserver = eur1.akam.net
GEOCITIES.COM nameserver = use1.akam.net
GEOCITIES.COM nameserver = asia1.akam.net
Authoritative answers can be found from:
GEOCITIES.COM nameserver = ns2.yahoo.COM
GEOCITIES.COM nameserver = ns3.yahoo.COM
GEOCITIES.COM nameserver = eur1.akam.net
GEOCITIES.COM nameserver = use1.akam.net
GEOCITIES.COM nameserver = asia1.akam.net
GEOCITIES.COM nameserver = ns1-79.akam.net
GEOCITIES.COM nameserver = ns1-92.akam.net
GEOCITIES.COM nameserver = ns1.yahoo.COM
US.I1.YIMG.COM:
: spam site http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js is at
US.I1.YIMG.COM.
BWwhois --shift 1 --stripdisclaimer YIMG.COM 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: YIMG.COM
whois server for *.com is whois.crsnic.net ...
connected to whois.crsnic.net [199.7.55.74:43] ...
connected to whois.markmonitor.com [64.124.14.21:43] ...
Registrant:
Yahoo! Inc.
(DOM-273003)
701 First Avenue
Sunnyvale
CA
94089
US
Domain Name: yimg.com
Registrar Name: Markmonitor.com
Registrar Whois: whois.markmonitor.com
Registrar Homepage: http://www.markmonitor.com
Administrative Contact:
Domain Administrator
(NIC-1382062)
Yahoo! Inc.
701 First Avenue
Sunnyvale
CA
94089
US
domai...@yahoo-inc.com
+1.4083493300
Fax- +1.4083493301
Technical Contact, Zone Contact:
Domain Administrator
(NIC-1372925)
Yahoo! Inc.
701 First Avenue
Sunnyvale
CA
94089
US
domai...@yahoo-inc.com
+1.4083493300
Fax- +1.4083493301
Created on..............: 1997-May-14.
Expires on..............: 2012-May-15.
Record last updated on..: 2006-May-17 11:10:55.
Domain servers in listed order:
NS1.YAHOO.COM
NS5.YAHOO.COM
NS2.YAHOO.COM
NS3.YAHOO.COM
NS4.YAHOO.COM
nslookup -type=any US.I1.YIMG.COM 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
US.I1.YIMG.COM canonical name =
a943.yimg.com.georedirector.akadns.net
Authoritative answers can be found from:
YIMG.COM nameserver = ns2.yahoo.COM
YIMG.COM nameserver = ns3.yahoo.COM
YIMG.COM nameserver = ns4.yahoo.COM
YIMG.COM nameserver = ns5.yahoo.COM
YIMG.COM nameserver = ns1.yahoo.COM
ns1.yahoo.COM internet address = 66.218.71.63
ns2.yahoo.COM internet address = 66.163.169.170
ns3.yahoo.COM internet address = 217.12.4.104
ns4.yahoo.COM internet address = 68.142.196.63
ns5.yahoo.COM internet address = 216.109.116.17
VISIT.GEOCITIES.YAHOO.COM:
: spam site http://visit.geocities.yahoo.com/visit.gif?us1149115522
is at VISIT.GEOCITIES.YAHOO.COM.
BWwhois --shift 1 --stripdisclaimer YAHOO.COM 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: YAHOO.COM
whois server for *.com is whois.crsnic.net ...
connected to whois.crsnic.net [199.7.55.74:43] ...
connected to whois.markmonitor.com [64.124.14.21:43] ...
Registrant:
Yahoo! Inc. (DOM-272993)
701 First Avenue Sunnyvale CA 94089 US
Domain Name: yahoo.com
Registrar Name: Markmonitor.com
Registrar Whois: whois.markmonitor.com
Registrar Homepage: http://www.markmonitor.com
Administrative Contact:
Domain Administrator (NIC-1382062) Yahoo! Inc.
701 First Avenue Sunnyvale CA 94089 US
domai...@yahoo-inc.com +1.4083493300 Fax- +1.4083493301
Technical Contact, Zone Contact:
Domain Administrator (NIC-1372925) Yahoo! Inc.
701 First Avenue Sunnyvale CA 94089 US
domai...@yahoo-inc.com +1.4083493300 Fax- +1.4083493301
Created on..............: 1995-Jan-18.
Expires on..............: 2012-Jan-19.
Record last updated on..: 2006-May-17 11:10:55.
Domain servers in listed order:
NS4.YAHOO.COM
NS5.YAHOO.COM
NS1.YAHOO.COM
NS2.YAHOO.COM
NS3.YAHOO.COM
nslookup -type=any VISIT.GEOCITIES.YAHOO.COM 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
VISIT.GEOCITIES.YAHOO.COM canonical name =
visit2.geo.vip.scd.YAHOO.COM
Authoritative answers can be found from:
YAHOO.COM nameserver = ns4.YAHOO.COM
YAHOO.COM nameserver = ns5.YAHOO.COM
YAHOO.COM nameserver = ns1.YAHOO.COM
YAHOO.COM nameserver = ns2.YAHOO.COM
YAHOO.COM nameserver = ns3.YAHOO.COM
ns1.YAHOO.COM internet address = 66.218.71.63
ns2.YAHOO.COM internet address = 66.163.169.170
ns3.YAHOO.COM internet address = 217.12.4.104
ns4.YAHOO.COM internet address = 68.142.196.63
ns5.YAHOO.COM internet address = 216.109.116.17
WWW.LFM12.NET:
contacts: ad...@chestertonholdings.com
: spam site http://www.lfm12.net/disen/ is at WWW.LFM12.NET.
