[SIRT#195486] PowerEnlarge wantmust.com/belkacmse

CastleCops -> SIRT Reports

Author: jimVOLocation: USA PostPosted: Fri Jul 04, 2008 3:00 am    Post subject: [SIRT#195486] PowerEnlarge wantmust.com/belkacmse

Spam Alert
 
 Full Report: CastleCops Link/PowerEnlarge_spam195486.html
 
 Changed status to confirmed spam.IP Converted: 121.11.158.170

dword = 2030804650
hex1 = 0x790b9eaa
hex2 = 0x79.0xb.0x9e.0xaa
oct = 0171.013.0236.0252
IP Converted: 121.11.158.170

dword = 2030804650
hex1 = 0x790b9eaa
hex2 = 0x79.0xb.0x9e.0xaa
oct = 0171.013.0236.0252
View CIDR AS4134 Report: http://www.cidr-report.org/cgi-bin/as-report?as=4134

"4134 | CN | apnic | 2002-08-01 | CHINANET-BACKBONE No.31,Jin-rong Street"<br />
Extended information for AS4134:
State/Province:
Country: cn
Responsible Domain: chinanet.cn.net
Abuse Email: cncert@cert.org.cn
IP Converted: 121.11.158.170

dword = 2030804650
hex1 = 0x790b9eaa
hex2 = 0x79.0xb.0x9e.0xaa
oct = 0171.013.0236.0252
View CIDR AS4134 Report: http://www.cidr-report.org/cgi-bin/as-report?as=4134

"4134 | CN | apnic | 2002-08-01 | CHINANET-BACKBONE No.31,Jin-rong Street"<br />
Extended information for AS4134:
State/Province:
Country: cn
Responsible Domain: chinanet.cn.net
Abuse Email: cncert@cert.org.cn
Criminal Evidence

See the Spam Wiki entry at http://www.spamtrackers.eu/wiki/index.php?title=PowerEnlarge
or from China: http://www.spamtrackers.hk/wiki/index.php?title=PowerEnlarge
See the McAfee Site Advisor information at http://siteadvisor.com/sites/wantmust.com


> 35.com
REGISTRATION OF THE WEB SITE: wantmust.com
ACTION: To suspend this criminal site which breaks your terms of service, set the domain status to clientHold


> HICHINA
REGISTRATION OF THE NAME SERVERS
These name servers are registered by criminals to resolve only illegal web sites. This breaks your terms of service. You can safely suspend them:
ns4.belkacmse.com 121.11.158.170 121.11.158.170 Blacklisted China URIBL SBL65587 |
ns3.belkacmse.com 222.186.13.10 222.186.13.10 Blacklisted China URIBL ip=222.186.13.10 | SBL65310 |$insert NS here$

ACTION: To suspend these name servers successfully, follow these steps.
1. set the ns Address records to a non-routable address, such as 127.0.0.1 or 61.61.61.61.
2. Set the domain status to clientUpdateProhibited, clientTransferProhibited, clientDeleteProhibited, and clientHold


> CNCERT
IP ADDRESS OF HOST: 121.11.158.170
The IP address of this criminal site is within your allocated address space.
ACTION: Black-hole the route to this address to prevent further criminal activityIP Converted: 121.11.158.170

dword = 2030804650
hex1 = 0x790b9eaa
hex2 = 0x79.0xb.0x9e.0xaa
oct = 0171.013.0236.0252
View CIDR AS4134 Report: http://www.cidr-report.org/cgi-bin/as-report?as=4134

"4134 | CN | apnic | 2002-08-01 | CHINANET-BACKBONE No.31,Jin-rong Street"<br />
Extended information for AS4134:
State/Province:
Country: cn
Responsible Domain: chinanet.cn.net
Abuse Email: cncert@cert.org.cn
Criminal Evidence

See the Spam Wiki entry at http://www.spamtrackers.eu/wiki/index.php?title=PowerEnlarge
or from China: http://www.spamtrackers.hk/wiki/index.php?title=PowerEnlarge
See the McAfee Site Advisor information at http://siteadvisor.com/sites/wantmust.com


> 35.com
REGISTRATION OF THE WEB SITE: wantmust.com
ACTION: To suspend this criminal site which breaks your terms of service, set the domain status to clientHold


> HICHINA
REGISTRATION OF THE NAME SERVERS
These name servers are registered by criminals to resolve only illegal web sites. This breaks your terms of service. You can safely suspend them:
ns4.belkacmse.com 121.11.158.170 121.11.158.170 Blacklisted China URIBL SBL65587 |
ns3.belkacmse.com 222.186.13.10 222.186.13.10 Blacklisted China URIBL ip=222.186.13.10 | SBL65310 |$insert NS here$

ACTION: To suspend these name servers successfully, follow these steps.
1. set the ns Address records to a non-routable address, such as 127.0.0.1 or 61.61.61.61.
2. Set the domain status to clientUpdateProhibited, clientTransferProhibited, clientDeleteProhibited, and clientHold


> CNCERT
IP ADDRESS OF HOST: 121.11.158.170
The IP address of this criminal site is within your allocated address space.
ACTION: Black-hole the route to this address to prevent further criminal activityIP Converted: 121.11.158.170

dword = 2030804650
hex1 = 0x790b9eaa
hex2 = 0x79.0xb.0x9e.0xaa
oct = 0171.013.0236.0252
View CIDR AS4134 Report: http://www.cidr-report.org/cgi-bin/as-report?as=4134

"4134 | CN | apnic | 2002-08-01 | CHINANET-BACKBONE No.31,Jin-rong Street"<br />
Extended information for AS4134:
State/Province:
Country: cn
Responsible Domain: chinanet.cn.net
Abuse Email: cncert@cert.org.cn
Criminal Evidence

See the Spam Wiki entry at http://www.spamtrackers.eu/wiki/index.php?title=PowerEnlarge
or from China: http://www.spamtrackers.hk/wiki/index.php?title=PowerEnlarge
See the McAfee Site Advisor information at http://siteadvisor.com/sites/wantmust.com


> 35.com
REGISTRATION OF THE WEB SITE: wantmust.com
ACTION: To suspend this criminal site which breaks your terms of service, set the domain status to clientHold


> HICHINA
REGISTRATION OF THE NAME SERVERS
These name servers are registered by criminals to resolve only illegal web sites. This breaks your terms of service. You can safely suspend them:
ns4.belkacmse.com 121.11.158.170 121.11.158.170 Blacklisted China URIBL SBL65587 |
ns3.belkacmse.com 222.186.13.10 222.186.13.10 Blacklisted China URIBL ip=222.186.13.10 | SBL65310 |$insert NS here$

ACTION: To suspend these name servers successfully, follow these steps.
1. set the ns Address records to a non-routable address, such as 127.0.0.1 or 61.61.61.61.
2. Set the domain status to clientUpdateProhibited, clientTransferProhibited, clientDeleteProhibited, and clientHold


> CNCERT
IP ADDRESS OF HOST: 121.11.158.170
The IP address of this criminal site is within your allocated address space.
ACTION: Black-hole the route to this address to prevent further criminal activity
Quote:
http://wantmust.com/



CastleCops -> SIRT Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group