[an error occurred while processing this directive]
The report for this spam can be found at: 2008 Penis Spam Edition.
Return-Path: <ninab@umail.hinet.net>
Received: from 79-100-38-97.btc-net.bg (79.100.38.97) by studio42.com with SMTP (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; Thu, 7 Feb 2008 10:11:59 -0800
Received: (qmail 23639 invoked from network); Thu, 7 Feb 2008 20:14:15 +0200
Received: from unknown (HELO cfe) (220.237.135.176) by 79-100-38-97.btc-net.bg with SMTP; Thu, 7 Feb 2008 20:14:15 +0200
Message-ID: <003101c869b5$3f31e250$b087eddc@cfe>
From: <ninab@umail.hinet.net>
To: <chris@studio42.com>
Subject: Doesn't matter what is the problem - we have meds to cure everything.
Date: Thu, 7 Feb 2008 20:14:15 +0200
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1506
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
Get any med that you need! Completely secure and Confidential!
http://iaegi.beautybegan.com
[studio42@flatus studio42]$ host 79.100.38.97
97.38.100.79.in-addr.arpa domain name pointer 79-100-38-97.btc-net.bg.
[studio42@flatus studio42]$ whois 79.100.38.97@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '79.100.0.0 - 79.100.255.255'
inetnum: 79.100.0.0 - 79.100.255.255
org: ORG-BTCP1-RIPE
admin-c: LG700-RIPE
netname: BG-BTC-20071109
descr: Bulgarian Telecommunications Company Plc.
country: BG
tech-c: LG700-RIPE
tech-c: SS4127-RIPE
status: ALLOCATED PA
remarks: -------------------------------------------
remarks: For Hacking, Spamming or Security problems
remarks: send mail to abuse@btc-net.bg
remarks: ----------------------------------------------
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: BT95-ADM
mnt-routes: BT95-ADM
mnt-domains: BT95-ADM
mnt-domains: MNT-BTCNET
source: RIPE # Filtered
organisation: ORG-BTCP1-RIPE
org-name: Bulgarian Telecommunications Company Plc.
org-type: LIR
address: 8 Totleben Blvd.
address: 1606
address: Sofia
address: Bulgaria
phone: +359 2 932 08 92
fax-no: +359 2 932 08 52
e-mail: registry@btc-net.bg
admin-c: BTC3-RIPE
admin-c: SS4127-RIPE
admin-c: PT1549-RIPE
admin-c: TS3083-RIPE
admin-c: LG700-RIPE
admin-c: AT1545-RIPE
admin-c: IR778-RIPE
mnt-ref: BT95-ADM
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
person: Lyubomir Georgiev
address: BTC Plc
address: Bulgarian Telecommunications Company Plc
address: 8 Totleben Blvd.
address: 1606 Sofia
address: Bulgaria
mnt-by: BT95-ADM
phone: +359 2 932 08 92
fax-no: +359 2 832 08 52
e-mail: lyubomir.georgiev@btc-net.bg
nic-hdl: LG700-RIPE
source: RIPE # Filtered
person: Stanish Stanishev
address: BTC-NET Ltd.
address: 63, Shipchenski prohod blvd.
address: BG-1574 Sofia
address: Bulgaria
mnt-by: BT95-ADM
phone: +359 2 932 08 42
fax-no: +359 2 832 08 24
e-mail: stanish.stanishev@btc-net.bg
nic-hdl: SS4127-RIPE
source: RIPE # Filtered
% Information related to '79.100.0.0/16AS8866'
route: 79.100.0.0/16
descr: BTC Plc.
origin: AS8866
mnt-by: BT95-ADM
source: RIPE # Filtered
Looks dynamic. I'm sure the rest is crap, but just in case:
[studio42@flatus studio42]$ host 220.237.135.176
176.135.237.220.in-addr.arpa domain name pointer c220-237-135-176.frank1.vic.opt
usnet.com.au.
[studio42@flatus studio42]$ whois 220.237.135.176@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 220.236.0.0 - 220.239.255.255
netname: OPTUSINTERNET-AU
descr: OPTUS INTERNET - RETAIL
descr: INTERNET SERVICES
descr: Chatswood, Sydney
country: AU
admin-c: OI3-AP
tech-c: OI3-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-AU-OPTUSINTERNET
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040316
changed: hm-changed@apnic.net 20050422
source: APNIC
role: Optus Internet
address: Level 3, 11 Help Street
address: Chatswood, NSW 2067
country: AU
phone: +61-2-9027-1127
fax-no: +61-2-9027-1035
e-mail: oie-netops@optus.com.au
trouble: Send spam/abuse reports to abuse@optusnet.com.au
admin-c: OI1-AP
tech-c: OI1-AP
nic-hdl: OI3-AP
notify: oie-netops@optus.com.au
mnt-by: MAINT-AU-OPTUSINTERNET
changed: oie-netops@optus.com.au 20040502
changed: hm-changed@apnic.net 20041020
changed: hm-changed@apnic.net 20041020
source: APNIC
I'm not really trusting that, but it is a problematic network.
Onto scammer site:
[studio42@flatus studio42]$ host iaegi.beautybegan.com
iaegi.beautybegan.com has address 61.92.191.235
iaegi.beautybegan.com has address 76.181.196.177
iaegi.beautybegan.com has address 78.42.100.253
iaegi.beautybegan.com has address 84.234.130.136
iaegi.beautybegan.com has address 89.29.35.218
iaegi.beautybegan.com has address 91.18.51.6
iaegi.beautybegan.com has address 123.98.165.113
iaegi.beautybegan.com has address 123.140.78.148
iaegi.beautybegan.com has address 123.203.14.188
iaegi.beautybegan.com has address 221.126.243.143
iaegi.beautybegan.com has address 221.127.4.46
iaegi.beautybegan.com has address 24.20.130.207
iaegi.beautybegan.com has address 59.149.201.184
iaegi.beautybegan.com has address 61.10.60.5
iaegi.beautybegan.com has address 61.58.184.213
Here we go:
[studio42@flatus studio42]$ host 61.92.191.235
235.191.92.61.in-addr.arpa domain name pointer 061092191235.ctinets.com.
[studio42@flatus studio42]$ whois 61.92.191.235@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 61.92.0.0 - 61.92.255.255
netname: CTIHK
descr: City Telecom (H.K.) Ltd.
descr: Internet Service Provider in Hong Kong
country: HK
admin-c: CH134-AP
tech-c: SL113-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-CTI
changed: hostmaster@apnic.net 20011123
changed: hostmaster@apnic.net 20020116
status: ALLOCATED PORTABLE
source: APNIC
person: CTINETS HOSTMASTER
address: 15/F, Trans Asia Centre,
address: 18 Kin Hong Street,
address: Kwai Chung, N.T.,
address: Hong Kong
country: HK
phone: +852-3145-5111
fax-no: +852-3145-5267
e-mail: hostmaster@ctihk.com
nic-hdl: CH134-AP
mnt-by: MAINT-HK-CTI
changed: hostmaster@ctihk.com 20000831
source: APNIC
person: Sam Leung
nic-hdl: SL113-AP
e-mail: fionat@ctihk.com
address: 15/F, Trans Asia Centre, 18 Kin Hong Street, Kwai Chung, Hong Kong
address:
address: + Send spam and abuse reports to
address: +
address: + <fionat@ctihk.com>
address: +
phone: +852-3145-5190
fax-no: +852-2199-8010
country: HK
changed: hostmaster@ctihk.com 20040707
mnt-by: MAINT-HK-CTI
source: APNIC
NEXT!!
[studio42@flatus studio42]$ host 76.181.196.177
177.196.181.76.in-addr.arpa domain name pointer cpe-76-181-196-177.columbus.res.
rr.com.
[studio42@flatus studio42]$ whois 76.181.196.177@whois.arin.net
[whois.arin.net]
OrgName: Road Runner HoldCo LLC
OrgID: RRMA
Address: 13241 Woodland Park Road
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US
ReferralServer: rwhois://ipmt.rr.com:4321
NetRange: 76.181.0.0 - 76.181.255.255
CIDR: 76.181.0.0/16
NetName: RRACI
NetHandle: NET-76-181-0-0-1
Parent: NET-76-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.RR.COM
NameServer: DNS2.RR.COM
NameServer: DNS3.RR.COM
NameServer: DNS5.RR.COM
NameServer: DNS6.RR.COM
Comment:
RegDate: 2006-07-26
Updated: 2007-03-12
OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-703-345-3416
OrgAbuseEmail: abuse@rr.com
OrgTechHandle: IPTEC-ARIN
OrgTechName: IP Tech
OrgTechPhone: +1-703-345-3416
OrgTechEmail: abuse@rr.com
# ARIN WHOIS database, last updated 2008-02-06 19:02
# Enter ? for additional hints on searching ARIN's WHOIS database.
NEXT!
[studio42@flatus studio42]$ host 78.42.100.253
253.100.42.78.in-addr.arpa domain name pointer HSI-KBW-078-042-100-253.hsi3.kabe
l-badenwuerttemberg.de.
[studio42@flatus studio42]$ whois 78.42.100.253@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '78.42.0.0 - 78.43.255.255'
inetnum: 78.42.0.0 - 78.43.255.255
org: ORG-KBGC1-RIPE
netname: DE-KABELBW-20070323
descr: Kabel Baden-Wuerttemberg GmbH & Co. KG
country: DE
admin-c: KIPE-RIPE
tech-c: KIPE-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: KabelBW-MNT
mnt-routes: KabelBW-MNT
source: RIPE # Filtered
organisation: ORG-KBGC1-RIPE
org-name: Kabel Baden-Wuerttemberg GmbH & Co. KG
org-type: LIR
address: Im Breitspiel 2-4
address: 69126
address: Heidelberg
address: Germany
phone: +49 711 358512765
fax-no: +49 6221 333167080
abuse-mailbox: abuse.kbw@byteaction.de
admin-c: RE834-RIPE
admin-c: TT2280-RIPE
mnt-ref: KabelBW-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: KabelBW IP Engineering
address: Kabel Badenwuerttemberg GmbH & Co. KG
address: Im Breitspiel 2-4
address: D-69126 Heidelberg
address: Germany
phone: +49 62213333988
fax-no: +49 6221333167080
remarks: *****************************************************
remarks: * Auskunftsersuchen nach TKG bitte per Fax an *
remarks: * folgende FaxNummer: 06221-333165000 *
remarks: * *
remarks: * Law-Enforcement agencies please use the following *
remarks: * faxnumber for all issues: +49 6221 333165000 *
remarks: *****************************************************
remarks: * Please send alle abuse-complaints to *
remarks: * abuse.kbw@byteaction.de *
remarks: *****************************************************
remarks: trouble: kbw@byteaction.de
admin-c: TT2280-RIPE
tech-c: TT2280-RIPE
nic-hdl: KIPE-RIPE
mnt-by: KabelBW-MNT
source: RIPE # Filtered
% Information related to '78.42.0.0/15AS29562'
route: 78.42.0.0/15
descr: KabelBW
origin: AS29562
mnt-by: KabelBW-MNT
mnt-lower: KabelBW-MNT
mnt-routes: KabelBW-MNT
source: RIPE # Filtered
[studio42@flatus studio42]$ host 78.42.100.253
253.100.42.78.in-addr.arpa domain name pointer HSI-KBW-078-042-100-253.hsi3.kabe
l-badenwuerttemberg.de.
[studio42@flatus studio42]$ whois 78.42.100.253@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '78.42.0.0 - 78.43.255.255'
inetnum: 78.42.0.0 - 78.43.255.255
org: ORG-KBGC1-RIPE
netname: DE-KABELBW-20070323
descr: Kabel Baden-Wuerttemberg GmbH & Co. KG
country: DE
admin-c: KIPE-RIPE
tech-c: KIPE-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: KabelBW-MNT
mnt-routes: KabelBW-MNT
source: RIPE # Filtered
organisation: ORG-KBGC1-RIPE
org-name: Kabel Baden-Wuerttemberg GmbH & Co. KG
org-type: LIR
address: Im Breitspiel 2-4
address: 69126
address: Heidelberg
address: Germany
phone: +49 711 358512765
fax-no: +49 6221 333167080
abuse-mailbox: abuse.kbw@byteaction.de
admin-c: RE834-RIPE
admin-c: TT2280-RIPE
mnt-ref: KabelBW-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: KabelBW IP Engineering
address: Kabel Badenwuerttemberg GmbH & Co. KG
address: Im Breitspiel 2-4
address: D-69126 Heidelberg
address: Germany
phone: +49 62213333988
fax-no: +49 6221333167080
remarks: *****************************************************
remarks: * Auskunftsersuchen nach TKG bitte per Fax an *
remarks: * folgende FaxNummer: 06221-333165000 *
remarks: * *
remarks: * Law-Enforcement agencies please use the following *
remarks: * faxnumber for all issues: +49 6221 333165000 *
remarks: *****************************************************
remarks: * Please send alle abuse-complaints to *
remarks: * abuse.kbw@byteaction.de *
remarks: *****************************************************
remarks: trouble: kbw@byteaction.de
admin-c: TT2280-RIPE
tech-c: TT2280-RIPE
nic-hdl: KIPE-RIPE
mnt-by: KabelBW-MNT
source: RIPE # Filtered
% Information related to '78.42.0.0/15AS29562'
route: 78.42.0.0/15
descr: KabelBW
origin: AS29562
mnt-by: KabelBW-MNT
mnt-lower: KabelBW-MNT
mnt-routes: KabelBW-MNT
source: RIPE # Filtered
Next
[studio42@flatus studio42]$ host 84.234.130.136
136.130.234.84.in-addr.arpa domain name pointer 136.84-234-130.customer.lyse.net
.
[studio42@flatus studio42]$ whois 84.234.130.136@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '84.234.130.0 - 84.234.130.255'
inetnum: 84.234.130.0 - 84.234.130.255
netname: NO-LYSE-CUSTOMER-RESIDENTIAL-LINKNETS
descr: Lyse Tele Residential Customer Linknets
remarks: INFRA-AW
country: NO
admin-c: LYSE1-RIPE
tech-c: LYSE1-RIPE
status: ASSIGNED PA
mnt-by: LYSE-MNT
source: RIPE # Filtered
role: Lyse Energi role Object
address: Lyse Energi AS
address: Postboks 8124
address: NO-4069 Stavanger
address: Norway
phone: +47 5190 8000
fax-no: +47 5190 8001
remarks: trouble: abuse@lyse.no
admin-c: VW112-RIPE
tech-c: VW112-RIPE
tech-c: AK367-RIPE
tech-c: TK1227-RIPE
tech-c: DAK29-RIPE
tech-c: RA1765-RIPE
tech-c: AS26015-RIPE
nic-hdl: LYSE1-RIPE
mnt-by: LYSE-MNT
abuse-mailbox: abuse@lyse.no
source: RIPE # Filtered
% Information related to '84.234.128.0/17AS29695'
route: 84.234.128.0/17
descr: LYSE-TELE
origin: AS29695
mnt-lower: LYSE-MNT
mnt-routes: LYSE-MNT
mnt-by: LYSE-MNT
Next!
[studio42@flatus studio42]$ host 89.29.35.218
218.35.29.89.in-addr.arpa domain name pointer 1495081946.ip2long.net.
[studio42@flatus studio42]$ whois 89.29.35.218@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '89.29.35.216 - 89.29.35.219'
inetnum: 89.29.35.216 - 89.29.35.219
netname: CUSTOMER18628091-NET
descr: Customer No. 18628091 network
country: CZ
admin-c: PCZ3-RIPE
tech-c: PCZ3-RIPE
status: ASSIGNED PA
mnt-by: PODACZ-MNT
source: RIPE # Filtered
role: PODA-CZ Contact Role
address: PODA s.r.o.
28. rijna 102
702 00 Ostrava
The Czech Republic
abuse-mailbox: abuse@poda.cz
admin-c: MS473-RIPE
admin-c: DT59-RIPE
tech-c: DT59-RIPE
tech-c: JV2210-RIPE
tech-c: KH1703-RIPE
nic-hdl: PCZ3-RIPE
mnt-by: PODACZ-MNT
source: RIPE # Filtered
% Information related to '89.29.0.0/17AS30764'
route: 89.29.0.0/17
descr: PODA-NET
origin: AS30764
mnt-by: PODACZ-MNT
source: RIPE # Filtered
Next!
[studio42@flatus studio42]$ host 91.18.51.6
6.51.18.91.in-addr.arpa domain name pointer p5B123306.dip0.t-ipconnect.de.
[studio42@flatus studio42]$ whois 91.18.51.6@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '91.0.0.0 - 91.23.255.255'
inetnum: 91.0.0.0 - 91.23.255.255
netname: DTAG-DIAL22
descr: Deutsche Telekom AG
country: DE
admin-c: DTIP
tech-c: DTST
status: ASSIGNED PA
remarks: ****************************************************************
**
remarks: * Abuse Contact: http://www.t-com.de/ip-abuse in case of Spam,
*
remarks: * Hack Attacks, Illegal Activity, Violation, Scans, Probes, etc.
*
remarks: ****************************************************************
**
mnt-by: DTAG-NIC
source: RIPE # Filtered
person: DTAG Global IP-Addressing
address: Deutsche Telekom AG
address: D-90492 Nuernberg
address: Germany
phone: +49 180 5334332
fax-no: +49 180 5334252
e-mail: ripe.dtip@telekom.de
nic-hdl: DTIP
mnt-by: DTAG-NIC
source: RIPE # Filtered
person: Security Team
address: Deutsche Telekom AG
address: Germany
phone: +49 180 5334332
fax-no: +49 180 5334252
e-mail: abuse@t-ipnet.de
nic-hdl: DTST
mnt-by: DTAG-NIC
source: RIPE # Filtered
% Information related to '91.0.0.0/10AS3320'
route: 91.0.0.0/10
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
source: RIPE # Filtered
Next!
[studio42@flatus studio42]$ host 123.98.165.113
Host 113.165.98.123.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 123.98.165.113@whois.nic.or.kr
[whois.nic.or.kr]
query: 123.98.165.113
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
The following is organization information that is using the IPv4 address.
IPv4 Address : 123.98.160.0-123.98.175.255
Network Name : KNCTV-INFRA
Connect ISP Name : KNCTV
Registration Date : 20070605
Publishes : Y
[ Organization Information ]
Organization ID : ORG130458
Org Name : KangNam CableTV
Address : 239-1, Nonhyun-dong, Kangnam-gu
Detail Address : Seoul,korea
Zip Code : 135-010
[ Technical Contact Information ]
Name : Kim ChoHyun
Org Name : KangNam CableTV
Address : 239-1, Nonhyun-dong, Kangnam-gu
Detail Address : Seoul,korea
Zip Code : 135-010
Phone : +82-2-2056-7808
E-Mail : data@gsgbi.co.kr
--------------------------------------------------------------------------------
If the above contacts are not reachable, please contact following ISP
for further information.
[ ISP IPv4 Admin Contact Information ]
Name : Kim ChoHyun
Phone : +82-2-2056-7808
E-Mail : ip-adm@gsgbi.co.kr
[ ISP IPv4 Tech Contact Information ]
Name : Kim ChoHyun
Phone : +82-2-2056-7808
E-Mail : data@gsgbi.co.kr
[ ISP Network Abuse Contact Information ]
Name : Kim Cho Hyun
Phone : +82-2-2056-7808
E-Mail : abuse@gsgbi.co.kr
Next!
[studio42@flatus studio42]$ host 123.140.78.148
Host 148.78.140.123.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 123.140.78.148@whois.nic.or.kr
[whois.nic.or.kr]
query: 123.140.78.148
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
The IPv4 address is allocated and still held by the following ISP,
or its Whois information is not updated after assigned to end users.
Please contact following ISP for further information.
[ ISP Organization Information ]
Org Name : LG DACOM Corporation
Service Name : BORANET
Org Address : Seoul Gangnam-gu Yeoksam-dong
Org Detail Address: 706-1
[ ISP IPv4 Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-2089-7755
E-Mail : shkim082@chol.com
[ ISP IPv4 Tech Contact Information ]
Name : IP ADMIN
Phone : +82-2-2089-7755
E-mail : dkapqk7@bora.net
[ ISP Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-2089-0101
E-mail : security@bora.net
Next!
[studio42@flatus studio42]$ host 123.203.14.188
188.14.203.123.in-addr.arpa domain name pointer 123203014188.ctinets.com.
[studio42@flatus studio42]$ whois 123.203.14.188@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 123.202.0.0 - 123.203.255.255
netname: CTIHK
descr: City Telecom (H.K.) Ltd.
descr: Internet Service Provider in Hong Kong
country: HK
admin-c: CH134-AP
tech-c: SL113-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-CTI
mnt-routes: MAINT-HK-CTI
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20061218
changed: hm-changed@apnic.net 20070402
source: APNIC
person: CTINETS HOSTMASTER
address: 15/F, Trans Asia Centre,
address: 18 Kin Hong Street,
address: Kwai Chung, N.T.,
address: Hong Kong
country: HK
phone: +852-3145-5111
fax-no: +852-3145-5267
e-mail: hostmaster@ctihk.com
nic-hdl: CH134-AP
mnt-by: MAINT-HK-CTI
changed: hostmaster@ctihk.com 20000831
source: APNIC
person: Sam Leung
nic-hdl: SL113-AP
e-mail: fionat@ctihk.com
address: 15/F, Trans Asia Centre, 18 Kin Hong Street, Kwai Chung, Hong Kong
address:
address: + Send spam and abuse reports to
address: +
address: + <fionat@ctihk.com>
address: +
phone: +852-3145-5190
fax-no: +852-2199-8010
country: HK
changed: hostmaster@ctihk.com 20040707
mnt-by: MAINT-HK-CTI
source: APNIC
Next!
[studio42@flatus studio42]$ host 221.126.243.143
Host 143.243.126.221.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 221.126.243.143@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 221.124.0.0 - 221.127.255.255
netname: HGC
descr: Hutchison Global Communications
country: HK
admin-c: IH17-AP
tech-c: IH17-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-HGCADMIN
status: ALLOCATED PORTABLE
remarks: This object can only be modified by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your organisation
remarks: account name in the subject line.
changed: andycw@hgc.com.hk 20040209
changed: hm-changed@apnic.net 20040212
source: APNIC
person: ITMM HGC
nic-hdl: IH17-AP
e-mail: hgcnetwork@hgc.com.hk
address: 9/F Low Block ,
address: Hutchison Telecom Tower,
address: 99 Cheung Fai Rd, Tsing Yi,
address: HONG KONG
phone: +852-21229555
fax-no: +852-21239523
country: HK
remarks: Send spam reports to abuse@on-nets.com
remarks: and abuse reports to abuse@on-nets.com
remarks: Please include detailed information and
remarks: times in HKT
changed: hgcnetwork@hgc.com.hk 20050620
mnt-by: MAINT-HK-HGCADMIN
source: APNIC
Next!
[studio42@flatus studio42]$ host 221.127.4.46
Host 46.4.127.221.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 221.127.4.46@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 221.124.0.0 - 221.127.255.255
netname: HGC
descr: Hutchison Global Communications
country: HK
admin-c: IH17-AP
tech-c: IH17-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-HGCADMIN
status: ALLOCATED PORTABLE
remarks: This object can only be modified by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your organisation
remarks: account name in the subject line.
changed: andycw@hgc.com.hk 20040209
changed: hm-changed@apnic.net 20040212
source: APNIC
person: ITMM HGC
nic-hdl: IH17-AP
e-mail: hgcnetwork@hgc.com.hk
address: 9/F Low Block ,
address: Hutchison Telecom Tower,
address: 99 Cheung Fai Rd, Tsing Yi,
address: HONG KONG
phone: +852-21229555
fax-no: +852-21239523
country: HK
remarks: Send spam reports to abuse@on-nets.com
remarks: and abuse reports to abuse@on-nets.com
remarks: Please include detailed information and
remarks: times in HKT
changed: hgcnetwork@hgc.com.hk 20050620
mnt-by: MAINT-HK-HGCADMIN
source: APNIC
Next!
[studio42@flatus studio42]$ host 24.20.130.207
207.130.20.24.in-addr.arpa domain name pointer c-24-20-130-207.hsd1.mn.comcast.n
et.
207.130.20.24.in-addr.arpa domain name pointer c-24-20-130-207.hsd1.or.comcast.n
et.
[studio42@flatus studio42]$ whois 24.20.130.207@whois.arin.net
[whois.arin.net]
Comcast Cable Communications, Inc. EASTERNSHORE-1 (NET-24-16-0-0-1)
24.16.0.0 - 24.23.255.255
Comcast Cable Communications OREGON-7 (NET-24-20-0-0-1)
24.20.0.0 - 24.21.255.255
# ARIN WHOIS database, last updated 2008-02-06 19:02
# Enter ? for additional hints on searching ARIN's WHOIS database.
Sufficient for Comcast.
Next!
[studio42@flatus studio42]$ host 59.149.201.184
184.201.149.59.in-addr.arpa domain name pointer 059149201184.ctinets.com.
[studio42@flatus studio42]$ whois 59.149.201.184@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 59.148.0.0 - 59.149.255.255
netname: CTIHK
descr: City Telecom (H.K.) Ltd.
descr: Internet Service Provider in Hong Kong
country: HK
admin-c: CH134-AP
tech-c: SL113-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-CTI
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20041103
source: APNIC
person: CTINETS HOSTMASTER
address: 15/F, Trans Asia Centre,
address: 18 Kin Hong Street,
address: Kwai Chung, N.T.,
address: Hong Kong
country: HK
phone: +852-3145-5111
fax-no: +852-3145-5267
e-mail: hostmaster@ctihk.com
nic-hdl: CH134-AP
mnt-by: MAINT-HK-CTI
changed: hostmaster@ctihk.com 20000831
source: APNIC
person: Sam Leung
nic-hdl: SL113-AP
e-mail: fionat@ctihk.com
address: 15/F, Trans Asia Centre, 18 Kin Hong Street, Kwai Chung, Hong Kong
address:
address: + Send spam and abuse reports to
address: +
address: + <fionat@ctihk.com>
address: +
phone: +852-3145-5190
fax-no: +852-2199-8010
country: HK
changed: hostmaster@ctihk.com 20040707
mnt-by: MAINT-HK-CTI
source: APNIC
Next!
[studio42@flatus studio42]$ host 61.10.60.5
5.60.10.61.in-addr.arpa domain name pointer cm61-10-60-5.hkcable.com.hk.
[studio42@flatus studio42]$ whois 61.10.60.5@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 61.10.0.0 - 61.10.63.255
netname: HKCABLE-HK
descr: HK Cable TV Ltd
descr: Cable Multi-Media Services
country: HK
admin-c: AD23-AP
tech-c: AD23-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-ICABLE
changed: hostmaster@apnic.net 20000127
status: ALLOCATED PORTABLE
source: APNIC
person: administrator dns
address: 12/F., Cable TV Tower,
address: 9 Hoi Shing Road,
address: Tsuen Wan,
address: N.T.,
address: HK
country: HK
phone: +852-2112-7516
fax-no: +852-2112-7977
e-mail: dnsadmin@cms.hkcable.com
nic-hdl: AD23-AP
mnt-by: MAINT-HK-ICABLE
changed: dnsadmin@cms.hkcable.com 20000811
source: APNIC
Next!
[studio42@flatus studio42]$ host 61.58.184.213
213.184.58.61.in-addr.arpa domain name pointer 61-58-184-213.nty.dynamic.lsc.net
.tw.