BWwhois --shift 1 --stripdisclaimer LFM12.NET 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: LFM12.NET
whois server for *.net is whois.crsnic.net ...
connected to whois.crsnic.net [199.7.55.74:43] ...
connected to whois.nameking.com [204.13.162.8:43] ...
Domain Name: lfm12.net
Registrant
------------------------------------------------------------
Name: admin -
Organization: Chesterton Holdings
Email: ad...@chestertonholdings.com
Address: 655 Flower St
#254
City, Province, Post Code: Los Angeles, CA, 90017
Country: US
Phone: 213-407-1774
Admin Contact
------------------------------------------------------------
Name: admin -
Organization: Chesterton Holdings
Email: ad...@chestertonholdings.com
Address: 655 Flower St
#254
City, Province, Post Code: Los Angeles, CA, 90017
Country: US
Phone: 213-407-1774
Billing Contact
------------------------------------------------------------
Name: admin -
Organization: Chesterton Holdings
Email: ad...@chestertonholdings.com
Address: 655 Flower St
#254
City, Province, Post Code: Los Angeles, CA, 90017
Country: US
Phone: 213-407-1774
Tech Contact
------------------------------------------------------------
Name: admin -
Organization: Chesterton Holdings
Email: ad...@chestertonholdings.com
Address: 655 Flower St
#254
City, Province, Post Code: Los Angeles, CA, 90017
Country: US
Phone: 213-407-1774
Creation Date: 07/04/06
Expiration Date: 07/04/07
Domain Status: ACTIVE
Domain Servers
ns1.chestertonholdings.com
ns11.chestertonholdings.com
Registration Provided By: NAME KING INC.
Contact: in...@nameking.com
Abuse Desk Email Address: ab...@nameking.com
Request 1/20
nslookup -type=any WWW.LFM12.NET 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
WWW.LFM12.NET internet address = 204.13.161.31
Authoritative answers can be found from:
LFM12.NET nameserver = ns1.chestertonholdings.com
LFM12.NET nameserver = ns11.chestertonholdings.com
ns1.chestertonholdings.com internet address = 204.13.160.12
ns11.chestertonholdings.com internet address = 204.13.161.12
WWW.MERCYHOME.ORG:
contacts: in...@MERCYHOME.ORG
: spam site
http://www.mercyhome.org/images/content/pagebuilder/21721.jpg is at
WWW.MERCYHOME.ORG.
BWwhois --shift 1 --stripdisclaimer MERCYHOME.ORG 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: MERCYHOME.ORG
whois server for *.org is whois.publicinterestregistry.net ...
connected to whois.publicinterestregistry.net [129.33.96.137:43] ...
Domain ID:D4808130-LROR
Domain Name:MERCYHOME.ORG
Created On:21-Oct-1996 04:00:00 UTC
Last Updated On:25-Oct-2004 06:34:14 UTC
Expiration Date:20-Oct-2006 04:00:00 UTC
Sponsoring Registrar:Network Solutions LLC (R63-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:28012057-NSI
Registrant Name:Mercy Home for Boys & Girls
Registrant Organization:Mercy Home for Boys & Girls
Registrant Street1:1140 W Jackson
Registrant Street2:Blvd
Registrant Street3:
Registrant City:Chicago
Registrant State/Province:IL
Registrant Postal Code:60607
Registrant Country:US
Registrant Phone:+1.31273875
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:in...@MERCYHOME.ORG
Admin ID:28012059-NSI
Admin Name:Mercy Home for Boys & Girls
Admin Organization:Mercy Home for Boys & Girls
Admin Street1:1140 W Jackson Blvd
Admin Street2:
Admin Street3:
Admin City:Chicago
Admin State/Province:IL
Admin Postal Code:60607
Admin Country:US
Admin Phone:+1.31273875
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:in...@MERCYHOME.ORG
Tech ID:28012057-NSI
Tech Name:Mercy Home for Boys & Girls
Tech Organization:Mercy Home for Boys & Girls
Tech Street1:1140 W Jackson
Tech Street2:Blvd
Tech Street3:
Tech City:Chicago
Tech State/Province:IL
Tech Postal Code:60607
Tech Country:US
Tech Phone:+1.31273875
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:in...@MERCYHOME.ORG
Name Server:NS1.SECURE.NET
Name Server:NS2.SECURE.NET
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
nslookup -type=any WWW.MERCYHOME.ORG 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
WWW.MERCYHOME.ORG canonical name = mhbg-live.convio.net
Authoritative answers can be found from:
MERCYHOME.ORG nameserver = ns1.secure.net
MERCYHOME.ORG nameserver = ns2.secure.net
ns1.secure.net internet address = 192.220.124.10
ns2.secure.net internet address = 192.220.125.10
[204.13.161.31]:
contacts: ipa...@oversee.net
: spam site http://www.lfm12.net/disen/ is at www.lfm12.net
[204.13.161.31] in your IP space.
BWwhois --shift 1 --stripdisclaimer 204.13.161.31 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 204.13.161.31
connected to whois.arin.net [199.43.0.144:43] ...
