Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [software piracy] [24.218.255.71] (nemudnasdak.com / laga-soft.com) For Info

0 views

Skip to first unread message

TomezNet

unread,

May 31, 2007, 5:30:21 AM5/31/07

Received From:
IP 24.218.255.71 c-24-218-255-71.hsd1.ma.comcast.net
(at comcast.com)

Spamvert:
nemudnasdak.com IP 203.223.150.35
(SBL54929 - SBL54986 / ROK4932) (at aims.com.my)

See More the same spammer Downloadable Software (DS) sightings:
http://groups.google.com/groups/search?q=%22Downloadable+Software+(DS)%22+group%3A*abuse&start=0&scoring=d&

Received at an address harvested from this abuse group.

More info below:
====================

Return-Path: <oviparoustr...@riversidecc.org>
Delivered-To: [MUNGED]
Received: (qmail 22303 invoked from network); 28 May 2007 09:57:02
-0400
Received: from c-24-218-255-71.hsd1.ma.comcast.net (24.218.255.71)
by [MUNGED] with SMTP; 28 May 2007 09:57:02 -0400
Return-Path: <oviparoustr...@riversidecc.org>
Received: from 66.2.90.67 (HELO mail.riversidecc.org)
by [MUNGED] with (8.93.9/8.69.3) ESMTP id byb5cdnjmkxznz
for [MUNGED]; Mon, 28 May 2007 13:57:01 +0300
Received: from rvwr.fiovde.pt ([44.221.46.19])
by ojrh.fiovde.pt (3.21.9.20062208/5.76.9) with ESMTP id
t7Q73y1j802660
for [MUNGED]; Mon, 28 May 2007 13:57:01 +0300
From: "Monet Mendoza" <oviparoustr...@riversidecc.org>
To: <[MUNGED]>
Subject: For Info
Date: Mon, 28 May 2007 13:57:01 +0300
Message-ID: <01c7a130$10b136e0$6c822ecf@oviparoustranscendental>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C7A10E.899F96E0"
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Thread-Index: Aca6QI'3369ACCAOGOJ3(2OS-.A44@==
X-Spam-Prev-Subject: For Info

<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html;
charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
</head>
<body>
<body>
Downloadable Software (DS) is a rapidly growing
company providing high quality software. You've come
to the right place if you need professionally implemented programming
solutions for your usage. Thousands of satisfied customers have already benefited from our software and solutions.
Hundreds are joining this community every day. 
We deliver superior software products and services that empower our
partners and customers to dramatically improve their development,
deployment, integration and management of quality applications
worldwide.
<a href="http://nemudnasdak.com/">VIEW ALL PRODUCTS</a>
Most popular OEM products:
Microsoft Windows Vista Business 
Retail Price $299.00 
Our $79.95
Microsoft Office 2007 Enterprise 
Retail Price $899.00 
Our $79.95
Macromedia Dreamweaver 8 
Retail Price $399.99 
Our $49.95
Adobe Creative Suite 3 Design Premium for Windows
 
Retail Price $1799.00 
Our $269.90
Microsoft Office 2003 Professional with Business Contact
Manager for Outlook 
Retail Price $550.00 
Our $69.95
Adobe Illustrator CS2 
Retail Price $499.00 
Our $59.95 
Adobe Premiere 2.0 
Retail Price $849.00 
Our $59.95 
CorelDraw Graphics Suite X3 
Retail Price $399.00 
Our $59.95 
Macromedia Studio 8 
Retail Price 999.00 
Our 99.95 
Autodesk AutoCAD 2007 
Retail Price $3995.00 
Our $129.95
Intuit QuickBooks 2006 Premier Edition 
Retail Price $399.95 
Our $69.95 
Avid Liquid Pro 7 
Retail Price $999.00 
Our $69.95
Adobe Acrobat 8.0 Professional 
Retail Price $449.00 
Our $79.95
Microsoft Money Home & Business 7 
Retail Price $89.90 
Our $39.95 
MS Windows XP Professional with SP2 
Retail Price $269.99 
Our $49.95
Adobe Photoshop CS2 V 9.0 
Retail Price $599.00 
Our $69.95 
Micrīsoft Office XP Professional 
Retail Price $499.00 
Our $49.95
<a href="http://nemudnasdak.com/">VIEW ALL PRODUCTS</a>
</body>
</body>
</html>

-- END OF SPAM --

See Much More the same spammer sightings:
http://groups.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&

See:
IP 24.218.255.71 c-24-218-255-71.hsd1.ma.comcast.net

http://www.moensted.dk/spam/?addr=24.218.255.71
http://www.spamhaus.org/query/bl?ip=24.218.255.71
http://cbl.abuseat.org/lookup.cgi?ip=24.218.255.71

More comcast.net sightings:
http://groups.google.com/groups/search?q=comcast.net+group%3A*abuse&start=0&scoring=d&

Comcast Cable Communications Holdings, Inc RW2-NORTHEAST-5
(NET-24-218-0-0-1)
24.218.0.0 - 24.218.255.255
Comcast Cable Communications Holdings, Inc. BOSTON-4
(NET-24-218-0-0-2)
24.218.0.0 - 24.218.255.255

CustName: Comcast Cable Communications Holdings, Inc
NetRange: 24.218.0.0 - 24.218.255.255
CIDR: 24.218.0.0/16
NetName: BOSTON-4
NetHandle: NET-24-218-0-0-2
Parent: NET-24-218-0-0-1
NetType: Reassigned

route: 24.218.128.0/17
descr: Comcast Cable Communications, Inc.
1800 Bishops Gate Blvd
Mt Laurel, NJ 08054
origin: AS7015
mnt-by: MNT-CMCS
changed: tony_...@cable.comcast.net
changed: tony_...@spam-free.cable.comcast.com
http://www.cidr-report.org/cgi-bin/as-report?as=7015

28 SBL/ROKSO listings for IPs under the responsibility of comcast.net
http://www.spamhaus.org/sbl/listings.lasso?isp=comcast.net

See:
nemudnasdak.com IP 203.223.150.35
ns1.laga-soft.com [121.31.56.23] [TTL=172800] [CN]
ns2.laga-soft.com [203.223.150.35] [TTL=172800] [MY]

NS records at your nameservers are:
ns1.nemudnasdak.com [203.223.150.35] [TTL=3600]
ns2.nemudnasdak.com [203.223.150.35] [TTL=3600]

SOA record [TTL=2560] is:
Primary nameserver: ns1.nemudnasdak.com
Hostmaster E-mail address: hostm...@nemudnasdak.com
Serial #: 1180517287

1 MX record is:
10 mail.nemudnasdak.com [TTL=3600] IP=172.31.32.250 [TTL=3600] [*I]

IP: 172.31.32.250
Reverse:
Aliases:
mail.flodiny.com
mail.laga-soft.com
mail.neholnasdak.com
mail.nemudnasdak.com
mail.razdeltruda.com
Prefix: 172.16.0.0/12

http://www.moensted.dk/spam/?addr=203.223.150.35
http://www.spamhaus.org/query/bl?ip=203.223.150.35

More 203.223.150.35 sightings:
http://groups.google.com/groups/search?q=203.223.150.35+group%3A*abuse&qt_s=Search

inetnum: 203.223.128.0 - 203.223.159.255
netname: AIMS-MY
descr: Applied Information Management Services
descr: Kuala Lumper Malaysia
country: MY
person: Cong Jen Paul Ooi
nic-hdl: CP423-AP
address: Applied Information Management Services Sdn Bhd (AIMS)
address: Ground Floor, Menara Aik Hua,
address: Cangkat Raja Chulan, 50200, Kuala Lumpur,
address: Malaysia
phone: +603-2031-4988
fax-no: +603-2031-8948
country: MY
changed: paul...@aims.com.my
person: Kanagaraj Krishna
nic-hdl: KK790-AP
e-mail: n...@aims.com.my
address: Ground Floor, Menara Aik Hua
address: Cangkat Raja Chulan
address: 50200 Kuala Lumpur
phone: +603 20314988
fax-no: +603 20318948
country: MY
changed: kana...@aims.com.my
e-mail: ab...@aims.com.my => ???

postmaster and abuse[]aims.com.my are listed in rfc-ignorant.org
database

Prefix: 203.223.128.0/19
Aliases on the same ip:
flodiny.com
ns1.flodiny.com
ns2.flodiny.com
laga-soft.com
*.laga-soft.com
ns2.laga-soft.com
neholnasdak.com
ns1.neholnasdak.com
ns2.neholnasdak.com
ns1.nemudnasdak.com
razdeltruda.com
ns1.razdeltruda.com
ns2.razdeltruda.com
ns2.sobaka-soft.com
mail.locu.st
ns1.locu.st
ns2.locu.st
Prefix Name: HGC Asia Netcom (proxy registered route object) BtN
Customer Applied Information Management Services Sdn Bhd Contact: kh
chiew@aims com my REACH (Customer Route)
AS: 17992
AS Name: AIMS AP Applied Information Management Services Kuala Lumpur,
Malaysia
http://www.cidr-report.org/cgi-bin/as-report?as=17992

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54929
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54986
203.223.150.35/32 is listed on the Spamhaus Block List (SBL/ROKSO)

27-May-2007 06:29 GMT | SR02

Leo Kuvayev / BadCow.
Downloadable Software

5 SBL/ROKSO listings for IPs under the responsibility of aims.com.my
http://www.spamhaus.org/SBL/listings.lasso?isp=aims.com.my

Let see whois:
Domain name: nemudnasdak.com

Registrant Contact:
-
Alex Rodrigez domains[]locu.st
+358-30-5563 fax:
po box 445
Laapentranta Laapentranta 12700
fi

Administrative Contact:
Alex Rodrigez dom...@locu.st
+358-30-5563 fax:
po box 445
Laapentranta Laapentranta 12700
fi

Technical Contact:
Alex Rodrigez dom...@locu.st
+358-30-5563 fax:
po box 445
Laapentranta Laapentranta 12700
fi

Billing Contact:
Alex Rodrigez dom...@locu.st
+358-30-5563 fax:
po box 445
Laapentranta Laapentranta 12700
fi

DNS:
ns1.laga-soft.com
ns2.laga-soft.com

Created: 2007-05-10
Expires: 2008-05-10

More nemudnasdak.com sightings:
http://groups.google.com/groups/search?q=nemudnasdak.com+group%3A*abuse&qt_s=Search

See:
ns1.laga-soft.com IP 121.31.56.23

ns1.laga-soft.com has no MX records -> [laga-soft.com has 1 MX record
mail.laga-soft.com (10)]

http://www.moensted.dk/spam/?addr=121.31.56.23
http://www.spamhaus.org/query/bl?ip=121.31.56.23

121.31.56.23 is listed in the SBL, in the following records:
* SBL50962
* SBL51346
* SBL54113
* SBL54114
* SBL55125

11 SBL/ROKSO listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gx

Let see whois:
Domain Name.......... laga-soft.com
Creation Date........ 2007-02-24 02:20:42
Registration Date.... 2007-02-24 02:20:42
Expiry Date.......... 2008-02-24 02:20:42
Organisation Name.... zhong fei
Organisation Address. jiang xi nan change
Organisation Address.
Organisation Address. nan chang
Organisation Address. 321000
Organisation Address. JX
Organisation Address. CN

Admin Name........... zhong fei
Admin Address........ jiang xi nan change
Admin Address........
Admin Address........ nan chang
Admin Address........ 321000
Admin Address........ JX
Admin Address........ CN
Admin Email.......... ad...@canadian-rxx.net
Admin Phone.......... +86.79132100023
Admin Fax............ +86.79132100023

Tech Name............ zhong fei
Tech Address......... jiang xi nan change
Tech Address.........
Tech Address......... nan chang
Tech Address......... 321000
Tech Address......... JX
Tech Address......... CN
Tech Email........... admin[]canadian-rxx.net
Tech Phone........... +86.79132100023
Tech Fax............. +86.79132100023

Bill Name............ zhong fei
Bill Address......... jiang xi nan change
Bill Address.........
Bill Address......... nan chang
Bill Address......... 321000
Bill Address......... JX
Bill Address......... CN
Bill Email........... ad...@canadian-rxx.net
Bill Phone........... +86.79132100023
Bill Fax............. +86.79132100023
Name Server.......... ns2.laga-soft.com
Name Server.......... ns1.laga-soft.com

More laga-soft.com sightings:
http://groups.google.com/groups/search?q=laga-soft.com+group%3A*abuse&qt_s=Search

And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/4487cd4da584bf9f

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages