[email] [botnet] (117.92.114.41) Wholesale Price pills from $38/pack, this is super..
David Ritz
Hash: SHA1
[ whois.cymru.com ]
AS | IP | AS Name
4134 | 117.92.114.41 | CHINANET-BACKBONE No.31,Jin-rong Street
4134 | 122.198.62.4 | CHINANET-BACKBONE No.31,Jin-rong Street
4837 | 218.61.7.21 | CHINA169-BACKBONE CNCGROUP China169 Backbone
5089 | 86.13.116.123 | NTL NTL Group Limited
5462 | 82.45.217.72 | CABLEINET Telewest Broadband
6128 | 24.47.238.33 | CABLE-NET-1 - Cablevision Systems Corp.
6739 | 84.124.148.133 | ONO-AS Cableuropa - ONO
6830 | 86.101.174.164 | UPC UPC Broadband
6830 | 89.176.242.105 | UPC UPC Broadband
7015 | 71.192.142.227 | CCCH-AS2 - Comcast Cable Communications Holdings, Inc
7132 | 66.140.75.48 | SBIS-AS - AT&T Internet Services
7132 | 70.233.30.232 | SBIS-AS - AT&T Internet Services
7690 | 123.103.151.246 | MIRAI Mirai Communication Network Inc.
8039 | 69.196.200.106 | CCC-ASN-1 - Cinergy Communications Company
8341 | 84.105.255.96 | QUICKNET MultiKabel QuickNet Netherlands
8615 | 77.41.88.146 | CNT-AS CNT Autonomous System
8997 | 92.101.186.46 | ASN-SPBNIT OJSC North-West Telecom Autonomous System
11492 | 24.117.19.25 | CABLEONE - CABLE ONE
13124 | 89.215.101.137 | IBGC IBGC Autonomous system of Inter-Bg-Com Ltd.
13343 | 68.205.42.75 | SCRR-13343 - Road Runner HoldCo LLC
14615 | 208.104.227.198 | ROCK-HILL-TELEPHONE - Rock Hill Telephone Company
16586 | 74.60.123.71 | CLEARWIRE - Clearwire, LLC
17488 | 60.243.140.79 | HATHWAY-NET-AP Hathway IP Over Cable Internet
17858 | 119.65.25.214 | KRNIC-ASBLOCK-AP KRNIC
18101 | 123.237.33.213 | RIL-IDC Reliance Infocom Ltd Internet Data Centre,
25229 | 77.121.6.73 | VOLIA-AS Volia Autonomous System
25441 | 89.125.52.77 | IBIS-AS Irish Broadband Internet Services Ltd.
33654 | 76.113.96.80 | DNEO-OSP7 - Comcast Cable Communications, Inc.
33657 | 76.100.176.86 | DNEO-OSP7 - Comcast Cable Communications, Inc.
33662 | 98.199.215.179 | DNEO-OSP7 - Comcast Cable Communications, Inc.
39087 | 88.201.155.253 | PAKT-AS Pakt Ltd.
Sun Sep 28 06:33:08 UTC 2008
========================================================================
[ Offending message ]
Return-Path: <twyla....@debitel.net>
X-Original-To: x
Delivered-To: x.local
Received: from glimmer.local (localhost [127.0.0.1])
by glimmer.local (Postfix) with ESMTP id 1AEDB222E182
for <x>; Sun, 28 Sep 2008 01:14:10 -0500 (CDT)
Received: from pop.mindspring.com
by glimmer.local with POP3 (fetchmail-6.3.8)
for <x> (single-drop); Sun, 28 Sep 2008 01:14:10 -0500 (CDT)
Received: from noehlo.host ([127.0.0.1])
by montgomery.mail.atl.earthlink.net (EarthLink SMTP Server) with SMTP id 1kJPnl2U83Nl3qB0; Sun, 28 Sep 2008 02:03:23 -0400 (EDT)
Received: from cnnhz ([117.92.114.41])
by montgomery.mail.atl.earthlink.net (EarthLink SMTP Server) with SMTP id 1kJPnc30L3Nl3qB0; Sun, 28 Sep 2008 02:03:14 -0400 (EDT)
In-Reply-To: <ce9501c91d42$576ddec7$943bdbb3@hwvr7r1>
Sender: <twyla....@debitel.net>
X-Sender: <twyla....@debitel.net>
Reply-To: "Twyla Jong" <twyla....@debitel.net>
To: <x>
From: "Twyla Jong" <twyla....@debitel.net>
Message-ID: <1222___...@debitel.net>
Date: Sat, 27 Sep 2008 22:38:59 -0700
Subject: Wholesale Price pills from $38/pack, this is super Cheap dsgk 1636
Content-Type: text/plain;
charset="iso-8859-2"
Content-Transfer-Encoding: 8bit
X-ELNK-Received-Info: spv=1;
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=0b; sbw=000;
Wholesale Price Pharmacy
USA based Safe Fast F.D.A. Approved Medicines
CailisFrom$42/pack
ViagraFrom$37/pack
& other 200 meds to choose from, please search on our site your needed meds
Protected Delivery from a Licensed pharmacy!
Fully confidential
No Physical Exam
No Embarassment
No appointments
Secure ordering
Discreet & Overnight Shipping
GUARANTEED LowestPrice
http://kqvn.sefeature.cn
========================================================================
[ SpamCop V2 ]
This message is brief for your comfort. Please use links below for details.
User-targeted report, see notes, if any.
http://www.spamcop.net/w3m?i=z3522262746zc2f50d53838dc61abc2fee437e8b95b7z
[ Comments from recipient regarding 117.92.114.41 ]
> dritz@glimmer:~% blq -ant 117.92.114.41 ; date
> 117.92.114.41 : bl.asnbl.org : BLOCKED (127.0.0.6)
> NO ACCESS for 117.80.0.0/12 - banned AS 4134 originates this
> network.
> Sun Sep 28 06:24:23 UTC 2008
>
[ Additional comments from recipient ]
> http://kqvn.sefeature.cn => Worldwide Wholesale Pharmacy
> http://mustzoom.com/
>
> dritz@glimmer:~% uri mustzoom.com ; zen mustzoom.com ; date
> mustzoom.com.multi.uribl.com descriptive text "Blacklisted, see
> http://lookup.uribl.com/?domain=mustzoom.com"
> mustzoom.com.multi.surbl.org descriptive text "Blocked,
> mustzoom.com on lists [sc][ws], See:
> http://www.surbl.org/lists.html"
> 218.61.7.21 mustzoom.com : zen.spamhaus.org : BLOCKED (127.0.0.2)
> http://www.spamhaus.org/SBL/sbl.lasso?query=SBL65849
> http://www.spamhaus.org/SBL/sbl.lasso?query=SBL66862
> Sun Sep 28 06:23:06 UTC 2008
>
> dritz@helium:~% uri sefeature.cn ; dig \*.sefeature.cn ; date
> sefeature.cn.multi.uribl.com descriptive text "Blacklisted, see
> http://lookup.uribl.com/?domain=sefeature.cn"
> sefeature.cn.multi.surbl.org descriptive text "Blocked,
> sefeature.cn on lists [ob], See:
> http://www.surbl.org/lists.html"
>
> ; <<>> DiG 8.3 <<>> *.sefeature.cn
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 263
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 4, ADDITIONAL: 4
> ;; QUERY SECTION:
> ;; *.sefeature.cn, type = A, class = IN
>
> ;; ANSWER SECTION:
> *.sefeature.cn. 3M IN CNAME sefeature.cn.
> sefeature.cn. 3M IN A 71.192.142.227
> sefeature.cn. 3M IN A 76.100.176.86
> sefeature.cn. 3M IN A 77.41.88.146
> sefeature.cn. 3M IN A 84.105.255.96
> sefeature.cn. 3M IN A 98.199.215.179
> sefeature.cn. 3M IN A 123.103.151.246
> sefeature.cn. 3M IN A 60.243.140.79
> sefeature.cn. 3M IN A 70.233.30.232
>
> ;; AUTHORITY SECTION:
> sefeature.cn. 5h59m59s IN NS ns1.kmfishx.com.
> sefeature.cn. 5h59m59s IN NS ns2.kmfishx.com.
> sefeature.cn. 5h59m59s IN NS ns3.kmfishx.com.
> sefeature.cn. 5h59m59s IN NS ns4.kmfishx.com.
>
> ;; ADDITIONAL SECTION:
> ns1.kmfishx.com. 12h43m8s IN A 68.205.42.75
> ns2.kmfishx.com. 12h43m8s IN A 76.113.96.80
> ns3.kmfishx.com. 13h5m11s IN A 89.176.242.105
> ns4.kmfishx.com. 13h5m11s IN A 86.101.174.164
>
> ;; Total query time: 331 msec
> ;; FROM: helium.iphouse.net to SERVER: 127.0.0.1
> ;; WHEN: Sun Sep 28 01:23:38 2008
> ;; MSG SIZE sent: 32 rcvd: 335
>
> Sun Sep 28 06:23:38 UTC 2008
>
> dritz@glimmer:~% blq -ant 117.92.114.41 ; date
> 117.92.114.41 : bl.asnbl.org : BLOCKED (127.0.0.6)
> NO ACCESS for 117.80.0.0/12 - banned AS 4134 originates this
> network.
> Sun Sep 28 06:24:23 UTC 2008
>
> dritz@helium:~% dig mustzoom.com ; dig @ns1.kmfishx.com kmfishx.com ; date
>
> ; <<>> DiG 8.3 <<>> mustzoom.com
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30573
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
> ;; QUERY SECTION:
> ;; mustzoom.com, type = A, class = IN
>
> ;; ANSWER SECTION:
> mustzoom.com. 1m45s IN A 218.61.7.21
>
> ;; AUTHORITY SECTION:
> mustzoom.com. 12h38m24s IN NS ns3.xofjpfk.com.
> mustzoom.com. 12h38m24s IN NS ns4.xofjpfk.com.
>
> ;; ADDITIONAL SECTION:
> ns3.xofjpfk.com. 12h38m24s IN A 122.198.62.4
> ns4.xofjpfk.com. 12h38m24s IN A 218.61.7.21
>
> ;; Total query time: 2 msec
> ;; FROM: helium.iphouse.net to SERVER: 127.0.0.1
> ;; WHEN: Sun Sep 28 01:27:47 2008
> ;; MSG SIZE sent: 30 rcvd: 122
>
>
> ; <<>> DiG 8.3 <<>> @ns1.kmfishx.com kmfishx.com
> ; (1 server found)
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7695
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4
> ;; QUERY SECTION:
> ;; kmfishx.com, type = A, class = IN
>
> ;; ANSWER SECTION:
> kmfishx.com. 3M IN A 127.0.0.1
>
> ;; AUTHORITY SECTION:
> kmfishx.com. 3M IN NS ns2.kmfishx.com.
> kmfishx.com. 3M IN NS ns3.kmfishx.com.
> kmfishx.com. 3M IN NS ns4.kmfishx.com.
> kmfishx.com. 3M IN NS ns1.kmfishx.com.
>
> ;; ADDITIONAL SECTION:
> ns1.kmfishx.com. 3M IN A 98.199.215.179
> ns2.kmfishx.com. 3M IN A 77.41.88.146
> ns3.kmfishx.com. 3M IN A 119.65.25.214
> ns4.kmfishx.com. 3M IN A 76.100.176.86
>
> ;; Total query time: 91 msec
> ;; FROM: helium.iphouse.net to SERVER: 68.205.42.75
> ;; WHEN: Sun Sep 28 01:27:47 2008
> ;; MSG SIZE sent: 29 rcvd: 181
>
> Sun Sep 28 06:27:47 UTC 2008
>
> dritz@glimmer:~% sbl ns3.xofjpfk.com ; sbl ns4.xofjpfk.com ; date
> 122.198.62.4 ns3.xofjpfk.com : sbl.spamhaus.org : BLOCKED (127.0.0.2)
> http://www.spamhaus.org/SBL/sbl.lasso?query=SBL67690
> 218.61.7.21 ns4.xofjpfk.com : sbl.spamhaus.org : BLOCKED (127.0.0.2)
> http://www.spamhaus.org/SBL/sbl.lasso?query=SBL66862
> http://www.spamhaus.org/SBL/sbl.lasso?query=SBL65849
> Sun Sep 28 06:28:37 UTC 2008
>
> dritz@glimmer:~% digger sefeature.cn ; hoster ns1.kmfishx.com ;
> hoster ns2.kmfishx.com ; hoster ns3.kmfishx.com ; hoster
> ns4.kmfishx.com
> ns1.kmfishx.com 24.117.19.25
> ns1.kmfishx.com 24.47.238.33
> ns1.kmfishx.com 69.196.200.106
> ns1.kmfishx.com 76.113.96.80
> ns2.kmfishx.com 123.237.33.213
> ns2.kmfishx.com 66.140.75.48
> ns2.kmfishx.com 69.196.200.106
> ns2.kmfishx.com 76.100.176.86
> ns2.kmfishx.com 84.124.148.133
> ns3.kmfishx.com 208.104.227.198
> ns3.kmfishx.com 76.100.176.86
> ns3.kmfishx.com 77.121.6.73
> ns3.kmfishx.com 84.124.148.133
> ns3.kmfishx.com 86.13.116.123
> ns3.kmfishx.com 89.125.52.77
> ns4.kmfishx.com 69.196.200.106
> ns4.kmfishx.com 71.192.142.227
> ns4.kmfishx.com 76.100.176.86
> ns4.kmfishx.com 88.201.155.253
> ns4.kmfishx.com 92.101.186.46
> sefeature.cn 208.104.227.198
> Sun Sep 28 06:30:15 UTC 2008
> ns1.kmfishx.com 24.117.19.25
> ns1.kmfishx.com 24.47.238.33
> ns1.kmfishx.com 69.196.200.106
> ns1.kmfishx.com 76.113.96.80
> ns1.kmfishx.com 89.215.101.137
> Sun Sep 28 06:30:18 UTC 2008
> ns2.kmfishx.com 123.237.33.213
> ns2.kmfishx.com 69.196.200.106
> ns2.kmfishx.com 74.60.123.71
> ns2.kmfishx.com 76.100.176.86
> ns2.kmfishx.com 84.124.148.133
> Sun Sep 28 06:30:21 UTC 2008
> ns3.kmfishx.com 208.104.227.198
> ns3.kmfishx.com 76.100.176.86
> ns3.kmfishx.com 82.45.217.72
> ns3.kmfishx.com 84.124.148.133
> ns3.kmfishx.com 86.13.116.123
> ns3.kmfishx.com 89.125.52.77
> Sun Sep 28 06:30:24 UTC 2008
> ns4.kmfishx.com 71.192.142.227
> ns4.kmfishx.com 76.100.176.86
> ns4.kmfishx.com 88.201.155.253
> ns4.kmfishx.com 92.101.186.46
> Sun Sep 28 06:30:27 UTC 2008
>
- --
David Ritz <dritz+...@mindspring.com>
Be kind to animals; kiss a shark.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: Public Keys: <http://dritz.home.mindspring.com/keys.txt>
iD8DBQFI3yVaUrwpmRoS3usRAkY6AKCn5/aI7ABFr57vv3cpKYWHq9HcaACeO3Jc
AhahYkkutjpVlgc3pG4nBpU=
=1txY
-----END PGP SIGNATURE-----
--
All postings to news.admin.net-abuse.sightings are unconfirmed and unverified
unless stated otherwise by the moderators. All opinions expressed above are
considered the opinions of the original poster, not the moderators or their
respective employers. For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/