OrgName: Oversee.net
OrgID: OVERS-1
Address: 818 W 7th Street
Address: Suite 700
City: Los Angeles
StateProv: CA
PostalCode: 90017
Country: US
NetRange: 204.13.160.0 - 204.13.163.255
CIDR: 204.13.160.0/22
NetName: OVERSEE-NET-01
NetHandle: NET-204-13-160-0-1
Parent: NET-204-0-0-0-0
NetType: Direct Assignment
NameServer: NS1.OVERSEE.NET
NameServer: NS2.OVERSEE.NET
Comment:
RegDate: 2005-04-21
Updated: 2005-04-21
RTechHandle: OVERS-ARIN
RTechName: Oversee NOC
RTechPhone: +1-213-408-0080
RTechEmail: ipa...@oversee.net
OrgTechHandle: OVERS-ARIN
OrgTechName: Oversee NOC
OrgTechPhone: +1-213-408-0080
OrgTechEmail: ipa...@oversee.net
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
nslookup -type=any 31.161.13.204.in-addr.arpa 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
31.161.13.204.in-addr.arpa name = host204-13-161-31.oversee.net
Authoritative answers can be found from:
161.13.204.in-addr.arpa nameserver = ns1.oversee.net
161.13.204.in-addr.arpa nameserver = ns2.oversee.net
ns1.oversee.net internet address = 204.13.160.6
[216.253.190.170]:
contacts: NetA...@xspedius.com, ipa...@xspedius.net,
n...@xspedius.com
: the spam was sent from [216.253.190.170] in your IP space.
BWwhois --shift 1 --stripdisclaimer 216.253.190.170 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 216.253.190.170
connected to whois.arin.net [192.149.252.44:43] ...
OrgName: Xspedius Communications Co.
OrgID: XSPED
Address: 5555 Winghaven Blvd
City: O'Fallon
StateProv: MO
PostalCode: 63366
Country: US
NetRange: 216.253.0.0 - 216.253.255.255
CIDR: 216.253.0.0/16
NetName: ESPIRE-9BL
NetHandle: NET-216-253-0-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.XSPEDIUS.NET
NameServer: DNS2.XSPEDIUS.NET
NameServer: DNS3.XSPEDIUS.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 1999-11-08
Updated: 2006-02-15
OrgAbuseHandle: ABUSE31-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-800-831-0309
OrgAbuseEmail: NetA...@xspedius.com
OrgNOCHandle: NOC121-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-800-673-7777
OrgNOCEmail: n...@xspedius.com
OrgTechHandle: ZX7-ARIN
OrgTechName: XSpedius IP Administrator
OrgTechPhone: +1-877-962-1900
OrgTechEmail: ipa...@xspedius.net
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
nslookup -type=any 170.190.253.216.in-addr.arpa 2>&1
*** monroe.patriot.net can't find 170.190.253.216.in-addr.arpa:
Non-existent host/domain
Server: monroe.patriot.net
Address: 209.249.176.5
[66.218.77.68]:
Abuse contacts: networ...@cc.yahoo-inc.com
: spam site http://geocities.com/js_source/geov2.js is at
geocities.com [66.218.77.68] in your IP space.
BWwhois --shift 1 --stripdisclaimer 66.218.77.68 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 66.218.77.68
connected to whois.arin.net [192.149.252.44:43] ...
OrgName: Yahoo!
OrgID: YAOO
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US
NetRange: 66.218.64.0 - 66.218.95.255
CIDR: 66.218.64.0/19
NetName: A-YAHOO-U23
NetHandle: NET-66-218-64-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.YAHOO.COM
NameServer: NS2.YAHOO.COM
NameServer: NS3.YAHOO.COM
NameServer: NS4.YAHOO.COM
NameServer: NS5.YAHOO.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-01-15
Updated: 2002-06-27
RTechHandle: NA258-ARIN
RTechName: Netblock Admin
RTechPhone: +1-408-349-3300
RTechEmail: netblo...@yahoo-inc.com
OrgAbuseHandle: NETWO857-ARIN
OrgAbuseName: Network Abuse
OrgAbusePhone: +1-408-349-3300
OrgAbuseEmail: networ...@cc.yahoo-inc.com
OrgTechHandle: NA258-ARIN
OrgTechName: Netblock Admin
OrgTechPhone: +1-408-349-3300
OrgTechEmail: netblo...@yahoo-inc.com
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
nslookup -type=any 68.77.218.66.in-addr.arpa 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
68.77.218.66.in-addr.arpa name = intl1.geo.vip.scd.yahoo.com
Authoritative answers can be found from:
77.218.66.in-addr.arpa nameserver = ns3.yahoo.com
77.218.66.in-addr.arpa nameserver = ns5.yahoo.com
77.218.66.in-addr.arpa nameserver = ns7.yahoo.com
77.218.66.in-addr.arpa nameserver = ns1.yahoo.com
77.218.66.in-addr.arpa nameserver = ns2.yahoo.com
ns1.yahoo.com internet address = 66.218.71.63
ns2.yahoo.com internet address = 66.163.169.170
ns3.yahoo.com internet address = 217.12.4.104
ns5.yahoo.com internet address = 216.109.116.17
ns7.yahoo.com internet address = 68.142.226.82
[66.218.77.72]:
Abuse contacts: networ...@cc.yahoo-inc.com
: spam site http://geo.yahoo.com/serv?sv001548&t is at geo.yahoo.com
[66.218.77.72] in your IP space.
BWwhois --shift 1 --stripdisclaimer 66.218.77.72 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 66.218.77.72
connected to whois.arin.net [192.149.252.44:43] ...
OrgName: Yahoo!
OrgID: YAOO
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US
NetRange: 66.218.64.0 - 66.218.95.255
CIDR: 66.218.64.0/19
NetName: A-YAHOO-U23
NetHandle: NET-66-218-64-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.YAHOO.COM
NameServer: NS2.YAHOO.COM
NameServer: NS3.YAHOO.COM
NameServer: NS4.YAHOO.COM
NameServer: NS5.YAHOO.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-01-15
Updated: 2002-06-27
RTechHandle: NA258-ARIN
RTechName: Netblock Admin
RTechPhone: +1-408-349-3300
RTechEmail: netblo...@yahoo-inc.com
OrgAbuseHandle: NETWO857-ARIN
OrgAbuseName: Network Abuse
OrgAbusePhone: +1-408-349-3300
OrgAbuseEmail: networ...@cc.yahoo-inc.com
OrgTechHandle: NA258-ARIN
OrgTechName: Netblock Admin
OrgTechPhone: +1-408-349-3300
OrgTechEmail: netblo...@yahoo-inc.com
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
nslookup -type=any 72.77.218.66.in-addr.arpa 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
72.77.218.66.in-addr.arpa name = ck1.geo.vip.scd.yahoo.com
Authoritative answers can be found from:
77.218.66.in-addr.arpa nameserver = ns5.yahoo.com
77.218.66.in-addr.arpa nameserver = ns7.yahoo.com
77.218.66.in-addr.arpa nameserver = ns1.yahoo.com
77.218.66.in-addr.arpa nameserver = ns2.yahoo.com
77.218.66.in-addr.arpa nameserver = ns3.yahoo.com
ns1.yahoo.com internet address = 66.218.71.63
ns2.yahoo.com internet address = 66.163.169.170
ns3.yahoo.com internet address = 217.12.4.104
ns5.yahoo.com internet address = 216.109.116.17
ns7.yahoo.com internet address = 68.142.226.82
[66.218.77.90]:
Abuse contacts: networ...@cc.yahoo-inc.com
: spam site http://visit.geocities.yahoo.com/visit.gif?us1149115522
is at visit.geocities.yahoo.com [66.218.77.90] in your IP space.
BWwhois --shift 1 --stripdisclaimer 66.218.77.90 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 66.218.77.90
connected to whois.arin.net [192.149.252.44:43] ...
OrgName: Yahoo!
OrgID: YAOO
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US
NetRange: 66.218.64.0 - 66.218.95.255
CIDR: 66.218.64.0/19
NetName: A-YAHOO-U23
NetHandle: NET-66-218-64-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.YAHOO.COM
NameServer: NS2.YAHOO.COM
NameServer: NS3.YAHOO.COM
NameServer: NS4.YAHOO.COM
NameServer: NS5.YAHOO.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-01-15
Updated: 2002-06-27
RTechHandle: NA258-ARIN
RTechName: Netblock Admin
RTechPhone: +1-408-349-3300
RTechEmail: netblo...@yahoo-inc.com
OrgAbuseHandle: NETWO857-ARIN
OrgAbuseName: Network Abuse
OrgAbusePhone: +1-408-349-3300
OrgAbuseEmail: networ...@cc.yahoo-inc.com
OrgTechHandle: NA258-ARIN
OrgTechName: Netblock Admin
OrgTechPhone: +1-408-349-3300
OrgTechEmail: netblo...@yahoo-inc.com
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
nslookup -type=any 90.77.218.66.in-addr.arpa 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
90.77.218.66.in-addr.arpa name = visit2.geo.vip.scd.yahoo.com
Authoritative answers can be found from:
77.218.66.in-addr.arpa nameserver = ns7.yahoo.com
77.218.66.in-addr.arpa nameserver = ns1.yahoo.com
77.218.66.in-addr.arpa nameserver = ns2.yahoo.com
77.218.66.in-addr.arpa nameserver = ns3.yahoo.com
77.218.66.in-addr.arpa nameserver = ns5.yahoo.com
ns1.yahoo.com internet address = 66.218.71.63
ns2.yahoo.com internet address = 66.163.169.170
ns3.yahoo.com internet address = 217.12.4.104
ns5.yahoo.com internet address = 216.109.116.17
ns7.yahoo.com internet address = 68.142.226.82
[66.45.103.5]:
Abuse contacts: sas....@sungard.com
: spam site
http://www.mercyhome.org/images/content/pagebuilder/21721.jpg is at
www.mercyhome.org ([66.45.103.5], [66.45.103.69]) in your IP space.
BWwhois --shift 1 --stripdisclaimer 66.45.103.5 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 66.45.103.5
connected to whois.arin.net [192.149.252.44:43] ...
Inflow NFLO-AR-2 (NET-66-45-0-0-1)
66.45.0.0 - 66.45.127.255
convio.com INFLOW-13746-7350 (NET-66-45-103-0-1)
66.45.103.0 - 66.45.103.127
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
Nested BWwhois for Inflow NFLO-AR-2 (66.45.0.0 - 66.45.127.255)
BWwhois --shift 1 --stripdisclaimer NET-66-45-0-0-1 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: NET-66-45-0-0-1
connected to whois.arin.net [199.43.0.144:43] ...
OrgName: Inflow
OrgID: NFLO
Address: 550 E 84th Avenue
Address: Suite E-5
City: Thornton
StateProv: CO
PostalCode: 80229
Country: US
NetRange: 66.45.0.0 - 66.45.127.255
CIDR: 66.45.0.0/17
NetName: NFLO-AR-2
NetHandle: NET-66-45-0-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.INFLOW.NET
NameServer: NS2.INFLOW.NET
NameServer: NS3.INFLOW.NET
NameServer: NS4.INFLOW.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-11-15
Updated: 2002-09-15
RAbuseHandle: ABUSE40-ARIN
RAbuseName: Abuse
RAbusePhone: +1-800-441-1181
RAbuseEmail: sas....@sungard.com
RTechHandle: JI133-ARIN
RTechName: Inflow, Joe
RTechPhone: +1-303-942-3230
RTechEmail: sas.hos...@sungard.com
OrgAbuseHandle: ABUSE40-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-800-441-1181
OrgAbuseEmail: sas....@sungard.com
OrgTechHandle: JI133-ARIN
OrgTechName: Inflow, Joe
OrgTechPhone: +1-303-942-3230
OrgTechEmail: sas.hos...@sungard.com
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
Nested BWwhois for convio.com INFLOW-13746-7350 (66.45.103.0 -
66.45.103.127)
BWwhois --shift 1 --stripdisclaimer NET-66-45-103-0-1 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: NET-66-45-103-0-1
connected to whois.arin.net [199.43.0.144:43] ...
CustName: convio.com
Address: 8025 I.H. 35 North
City: AUSTIN
StateProv: TX
PostalCode: 78753
Country: US
RegDate: 2002-09-23
Updated: 2002-09-23
NetRange: 66.45.103.0 - 66.45.103.127
CIDR: 66.45.103.0/25
NetName: INFLOW-13746-7350
NetHandle: NET-66-45-103-0-1
Parent: NET-66-45-0-0-1
NetType: Reassigned
Comment:
RegDate: 2002-09-23
Updated: 2002-09-23
RAbuseHandle: ABUSE40-ARIN
RAbuseName: Abuse
RAbusePhone: +1-800-441-1181
RAbuseEmail: sas....@sungard.com
RTechHandle: JI133-ARIN
RTechName: Inflow, Joe
RTechPhone: +1-303-942-3230
RTechEmail: sas.hos...@sungard.com
OrgAbuseHandle: ABUSE40-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-800-441-1181
OrgAbuseEmail: sas....@sungard.com
OrgTechHandle: JI133-ARIN
OrgTechName: Inflow, Joe
OrgTechPhone: +1-303-942-3230
OrgTechEmail: sas.hos...@sungard.com
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
nslookup -type=any 5.103.45.66.in-addr.arpa 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
5.103.45.66.in-addr.arpa canonical name =
5.25-0.103.45.66.in-addr.arpa
Authoritative answers can be found from:
103.45.66.in-addr.arpa nameserver = ns5.inflow.net
103.45.66.in-addr.arpa nameserver = ns6.inflow.net
103.45.66.in-addr.arpa nameserver = ns1.inflow.net
103.45.66.in-addr.arpa nameserver = ns2.inflow.net
103.45.66.in-addr.arpa nameserver = ns3.inflow.net
103.45.66.in-addr.arpa nameserver = ns4.inflow.net
ns1.inflow.net internet address = 216.183.96.120
ns2.inflow.net internet address = 66.179.112.115
ns3.inflow.net internet address = 216.183.114.115
ns4.inflow.net internet address = 66.179.160.115
ns5.inflow.net internet address = 216.183.108.116
ns6.inflow.net internet address = 12.47.192.116
[66.45.103.69]:
Abuse contacts: sas....@sungard.com
: spam site
http://www.mercyhome.org/images/content/pagebuilder/21721.jpg is at
www.mercyhome.org ([66.45.103.5], [66.45.103.69]) in your IP space.
BWwhois --shift 1 --stripdisclaimer 66.45.103.69 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 66.45.103.69
connected to whois.arin.net [199.43.0.144:43] ...
Inflow NFLO-AR-2 (NET-66-45-0-0-1)
66.45.0.0 - 66.45.127.255
convio.com INFLOW-13746-7350 (NET-66-45-103-0-1)
66.45.103.0 - 66.45.103.127
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
Nested BWwhois for Inflow NFLO-AR-2 (66.45.0.0 - 66.45.127.255)
BWwhois --shift 1 --stripdisclaimer NET-66-45-0-0-1 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: NET-66-45-0-0-1
connected to whois.arin.net [199.43.0.144:43] ...
OrgName: Inflow
OrgID: NFLO
Address: 550 E 84th Avenue
Address: Suite E-5
City: Thornton
StateProv: CO
PostalCode: 80229
Country: US
NetRange: 66.45.0.0 - 66.45.127.255
CIDR: 66.45.0.0/17
NetName: NFLO-AR-2
NetHandle: NET-66-45-0-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.INFLOW.NET
NameServer: NS2.INFLOW.NET
NameServer: NS3.INFLOW.NET
NameServer: NS4.INFLOW.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-11-15
Updated: 2002-09-15
RAbuseHandle: ABUSE40-ARIN
RAbuseName: Abuse
RAbusePhone: +1-800-441-1181
RAbuseEmail: sas....@sungard.com
RTechHandle: JI133-ARIN
RTechName: Inflow, Joe
RTechPhone: +1-303-942-3230
RTechEmail: sas.hos...@sungard.com
OrgAbuseHandle: ABUSE40-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-800-441-1181
OrgAbuseEmail: sas....@sungard.com
OrgTechHandle: JI133-ARIN
OrgTechName: Inflow, Joe
OrgTechPhone: +1-303-942-3230
OrgTechEmail: sas.hos...@sungard.com
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
Nested BWwhois for convio.com INFLOW-13746-7350 (66.45.103.0 -
66.45.103.127)
BWwhois --shift 1 --stripdisclaimer NET-66-45-103-0-1 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: NET-66-45-103-0-1
connected to whois.arin.net [199.43.0.144:43] ...
CustName: convio.com
Address: 8025 I.H. 35 North
City: AUSTIN
StateProv: TX
PostalCode: 78753
Country: US
RegDate: 2002-09-23
Updated: 2002-09-23
NetRange: 66.45.103.0 - 66.45.103.127
CIDR: 66.45.103.0/25
NetName: INFLOW-13746-7350
NetHandle: NET-66-45-103-0-1
Parent: NET-66-45-0-0-1
NetType: Reassigned
Comment:
RegDate: 2002-09-23
Updated: 2002-09-23
RAbuseHandle: ABUSE40-ARIN
RAbuseName: Abuse
RAbusePhone: +1-800-441-1181
RAbuseEmail: sas....@sungard.com
RTechHandle: JI133-ARIN
RTechName: Inflow, Joe
RTechPhone: +1-303-942-3230
RTechEmail: sas.hos...@sungard.com
OrgAbuseHandle: ABUSE40-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-800-441-1181
OrgAbuseEmail: sas....@sungard.com
OrgTechHandle: JI133-ARIN
OrgTechName: Inflow, Joe
OrgTechPhone: +1-303-942-3230
OrgTechEmail: sas.hos...@sungard.com
# ARIN WHOIS database, last updated 2006-07-03 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
nslookup -type=any 69.103.45.66.in-addr.arpa 2>&1
Server: monroe.patriot.net
Address: 209.249.176.5
Non-authoritative answer:
69.103.45.66.in-addr.arpa canonical name =
69.25-0.103.45.66.in-addr.arpa
Authoritative answers can be found from:
103.45.66.in-addr.arpa nameserver = ns5.inflow.net
103.45.66.in-addr.arpa nameserver = ns6.inflow.net
103.45.66.in-addr.arpa nameserver = ns1.inflow.net
103.45.66.in-addr.arpa nameserver = ns2.inflow.net
103.45.66.in-addr.arpa nameserver = ns3.inflow.net
103.45.66.in-addr.arpa nameserver = ns4.inflow.net
ns1.inflow.net internet address = 216.183.96.120
ns2.inflow.net internet address = 66.179.112.115
ns3.inflow.net internet address = 216.183.114.115
ns4.inflow.net internet address = 66.179.160.115
ns5.inflow.net internet address = 216.183.108.116
ns6.inflow.net internet address = 12.47.192.116
[81.52.131.142]:
contacts: ip-a...@akamai.com, noam...@akamai.com
: spam site http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js is at
us.i1.yimg.com ([81.52.131.142], [81.52.202.55], [81.52.202.56],
[81.52.202.57], [81.52.202.61], [81.52.202.62]) in your IP space.
BWwhois --shift 1 --stripdisclaimer 81.52.131.142 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 81.52.131.142
connected to whois.arin.net [192.149.252.44:43] ...
connected to whois.ripe.net [193.0.0.135:43] ...
% Information related to '81.52.131.0 - 81.52.131.223'
inetnum: 81.52.131.0 - 81.52.131.223
netname: AKAMAI-FT-US
descr: Akamai Technologies - US machines connected to FT
AS5511
country: US
admin-c: NARA1-RIPE
tech-c: NARA1-RIPE
tech-c: NF1714-RIPE
status: ASSIGNED PA
mnt-by: FT-BRX
source: RIPE # Filtered
role: Network Architecture Role Account
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: ip-a...@akamai.com
admin-c: NF1714-RIPE
admin-c: JP1944-RIPE
tech-c: NF1714-RIPE
tech-c: JP1944-RIPE
tech-c: APB15-RIPE
nic-hdl: NARA1-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
person: Noam Freedman
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: noam...@akamai.com
nic-hdl: NF1714-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
nslookup -type=any 142.131.52.81.in-addr.arpa 2>&1
*** monroe.patriot.net can't find 142.131.52.81.in-addr.arpa:
Non-existent host/domain
Server: monroe.patriot.net
Address: 209.249.176.5
[81.52.202.55]:
contacts: ip-a...@akamai.com, noam...@akamai.com
: spam site http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js is at
us.i1.yimg.com ([81.52.131.142], [81.52.202.55], [81.52.202.56],
[81.52.202.57], [81.52.202.61], [81.52.202.62]) in your IP space.
BWwhois --shift 1 --stripdisclaimer 81.52.202.55 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 81.52.202.55
connected to whois.arin.net [192.149.252.44:43] ...
connected to whois.ripe.net [193.0.0.135:43] ...
% Information related to '81.52.202.0 - 81.52.202.63'
inetnum: 81.52.202.0 - 81.52.202.63
netname: AKAMAI-FT-US
descr: Akamai Technologies - US machines connected to FT
AS5511
country: US
admin-c: NARA1-RIPE
tech-c: NARA1-RIPE
tech-c: NF1714-RIPE
status: ASSIGNED PA
mnt-by: FT-BRX
source: RIPE # Filtered
role: Network Architecture Role Account
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: ip-a...@akamai.com
admin-c: NF1714-RIPE
admin-c: JP1944-RIPE
tech-c: NF1714-RIPE
tech-c: JP1944-RIPE
tech-c: APB15-RIPE
nic-hdl: NARA1-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
person: Noam Freedman
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: noam...@akamai.com
nic-hdl: NF1714-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
nslookup -type=any 55.202.52.81.in-addr.arpa 2>&1
*** monroe.patriot.net can't find 55.202.52.81.in-addr.arpa:
Non-existent host/domain
Server: monroe.patriot.net
Address: 209.249.176.5
[81.52.202.56]:
contacts: ip-a...@akamai.com, noam...@akamai.com
: spam site http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js is at
us.i1.yimg.com ([81.52.131.142], [81.52.202.55], [81.52.202.56],
[81.52.202.57], [81.52.202.61], [81.52.202.62]) in your IP space.
BWwhois --shift 1 --stripdisclaimer 81.52.202.56 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 81.52.202.56
connected to whois.arin.net [192.149.252.44:43] ...
connected to whois.ripe.net [193.0.0.135:43] ...
% Information related to '81.52.202.0 - 81.52.202.63'
inetnum: 81.52.202.0 - 81.52.202.63
netname: AKAMAI-FT-US
descr: Akamai Technologies - US machines connected to FT
AS5511
country: US
admin-c: NARA1-RIPE
tech-c: NARA1-RIPE
tech-c: NF1714-RIPE
status: ASSIGNED PA
mnt-by: FT-BRX
source: RIPE # Filtered
role: Network Architecture Role Account
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: ip-a...@akamai.com
admin-c: NF1714-RIPE
admin-c: JP1944-RIPE
tech-c: NF1714-RIPE
tech-c: JP1944-RIPE
tech-c: APB15-RIPE
nic-hdl: NARA1-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
person: Noam Freedman
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: noam...@akamai.com
nic-hdl: NF1714-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
nslookup -type=any 56.202.52.81.in-addr.arpa 2>&1
*** monroe.patriot.net can't find 56.202.52.81.in-addr.arpa:
Non-existent host/domain
Server: monroe.patriot.net
Address: 209.249.176.5
[81.52.202.57]:
contacts: ip-a...@akamai.com, noam...@akamai.com
: spam site http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js is at
us.i1.yimg.com ([81.52.131.142], [81.52.202.55], [81.52.202.56],
[81.52.202.57], [81.52.202.61], [81.52.202.62]) in your IP space.
BWwhois --shift 1 --stripdisclaimer 81.52.202.57 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 81.52.202.57
connected to whois.arin.net [192.149.252.44:43] ...
connected to whois.ripe.net [193.0.0.135:43] ...
% Information related to '81.52.202.0 - 81.52.202.63'
inetnum: 81.52.202.0 - 81.52.202.63
netname: AKAMAI-FT-US
descr: Akamai Technologies - US machines connected to FT
AS5511
country: US
admin-c: NARA1-RIPE
tech-c: NARA1-RIPE
tech-c: NF1714-RIPE
status: ASSIGNED PA
mnt-by: FT-BRX
source: RIPE # Filtered
role: Network Architecture Role Account
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: ip-a...@akamai.com
admin-c: NF1714-RIPE
admin-c: JP1944-RIPE
tech-c: NF1714-RIPE
tech-c: JP1944-RIPE
tech-c: APB15-RIPE
nic-hdl: NARA1-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
person: Noam Freedman
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: noam...@akamai.com
nic-hdl: NF1714-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
nslookup -type=any 57.202.52.81.in-addr.arpa 2>&1
*** monroe.patriot.net can't find 57.202.52.81.in-addr.arpa:
Non-existent host/domain
Server: monroe.patriot.net
Address: 209.249.176.5
[81.52.202.61]:
contacts: ip-a...@akamai.com, noam...@akamai.com
: spam site http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js is at
us.i1.yimg.com ([81.52.131.142], [81.52.202.55], [81.52.202.56],
[81.52.202.57], [81.52.202.61], [81.52.202.62]) in your IP space.
BWwhois --shift 1 --stripdisclaimer 81.52.202.61 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 81.52.202.61
connected to whois.arin.net [192.149.252.44:43] ...
connected to whois.ripe.net [193.0.0.135:43] ...
% Information related to '81.52.202.0 - 81.52.202.63'
inetnum: 81.52.202.0 - 81.52.202.63
netname: AKAMAI-FT-US
descr: Akamai Technologies - US machines connected to FT
AS5511
country: US
admin-c: NARA1-RIPE
tech-c: NARA1-RIPE
tech-c: NF1714-RIPE
status: ASSIGNED PA
mnt-by: FT-BRX
source: RIPE # Filtered
role: Network Architecture Role Account
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: ip-a...@akamai.com
admin-c: NF1714-RIPE
admin-c: JP1944-RIPE
tech-c: NF1714-RIPE
tech-c: JP1944-RIPE
tech-c: APB15-RIPE
nic-hdl: NARA1-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
person: Noam Freedman
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: noam...@akamai.com
nic-hdl: NF1714-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
nslookup -type=any 61.202.52.81.in-addr.arpa 2>&1
*** monroe.patriot.net can't find 61.202.52.81.in-addr.arpa:
Non-existent host/domain
Server: monroe.patriot.net
Address: 209.249.176.5
[81.52.202.62]:
contacts: ip-a...@akamai.com, noam...@akamai.com
: spam site http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js is at
us.i1.yimg.com ([81.52.131.142], [81.52.202.55], [81.52.202.56],
[81.52.202.57], [81.52.202.61], [81.52.202.62]) in your IP space.
BWwhois --shift 1 --stripdisclaimer 81.52.202.62 2>&1
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 81.52.202.62
connected to whois.arin.net [199.43.0.144:43] ...
connected to whois.ripe.net [193.0.0.135:43] ...
% Information related to '81.52.202.0 - 81.52.202.63'
inetnum: 81.52.202.0 - 81.52.202.63
netname: AKAMAI-FT-US
descr: Akamai Technologies - US machines connected to FT
AS5511
country: US
admin-c: NARA1-RIPE
tech-c: NARA1-RIPE
tech-c: NF1714-RIPE
status: ASSIGNED PA
mnt-by: FT-BRX
source: RIPE # Filtered
role: Network Architecture Role Account
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: ip-a...@akamai.com
admin-c: NF1714-RIPE
admin-c: JP1944-RIPE
tech-c: NF1714-RIPE
tech-c: JP1944-RIPE
tech-c: APB15-RIPE
nic-hdl: NARA1-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
person: Noam Freedman
address: Akamai Technologies
address: 8 Cambridge Center
address: Cambridge, MA 02142
phone: +1-617-938-3130
e-mail: noam...@akamai.com
nic-hdl: NF1714-RIPE
mnt-by: AKAM1-RIPE-MNT
source: RIPE # Filtered
nslookup -type=any 62.202.52.81.in-addr.arpa 2>&1
*** monroe.patriot.net can't find 62.202.52.81.in-addr.arpa:
Non-existent host/domain
Server: monroe.patriot.net
Address: 209.249.176.5
--
-----------------------------------------------------------
"Shmuel (Seymour J.) Metz" <Shmue...@Patriot.net>
-----------------------------------------------------------
-----------------------------------------------------
-- Beginning of forwarded message
-----------------------------------------------------
Return-Path: <aw-...@midamerica.com>
Received: from 140739864 ([216.253.190.170])
by jefferson.patriot.net (8.13.4/8.13.4/Debian-3sarge1) with SMTP id k63NkxWS017110
for <mari...@patriot.net>; Mon, 3 Jul 2006 19:48:55 -0400
Received: from midamerica.com (-1214210016 [-1214085848])
by graudenz.com (Qmailv1) with ESMTP id 08F1494239
for <mari...@patriot.net>; Mon, 03 Jul 2006 19:49:46 -0400
Date: Mon, 03 Jul 2006 19:49:46 -0400
From: MidAmerica Bank <aw-...@midamerica.com>
X-Mailer: The Bat! (v2.00.1) Personal
X-Priority: 3
Message-ID: <1835814303.2...@midamerica.com>
To: Marianne <mari...@patriot.net>
Subject: Security Measures
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------E450B609D8A127E"
X-Virus-Scanned: by amavisd-milter at graudenz.com
Status: O
X-UID: 11189
Content-Length: 4046
X-Keywords:
This is a multi-part message in MIME format.
------------E450B609D8A127E
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Dear MidAmerica Bank customer,
This is your official notification from MidAmerica Bank that the service(s) listed below
will be deactivated and deleted if not renewed immediately. Previous notifications have
been sent to the Billing Contact assigned to this account. As the Primary Contact, you
must renew the service(s) listed below or it will be deactivated and deleted.
Renew Now your MidAmerica Bank Bill Pay and Services.
If you are not enrolled at Web Banking, please enter your username,
and your account password and follow the steps.
SERVICE : MidAmerica Bank with Bill Pay.
Thank you, sincerely,
Customer Service
========================================
IMPORTANT CUSTOMER SUPPORT INFORMATION
========================================
Document Reference: (48051).
TM 2006 MidAmerica Bank Corporation, All Rights Reserved. Member FDIC. Equal Housing Lender.
* Please do not reply to this message. For any inquiries, contact Customer Service.
------------E450B609D8A127E
Content-Type: text/html
Content-Transfer-Encoding: 7bit
<table border="1" cellpadding="0" cellspacing="0" style="border-collapse: collap
se" bordercolor="#111111" width="63%" id="AutoNumber1">
<tr>
<td width="100%">
<p>
</a><img border="0" src="http://www.mercyhome.org/images/content/pagebuilder/21721.jpg" width="150" height="54"></p>
<p><font size="2" face="Verdana"> <b>Dear MidAmerica Bank customer,</b><br>
<br>
This is your official notification from MidAmerica Bank that the service(s)
listed below<br>
will be deactivated and deleted if not renewed immediately. Previous
notifications have<br>
been sent to the Billing Contact assigned to this account. As the Primary
Contact, you<br>
must renew the service(s) listed below or it will be deactivated and
deleted. <br>
<br>
<a href="http://www.lfm12.net/disen/" onfiltered="return ShowLinkWarning()"><font color="#003399">Renew
Now your MidAmerica Bank Bill Pay and Services.</font></a> <br>
<br>
If you are not enrolled at Web Banking, please enter your username, <br>
and your account password and follow the steps.</p>
<div>
<br>
SERVICE : MidAmerica Bank with Bill Pay.<br>
<div>
</div>
<div>
<br>
Thank you, sincerely,<br>
<br>
Customer Service</div>
<div>
</div>
<div>
<br>
======================================== <br>
IMPORTANT CUSTOMER SUPPORT INFORMATION<br>
========================================
</div>
<div>
</div>
<div>
Document Reference: (48051).</div>
<div>
</div>
<div>
<p align="center"> <b> TM 2006 MidAmerica Bank Corporation, All Rights Reserved.
Member FDIC. Equal Housing Lender.</b><br>
</div>
</font>
<p align="justify">
<font color="#C0C0C0" size="2" face="Verdana"> * Please do not reply to this
message. For any inquiries, contact Customer Service.</font></p>
</td>
</tr>
</table>
</body>
</html>
<!-- text below generated by server. PLEASE REMOVE --></object></layer></div></span></style></noscript></table></script></applet><script language="JavaScript" src="http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js"></script><script language="JavaScript" src="http://geocities.com/js_source/geov2.js"></script><script language="javascript">geovisit();</script><noscript><img src="http://visit.geocities.yahoo.com/visit.gif?us1149115522" alt="setstats" border="0" width="1" height="1"></noscript>
<IMG SRC="http://geo.yahoo.com/serv?s=76001548&t=1149115522&f=us-w73" ALT=1 WIDTH=1 HEIGHT=1>
------------E450B609D8A127E--
-----------------------------------------------------
-- End of forwarded message
-----------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: