[email] [drugs - Canadian Pharmacy botnet] [189.158.27.119] (boardpattern.hk / chitionkdetunlionpsa.com / fionkunjerunhedase.com / gedsactunjerion.com / piotiongandesunkdes.com) Re:
TomezNet
IP 189.158.27.119 dsl-189-158-27-119.prod-infinitum.com.mx
(at uninet.net.mx)
Spamvert:
boardpattern.hk => botnet
boardpattern.hk Resolved to 61.93.121.70 to 61.238.167.250 to
65.61.75.31 to 66.176.228.249 to 75.39.167.243 to 82.141.121.195 to
89.169.143.5 to 89.178.121.28 to 89.178.173.51 to 194.249.87.205 to
210.6.96.17 to 210.6.183.109 to 218.254.100.35 to 221.126.89.142 to
221.127.167.23
WEB:
© Copyright Canadian Pharmacy, 2003-2007. All Rights Reserved.
Much More Canadian Pharmacy sightings:
http://groups.google.com/groups/search?q=%22Canadian+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
Plenty of Forged Certificates and logos as always.
Much More info below:
====================
Return-Path: <suckle...@wor710.com>
Delivered-To: [MUNGED]
X-Spam-Flag: YES
Received: (qmail 7586 invoked from network); 24 Jun 2007 17:46:30
-0400
Received: from dsl-189-158-27-119.prod-infinitum.com.mx
(189.158.27.119)
by [MUNGED] with SMTP; 24 Jun 2007 17:46:30 -0400
Return-Path: <suckle...@wor710.com>
Received: from 198.66.222.76 (HELO mail.wor710.com)
by [MUNGED] with esmtp ()=4AC8H2W0( 5X/7)
id <;/-)V-,//0C'-T5
for [MUNGED]; Sun, 24 Jun 2007 21:46:32 +0360
From: "Paule Wessel" <suckle...@wor710.com>
To: <[MUNGED]>
Subject: *****SPAM***** Re:
Date: Sun, 24 Jun 2007 21:46:32 +0360
Message-ID: <01c7b6a9$214d97d0$6c822ecf@sucklesdimes>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C7B67F.38778FD0"
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
Thread-Index: Aca6Q9'G73VAJFA4-;/H.2,4,ED(9(==
X-Spam-Prev-Subject: Re:
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html;
charset=iso-8859-2">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
</head>
<body>
<BODY text=#000000 bgColor=#ffffff>
<font size="3" face="Times New Roman"><p align="center"><font
color="#0000ff" size="6"><strong>VIAGRA
</strong>
</font>
</p>
<p align="center">If you have a problem getting
or keeping an
erection, your sex life can suffer.
<br />You should know that
you’re
not alone.
In fact, more than half
of all men over 40
<br/>have difficulties getting
or maintaining an erection.
This issue occurs with younger men as well!
</p>
<p align="center">You should know there is
something you can do about
it.
<br />Join the millions of men who have already
<strong>improved
their sex lives with VIAGRA
</strong>!</p>
<p align="center"><a href="http://boardpattern.hk">
<font size="4"><strong>VISIT STORE ONLINE!
</strong>
</font></a></p>
</font>
</BODY>
</body>
</html>
-- END OF SPAM --
WEB:
Licensed by The College of Pharmacists of British Columbia.
If you have any questions or concerns you can contact the college at
200-1765 West 8th Ave. Vancouver, BC, Canada V6J 5C6
You may contact us at +1(210) 787-1711, please, keep your order I.D.
every time you make a call.
© Copyright Canadian Pharmacy, 2003-2007. All Rights Reserved.
Contact us:
Also you may send us an e-mail.
You will get an answer ASAP. Customer Support (click here to mail us
sup...@canadianpharmsupport.com)
See support[]canadianpharmsupport.com sightings"
http://groups.google.com/groups/search?q=%22support%40canadianpharmsupport.com%22+group%3A*abuse&qt_s=Search
See:
IP 189.158.27.119 dsl-189-158-27-119.prod-infinitum.com.mx
http://www.moensted.dk/spam/?addr=189.158.27.119
http://www.spamhaus.org/query/bl?ip=189.158.27.119
http://www.spamhaus.org/pbl/query/PBL128208
http://cbl.abuseat.org/lookup.cgi?ip=189.158.27.119
http://www.apews.org/?page=test&C=130&E=211353&ip=189.158.27.119
More prod-infinitum.com.mx sightings:
http://groups.google.com/groups/search?q=prod-infinitum.com.mx+group%3A*abuse&start=0&scoring=d&
inetnum: 189.128/11
status: reallocated
owner: Uninet S.A. de C.V.
ownerid: MX-USCV4-LACNIC
responsible: Gestión de cambios y configuraciones
address: Periferico Sur, 3190,
address: 01900 - Ciudad de México - DF
country: MX
postmaster and abuse[]prod-infinitum.com.mx are listed in rfc-
ignorant.org database
whois, postmaster and abuse[]UNINET.NET.MX are listed in rfc-
ignorant.org database
Prefix: 189.158.0.0/19
Prefix Name: error
AS: 8151
AS Name: MX-USCV5-LACNIC UniNet S.A. de C.V.
http://www.cidr-report.org/cgi-bin/as-report?as=8151
3 SBL listings for IPs under the responsibility of prod-
infinitum.com.mx
http://www.spamhaus.org/sbl/listings.lasso?isp=prod-infinitum.com.mx
21 SBL/ROKSO listings for IPs under the responsibility of
uninet.net.mx
http://www.spamhaus.org/SBL/listings.lasso?isp=uninet.net.mx
See:
boardpattern.hk => botnet
boardpattern.hk Resolved to 61.93.121.70 to 61.238.167.250 to
65.61.75.31 to 66.176.228.249 to 75.39.167.243 to 82.141.121.195 to
89.169.143.5 to 89.178.121.28 to 89.178.173.51 to 194.249.87.205 to
210.6.96.17 to 210.6.183.109 to 218.254.100.35 to 221.126.89.142 to
221.127.167.23
NS0.GEDSACTUNJERION.COM [NO GLUE; No A record]
NS0.FIONKUNJERUNHEDASE.COM [NO GLUE; No A record]
NS0.PIOTIONGANDESUNKDES.COM [NO GLUE; No A record]
NS0.CHITIONKDETUNLIONPSA.COM [NO GLUE; No A record]
a 203.186.31.188(HK) 203186031188.ctinets.com
a 210.6.132.179(HK) 210006132179.ctinets.com
a 210.6.183.109(HK) 210006183109.ctinets.com
a 210.6.96.17(HK) 210006096017.ctinets.com
a 218.190.114.204(HK)
a 221.126.89.142(HK)
a 221.127.167.23(HK)
a 222.166.66.205(HK) cm222-166-66-205.hkcable.com.hk
a 24.127.246.103(US) c-24-127-246-103.hsd1.fl.comcast.net
a 59.188.129.222(HK)
a 66.176.228.249(US) c-66-176-228-249.hsd1.fl.comcast.net
a 70.251.101.77(US) ppp-70-251-101-77.dsl.rcsntx.swbell.net
a 75.39.167.243(US) adsl-75-39-167-243.dsl.irvnca.sbcglobal.net
a 82.141.121.195(FI) adsl-82-141-121-195.kotinet.com
a 89.169.143.5(RU)
ns ns0.chitionkdetunlionpsa.com 76.104.139.174(US)
ns ns0.fionkunjerunhedase.com 208.120.41.135(US)
ns ns0.gedsactunjerion.com 69.229.238.218(US)
ns ns0.piotiongandesunkdes.com 24.238.187.40(US)
76.104.139.174 = c-76-104-139-174.hsd1.wa.comcast.net
208.120.41.135 = user-387gac7.cable.mindspring.com
69.229.238.218 = adsl-69-229-238-218.dsl.scrm01.pacbell.net
24.238.187.40 = user-0cetep8.cable.mindspring.com
Let see whois:
Domain Name: BOARDPATTERN.HK
Contract Version: HKDNR latest version
Registrant Contact Information:
Holder English Name (It should be the same as your legal name on your
HKID card or other relevant documents): MR TIM FLOCK
Holder Chinese Name:
Email: josephi...@yahoo.com
Domain Name Commencement Date: 21-06-2007
Country: US
Expiry Date: 21-06-2008
Re-registration Status: Complete
Name of Registrar: HKDNR
Account Name: HK1917034T
Technical Contact:
First name: TIM
Last name: FLOCK
Company Name: TIM FLOCK
Name Servers Information:
NS0.FIONKUNJERUNHEDASE.COM
NS0.GEDSACTUNJERION.COM
NS0.PIOTIONGANDESUNKDES.COM
NS0.CHITIONKDETUNLIONPSA.COM
More boardpattern.hk sightings:
http://groups.google.com/groups/search?q=boardpattern.hk+group%3A*abuse&qt_s=Search
SEE Also more NS sightings:
More chitionkdetunlionpsa.com sightings:
http://groups.google.com/groups/search?q=chitionkdetunlionpsa.com+group%3A*abuse&start=0&scoring=d&
More fionkunjerunhedase.com sightings:
http://groups.google.com/groups/search?q=fionkunjerunhedase.com+group%3A*abuse&start=0&scoring=d&
More gedsactunjerion.com sightings:
http://groups.google.com/groups/search?q=gedsactunjerion.com+group%3A*abuse&start=0&scoring=d&
More piotiongandesunkdes.com sightings:
http://groups.google.com/groups/search?q=piotiongandesunkdes.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/a0e349c86d831623
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: