news.admin.netabuse.sightings
  Home FAQ Contact Sign in
news.admin.netabuse.sightings only
 
Advanced search
December 2008
mo tu we th fr sa su w
1234567 49
891011121314 50
15161718192021 51
22232425262728 52
293031     1
2008
 Jan   Feb   Mar   Apr 
 May   Jun   Jul   Aug 
 Sep   Oct   Nov   Dec 
2008 2007    
total
news.admin.netabuse.sightings Profile…
RELATED GROUPS

POPULAR GROUPS

more...

 Up
  [email] [diploma] Low education? Buy University_Degree/Dip1oma/MasteerMBA, we sell at Cheap bwpo gqr         


Author: Hal Murray
Date: Dec 27, 2008 01:19

Spammer's contact info:
1-302-5654-888 (sic)
1-302-565-4888 (normalized)

This junk came from:
190.71.222.95 => adsl190-71-222-95.epm.net.co, No forward DNS
190.71.0.0 - 190.71.255.255 is assigned to une.net.co (CO)
190.71.222.95 is listed at: SBL-ZEN:PBL, UCEPROTECT-2, UCEPROTECT-3
UCEProtect says:
Net 190.71.192.0/18 is UCEPROTECT-Level2 listed because of 444 abusers.
Your ISP ORBITEL S.A. E.S.P./AS13489 has to fix this. See:
http://www.uceprotect.net/rblcheck.php?ipr=190.71.222.95

------- Forwarded Message

Return-Path: wmle.com>
[local routing snipped]
Received: from [190.71.222.95] (HELO rigotwdi)
by fe.mail.megapathdsl.net (CommuniGate Pro SMTP 5.1.10)
with ESMTP id 566755754; Fri, 26...
Show full article (3.72Kb)
no comments
  [Email] Your payment by western union !         


Author: David Bolt
Date: Dec 27, 2008 01:05

>From ignatius229@yahoo.fr Sat Dec 27 00:03:51 2008
Return-Path:
Received: from web23708.mail.ird.yahoo.com (web23708.mail.ird.yahoo.com [87.248.115.66])
by mail.davjam.org with SMTP id mBR03eQX003435
for davjam.org>; Sat, 27 Dec 2008 00:03:50 GMT
Received: (qmail 43238 invoked by uid 60001); 27 Dec 2008 00:03:38 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=ymail_nen1; d=yahoo.fr;
h=Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID;
b=yQWdzqBTNqOTWvNK7h9q+LkRPhOdTfbGQONZ7WC5L3E5du8zoatR4uleYBBb3yF+ImlY8uqhxSeSc2AQnv0YJvdCm04RrVaba9kvy0wkLfGh+13UkUb3rdEpj8CTkVHAYiZa9DmWiGyfxjDShDQxTnktVqWs1fQUVxZ062AkfMw=;
Received: from [41.222.192.114] by web23708.mail.ird.yahoo.com via HTTP; Sat, 27 Dec 2008...
Show full article (1.34Kb)
no comments
  [EMAIL][Sonic Media] TURNKEYINTERNET.NET {source/hosting/drop=box} - ("Give yourself aGift this holiday season: A better job!")         


Author: Abuse Reporting Account
Date: Dec 27, 2008 01:00

Dear Postmaster and/or Abuse Desk Manager:

The following UNSOLICITED ADVERTISING MESSAGE was sent to our E-Mail/FAX
system from or via your system, or by your user. Specifically:

TURNKEYINTERNET.NET: The UNSOLICITED ADVERTISING E-MAIL originated
from within your network at your (internal) IP [10.0.88.26] and was relayed
by your SMTP server at IP [208.85.3.16] (rDNS: <mx7.aardlark.com>). You
are also providing domain-hosting and/or connectivity services to the
spammer at (at least) IP: [208.85.3.9] for the "spamvertised" URLs:
<http://dgn.aardlark.com/[REDACTED]/[REDACTED]/>,
<http://sg.aardlark.com/[REDACTED]/[REDACTED]/>,
<http://dg.aardlark.com/[REDACTED]/[REDACTED]/>, etc,; as well as
drop-box/MX services at (at least) the following IP addresses:

mx1.aardlark.com A (Address) 208.85.3.10
mx2.aardlark.com A (Address) 208.85.3.11
mx3.aardlark.com A (Address) 208.85.3.12
mx4.aardlark.com A (Address) 208.85.3.13
mx5.aardlark.com A (Address...
Show full article (6.25Kb)
no comments
  [email] Uygun fiyata Web Sitesi,e-Katalog,Kurumsal Kimlik Tasarýmý,Logo/Logotype,Katalog,Brosür Tasarýmý v.b.         


Author: Hal Murray
Date: Dec 27, 2008 00:21

I wonder what language this is. I sure can't read it.

This junk came from:
78.167.222.102 => No reverse DNS
78.160.0.0 - 78.191.255.255 is assigned to ttnet.net.tr (TR)
78.167.222.102 is listed at: CBL, SBL-ZEN:CBL+PBL, UCEPROTECT-1,
UCEPROTECT-2, UCEPROTECT-3
UCEProtect says:
IP 78.167.222.102 is UCEPROTECT-Level 1 listed.
See http://www.uceprotect.net/rblcheck.php?ipr=78.167.222.102
ttnet.net.tr is listed at RFC-Ignorant.org (abuse, postmaster, and whois)

The spamvertized web host is:
www.bizbizibiliriz.com => bizbizibiliriz.com
bizbizibiliriz.com => 84.51.38.15, No matching reverse DNS
84.51.38.15 => host-84-51-38-15.teletektelekom.com, No forward DNS
84.51.0.0 - 84.51.63.255 is assigned to teletek.net (TR)

------- Forwarded Message

Return-Path: gmail.com>
[local routing snipped]
Received: from [78.167.222.102] (HELO mail.com)
by fe.mail.megapathdsl.net (CommuniGate Pro SMTP 5.1.10)
with SMTP id 552900801 for...
Show full article (4.51Kb)
no comments
  [Email] Ju Uron Festat E Fundvitit         


Author: David Bolt
Date: Dec 27, 2008 00:20

>From info@hi5.com Fri Dec 26 15:11:45 2008
Return-Path: hi5.com>
Received: from mail.davjam.org ([192.168.0.3]) by dev.null.davjam.org
with ESMTP id dev.null.davjam.org>
for my-ste.davjam.org> ; Fri, 26 Dec 2008 15:11:45 +0000
Received: from n12.c03.server-system.net (n12.c03.server-system.net [72.47.224.12])
by mail.davjam.org with ESMTP id mBQFBc7n001987
for davjam.org>; Fri, 26 Dec 2008 15:11:45 GMT
Received: from [92.48.82.60] (port=2617 helo=User)
by n12.c03.server-system.net with esmtpa (Exim 4.63)
(envelope-from hi5.com>)
id 1LGEKr-0000AN-JC; Fri, 26 Dec 2008 07:10:45 -0800
From: "RISI-KS"hi5.com>
Subject: Ju Uron Festat E Fundvitit
Date: Fri, 26 Dec 2008 15:10:39 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1 ...
Show full article (1.73Kb)
no comments
  [email] [phish] eBay Unpaid Item Dispute for Item #160298866497-- Response Required         


Author: Hal Murray
Date: Dec 27, 2008 00:08

This junk came from:
65.127.163.7 <=> pegasus.cyberstreet.com
65.112.0.0 - 65.127.255.255 is assigned to qwest.net (US)
65.127.163.7 is listed at: PSBL, WPBL, UCEPROTECT-1
PSBL says:
Listed in PSBL, see
http://psbl.surriel.com/listing?ip=65.127.163.7
UCEProtect says:
IP 65.127.163.7 is UCEPROTECT-Level 1 listed.
See http://www.uceprotect.net/rblcheck.php?ipr=65.127.163.7
WPBL says:
Spam source - http://wpbl.info/record?ip=65.127.163.7

cyberstreet says they got it from:
71.206.160.201 <=> c-71-206-160-201.hsd1.va.comcast.net
71.192.0.0 - 71.207.255.255 is assigned to comcast.net (US)
71.206.160.201 is listed at: SBL-ZEN:PBL, SORBS:DUL, SpamCop
Show full article (5.50Kb)
no comments
  [email][200.73.116.65 AR AS27885 200.73.116.0/22] Ready for a Challenge?         


Author: Andrzej Adam Filip (NANAS)
Date: Dec 26, 2008 22:58

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Info: The author posted this signed message *ONLY* to news:admin.net-abuse.sightings
Spam-Reporting-Policy: http://anfi.chickenkiller.com/nanas/spam-reports-policy.html
Post-Date: Fri, 26 Dec 2008 21:58:00 +0000 (1230328680)
Report-ID: 2479308457@scn.anfi.chickenkiller.com
SPAMCOP.net-REPORT: http://www.spamcop.net/sc?id=z2479308457z35de4f15f964c5f51ec0e5a423972d7az
Spam-Date: Fri, 26 Dec 2008 09:45:41 +0000 (1230284741)
Info: Copy of spam reported via SpamCop.Net
Info: Country info based on zz.countries.nerd.dk
Info: ASN info based on asn.routeviews.org
Spam-Track: IP=200.73.116.65 Country=AR ASN=AS27885 Prefix=200.73.116.0/22
End: ###################################################################
Show full article (2.99Kb)
no comments
  [email][194.158.104.48 FR AS5410 194.158.96.0/19] CECI N EST PAS UN SPAM OU UN CANULAR DE LA BANK         


Author: Andrzej Adam Filip (NANAS)
Date: Dec 26, 2008 22:58

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Info: The author posted this signed message *ONLY* to news:admin.net-abuse.sightings
Spam-Reporting-Policy: http://anfi.chickenkiller.com/nanas/spam-reports-policy.html
Post-Date: Fri, 26 Dec 2008 21:58...
Show full article (9.89Kb)
no comments
  [email][92.83.229.240 RO AS9050 92.83.0.0/16] Won't forget last night         


Author: Andrzej Adam Filip (NANAS)
Date: Dec 26, 2008 22:58

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Info: The author posted this signed message *ONLY* to news:admin.net-abuse.sightings
Spam-Reporting-Policy: http://anfi.chickenkiller.com/nanas/spam-reports-policy.html
Post-Date: Fri, 26 Dec 2008 21:58...
Show full article (5.95Kb)
no comments
  [email][61.9.168.234<217.20.240.19] CONGRATULATIONS. YOU HAVE WON $2,000,000.00         


Author: Andrzej Adam Filip (NANAS)
Date: Dec 26, 2008 22:57

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Info: The author posted this signed message *ONLY* to news:admin.net-abuse.sightings
Spam-Reporting-Policy: http://anfi.chickenkiller.com/nanas/spam-reports-policy.html
Post-Date: Fri, 26 Dec 2008 21:57...
Show full article (4.28Kb)
no comments
1 2 3 4 5 6 7 8 9