[studio42@flatus studio42]$ whois 61.58.184.213@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 61.58.160.0 - 61.58.191.255
netname: TBC-TW
descr: Taiwan Broadband Communications, Co., Ltd.
descr: 2F, No. 10 Ta-Yien Ltd. 2F, No. 10 Ta-Yien Road, Pei-Tou
descr: District Taipei Taiwan 112
country: TW
admin-c: HN8-AP
tech-c: HN8-AP
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20010531
status: ALLOCATED PORTABLE
source: APNIC
person: Headend NTY
nic-hdl: HN8-AP
e-mail: headend@mail.lsc.net.tw
address: 16F, No. 27, Sec.2, Huan Nan Rd., Ping Chen, Taoyuan County, Taiwa
n
address: Ping Chen, 324, R.O.C
phone: +886-3-493-0343
fax-no: +886-3-493-0322
country: TW
changed: hostmaster@twnic.net.tw 20070310
mnt-by: MAINT-TW-TWNIC
source: APNIC
inetnum: 61.58.184.0 - 61.58.187.255
netname: TBCOM-NET
descr: TBCOM
descr: PING-CHENG Taiwan
country: TW
admin-c: HN619-TW
tech-c: AL364-TW
mnt-by: MAINT-TW-TWNIC
remarks: This information has been partially mirrored by APNIC from
remarks: TWNIC. To obtain more specific information, please use the
remarks: TWNIC whois server at whois.twnic.net.
changed: headend@mail.lsc.net.tw 20040412
status: ASSIGNED NON-PORTABLE
source: TWNIC
person: Headend Engineer
address: LSC
address: Ping Chen Taiwan
e-mail: headend@mail.lsc.net.tw
nic-hdl: HN619-TW
changed: hostmaster@twnic.net.tw20070313
source: TWNIC
person: abuse lsc
address: Best CableTelevision Co, Ltd.
address: Hsinchu city Taiwan
e-mail: abuse@mail.lsc.net.tw
nic-hdl: AL364-TW
changed: hostmaster@twnic.net.tw20060302
source: TWNIC
Just to show scumminess:
[studio42@flatus studio42]$ host iaegi.beautybegan.com
iaegi.beautybegan.com has address 125.59.113.87
iaegi.beautybegan.com has address 59.149.201.184
iaegi.beautybegan.com has address 61.10.60.5
iaegi.beautybegan.com has address 67.168.126.127
iaegi.beautybegan.com has address 67.181.205.225
iaegi.beautybegan.com has address 68.77.14.35
iaegi.beautybegan.com has address 71.128.74.126
iaegi.beautybegan.com has address 76.181.196.177
iaegi.beautybegan.com has address 78.42.100.253
iaegi.beautybegan.com has address 85.179.218.12
iaegi.beautybegan.com has address 89.178.58.103
iaegi.beautybegan.com has address 99.230.172.22
iaegi.beautybegan.com has address 123.98.165.113
iaegi.beautybegan.com has address 123.140.78.148
iaegi.beautybegan.com has address 123.203.14.188
That's 5 minutes between when I started and where it is now.
[studio42@flatus studio42]$ whois beautybegan.com
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: BEAUTYBEGAN.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS0.FORGOTTENSIN.COM
Name Server: NS0.TENSHINOHANE.COM
Name Server: NS0.TOPTENSLIST.COM
Name Server: NS0.TORSTENSTV.COM
Status: clientTransferProhibited
Updated Date: 05-feb-2008
Creation Date: 30-jan-2008
Expiration Date: 30-jan-2009
>>> Last update of whois database: Thu, 07 Feb 2008 18:36:53 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.dns.com.cn]
Domain Name.......... beautybegan.com
Creation Date........ 2008-01-31 01:15:01
Registration Date.... 2008-01-31 01:15:01
Expiry Date.......... 2009-01-31 01:15:01
Organisation Name.... T.I
Organisation Address. 1021 Roselawn Ave, Apt A, Modesto, CA
Organisation Address.
Organisation Address. Foreignness
Organisation Address. 95351
Organisation Address. WG
Organisation Address. US
Admin Name........... tekk o
Admin Address........ 1021 Roselawn Ave, Apt A, Modesto, CA
Admin Address........
Admin Address........ Foreignness
Admin Address........ 95351
Admin Address........ WG
Admin Address........ US
Admin Email.......... groundvalue.winnoon@gmail.com
Admin Phone.......... +86.5442655
Admin Fax............ +86.5442655
Tech Name............ tekk o
Tech Address......... 1021 Roselawn Ave, Apt A, Modesto, CA
Tech Address.........
Tech Address......... Foreignness
Tech Address......... 95351
Tech Address......... WG
Tech Address......... US
Tech Email........... groundvalue.winnoon@gmail.com
Tech Phone........... +86.5442655
Tech Fax............. +86.5442655
Bill Name............ tekk o
Bill Address......... 1021 Roselawn Ave, Apt A, Modesto, CA
Bill Address.........
Bill Address......... Foreignness
Bill Address......... 95351
Bill Address......... WG
Bill Address......... US
Bill Email........... groundvalue.winnoon@gmail.com
Bill Phone........... +86.5442655
Bill Fax............. +86.5442655
Name Server.......... ns0.forgottensin.com
Name Server.......... ns0.torstenstv.com
Name Server.......... ns0.toptenslist.com
Name Server.......... ns0.tenshinohane.com
An invalid address.
[studio42@flatus studio42]$ host ns0.forgottensin.com
ns0.forgottensin.com has address 91.66.79.139
[studio42@flatus studio42]$ host 91.66.79.139
Host 139.79.66.91.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 91.66.79.139@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '91.66.0.0 - 91.66.255.255'
inetnum: 91.66.0.0 - 91.66.255.255
netname: KABEL-DEUTSCHLAND-CUSTOMER-SERVICES-13
descr: Kabel Deutschland Breitband Customer 13
country: DE
admin-c: FH984-RIPE
tech-c: FH984-RIPE
status: ASSIGNED PA
mnt-by: MNT-KABELDEUTSCHLAND
mnt-lower: MNT-KABELDEUTSCHLAND
mnt-routes: MNT-KABELDEUTSCHLAND
source: RIPE # Filtered
person: Frank Hellemink
address: Kabel Deutschland
phone: +49 391 5557 4611
fax-no: +49 391 5557 4611
e-mail: frank.hellemink@kabeldeutschland.de
nic-hdl: FH984-RIPE
mnt-by: MNT-AS31334
source: RIPE # Filtered
% Information related to '91.64.0.0/14AS31334'
route: 91.64.0.0/14
descr: Kabeldeutschland Super Route 91.64.0.0
origin: AS31334
mnt-by: MNT-KABELDEUTSCHLAND
source: RIPE # Filtered
[studio42@flatus studio42]$ whois forgottensin.com
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: FORGOTTENSIN.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.DNS.COM.CN
Name Server: NS2.DNS.COM.CN
Status: clientHold
Status: clientTransferProhibited
Updated Date: 02-feb-2008
Creation Date: 27-jan-2008
Expiration Date: 27-jan-2009
>>> Last update of whois database: Thu, 07 Feb 2008 18:37:54 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.dns.com.cn]
Domain Name.......... forgottensin.com
Creation Date........ 2008-01-27 13:04:15
Registration Date.... 2008-01-27 13:04:15
Expiry Date.......... 2009-01-27 13:04:15
Organisation Name.... Heath Ledger Sdn
Organisation Address. Canada City Street
Organisation Address.
Organisation Address. Canada
Organisation Address. 54785
Organisation Address. WG
Organisation Address. CA
Admin Name........... Heath Ledger Sdn
Admin Address........ Canada City Street
Admin Address........
Admin Address........ Canada
Admin Address........ 54785
Admin Address........ WG
Admin Address........ CA
Admin Email.......... heathe@hotmail.com
Admin Phone.......... +86.785236
Admin Fax............ +86.8741256
Tech Name............ Heath Ledger Sdn
Tech Address......... Canada City Street
Tech Address.........
Tech Address......... Canada
Tech Address......... 54785
Tech Address......... WG
Tech Address......... CA
Tech Email........... heathe@hotmail.com
Tech Phone........... +86.785236
Tech Fax............. +86.8741256
Bill Name............ Heath Ledger Sdn
Bill Address......... Canada City Street
Bill Address.........
Bill Address......... Canada
Bill Address......... 54785
Bill Address......... WG
Bill Address......... CA
Bill Email........... heathe@hotmail.com
Bill Phone........... +86.785236
Bill Fax............. +86.8741256
Name Server.......... ns1.dns.com.cn
Name Server.......... ns2.dns.com.cn
Next scummy DNS:
[studio42@flatus studio42]$ host ns0.torstenstv.com
ns0.torstenstv.com has address 89.20.151.208
[studio42@flatus studio42]$ host 89.20.151.208
Host 208.151.20.89.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 89.20.151.208@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '89.20.144.0 - 89.20.151.255'
inetnum: 89.20.144.0 - 89.20.151.255
netname: TI-BB
descr: customers broadband aggregation
remarks: INFRA-AW
country: RU
admin-c: TI
tech-c: TI
status: ASSIGNED PA
mnt-by: TI-MNT
source: RIPE # Filtered
role: TI NOC
address: NetByNet holding
address: Moscow, Russia, 117105
address: Varshavskoe highway, 9 bld. 1B
remarks: *****************************************
remarks: Please send abuse reports to abuse@ti.ru.
remarks: *****************************************
abuse-mailbox: abuse@ti.ru
phone: +7 495 980 2800
fax-no: +7 495 740 4811
admin-c: SGR
admin-c: ALI224-RIPE
tech-c: SGR
nic-hdl: TI
mnt-by: TI-MNT
source: RIPE # Filtered
% Information related to '89.20.128.0/19AS12714'
route: 89.20.128.0/19
descr: TI route block
origin: AS12714
mnt-by: TI-MNT
source: RIPE # Filtered
% Information related to '89.20.144.0/20AS12714'
route: 89.20.144.0/20
descr: TI route block
origin: AS12714
mnt-by: TI-MNT
source: RIPE # Filtered
% Information related to '89.20.144.0/21AS34691'
route: 89.20.144.0/21
descr: TI route block
origin: AS34691
mnt-by: TI-MNT
source: RIPE # Filtered
[studio42@flatus studio42]$ whois torstenstv.com
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: TORSTENSTV.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.DNS.COM.CN
Name Server: NS2.DNS.COM.CN
Status: clientHold
Status: clientTransferProhibited
Updated Date: 02-feb-2008
Creation Date: 27-jan-2008
Expiration Date: 27-jan-2009
>>> Last update of whois database: Thu, 07 Feb 2008 18:39:11 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.dns.com.cn]
Domain Name.......... torstenstv.com
Creation Date........ 2008-01-27 13:04:11
Registration Date.... 2008-01-27 13:04:11
Expiry Date.......... 2009-01-27 13:04:11
Organisation Name.... Heath Ledger Sdn
Organisation Address. Canada City Street
Organisation Address.
Organisation Address. Canada
Organisation Address. 54785
Organisation Address. WG
Organisation Address. CA
Admin Name........... Heath Ledger Sdn
Admin Address........ Canada City Street
Admin Address........
Admin Address........ Canada
Admin Address........ 54785
Admin Address........ WG
Admin Address........ CA
Admin Email.......... heathe@hotmail.com
Admin Phone.......... +86.785236
Admin Fax............ +86.8741256
Tech Name............ Heath Ledger Sdn
Tech Address......... Canada City Street
Tech Address.........
Tech Address......... Canada
Tech Address......... 54785
Tech Address......... WG
Tech Address......... CA
Tech Email........... heathe@hotmail.com
Tech Phone........... +86.785236
Tech Fax............. +86.8741256
Bill Name............ Heath Ledger Sdn
Bill Address......... Canada City Street
Bill Address.........
Bill Address......... Canada
Bill Address......... 54785
Bill Address......... WG
Bill Address......... CA
Bill Email........... heathe@hotmail.com
Bill Phone........... +86.785236
Bill Fax............. +86.8741256
Name Server.......... ns2.dns.com.cn
Name Server.......... ns1.dns.com.cn
Next scummy DNS:
[studio42@flatus studio42]$ host ns0.toptenslist.com
ns0.toptenslist.com has address 79.120.63.0
[studio42@flatus studio42]$ host 79.120.63.0
Host 0.63.120.79.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 79.120.63.0@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '79.120.56.0 - 79.120.63.255'
inetnum: 79.120.56.0 - 79.120.63.255
netname: TI-BB
descr: customers broadband aggregation
remarks: INFRA-AW
country: RU
admin-c: TI
tech-c: TI
status: ASSIGNED PA
mnt-by: TI-MNT
source: RIPE # Filtered
role: TI NOC
address: NetByNet holding
address: Moscow, Russia, 117105
address: Varshavskoe highway, 9 bld. 1B
remarks: *****************************************
remarks: Please send abuse reports to abuse@ti.ru.
remarks: *****************************************
abuse-mailbox: abuse@ti.ru
phone: +7 495 980 2800
fax-no: +7 495 740 4811
admin-c: SGR
admin-c: ALI224-RIPE
tech-c: SGR
nic-hdl: TI
mnt-by: TI-MNT
source: RIPE # Filtered
% Information related to '79.120.0.0/18AS12714'
route: 79.120.0.0/18
descr: TI route block
origin: AS12714
mnt-by: TI-MNT
source: RIPE # Filtered
% Information related to '79.120.32.0/19AS12714'
route: 79.120.32.0/19
descr: TI route block
origin: AS12714
mnt-by: TI-MNT
source: RIPE # Filtered
[studio42@flatus studio42]$ whois toptenslist.com
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: TOPTENSLIST.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.DNS.COM.CN
Name Server: NS2.DNS.COM.CN
Status: clientHold
Status: clientTransferProhibited
Updated Date: 02-feb-2008
Creation Date: 27-jan-2008
Expiration Date: 27-jan-2009
>>> Last update of whois database: Thu, 07 Feb 2008 18:41:44 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.dns.com.cn]
Domain Name.......... toptenslist.com
Creation Date........ 2008-01-27 13:04:18
Registration Date.... 2008-01-27 13:04:18
Expiry Date.......... 2009-01-27 13:04:18
Organisation Name.... Heath Ledger Sdn
Organisation Address. Canada City Street
Organisation Address.
Organisation Address. Canada
Organisation Address. 54785
Organisation Address. WG
Organisation Address. CA
Admin Name........... Heath Ledger Sdn
Admin Address........ Canada City Street
Admin Address........
Admin Address........ Canada
Admin Address........ 54785
Admin Address........ WG
Admin Address........ CA
Admin Email.......... heathe@hotmail.com
Admin Phone.......... +86.785236
Admin Fax............ +86.8741256
Tech Name............ Heath Ledger Sdn
Tech Address......... Canada City Street
Tech Address.........
Tech Address......... Canada
Tech Address......... 54785
Tech Address......... WG
Tech Address......... CA
Tech Email........... heathe@hotmail.com
Tech Phone........... +86.785236
Tech Fax............. +86.8741256
Bill Name............ Heath Ledger Sdn
Bill Address......... Canada City Street
Bill Address.........
Bill Address......... Canada
Bill Address......... 54785
Bill Address......... WG
Bill Address......... CA
Bill Email........... heathe@hotmail.com
Bill Phone........... +86.785236
Bill Fax............. +86.8741256
Name Server.......... ns1.dns.com.cn
Name Server.......... ns2.dns.com.cn
Last one:
[studio42@flatus studio42]$ host ns0.tenshinohane.com
ns0.tenshinohane.com has address 79.120.86.105
[studio42@flatus studio42]$ host 79.120.86.105
Host 105.86.120.79.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 79.120.86.105@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '79.120.0.0 - 79.120.127.255'
inetnum: 79.120.0.0 - 79.120.127.255
org: ORG-TL8-RIPE
netname: RU-TI-20070705
descr: Fairlie Holding & Finance Limited
country: RU
admin-c: TI
tech-c: TI
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: TI-MNT
mnt-routes: TI-MNT
source: RIPE # Filtered
organisation: ORG-TL8-RIPE
org-name: Fairlie Holding & Finance Limited
org-type: LIR
address: NetByNet Holding
Andrey Ryazanov
Varshavskoe highway, 9 bld. 1B
117105 Moscow
RUSSIAN FEDERATION
phone: +7 495 980 2800
fax-no: +7 495 740 4811
admin-c: ALI224-RIPE
admin-c: SGR
mnt-ref: TI-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: TI NOC
address: NetByNet holding
address: Moscow, Russia, 117105
address: Varshavskoe highway, 9 bld. 1B
remarks: *****************************************
remarks: Please send abuse reports to abuse@ti.ru.
remarks: *****************************************
abuse-mailbox: abuse@ti.ru
phone: +7 495 980 2800
fax-no: +7 495 740 4811
admin-c: SGR
admin-c: ALI224-RIPE
tech-c: SGR
nic-hdl: TI
mnt-by: TI-MNT
source: RIPE # Filtered
% Information related to '79.120.64.0/18AS12714'
route: 79.120.64.0/18
descr: TI route block
origin: AS12714
mnt-by: TI-MNT
source: RIPE # Filtered
[studio42@flatus studio42]$ whois tenshinohane.com
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: TENSHINOHANE.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.DNS.COM.CN
Name Server: NS2.DNS.COM.CN
Status: clientHold
Status: clientTransferProhibited
Updated Date: 02-feb-2008
Creation Date: 27-jan-2008
Expiration Date: 27-jan-2009
>>> Last update of whois database: Thu, 07 Feb 2008 18:42:46 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.dns.com.cn]
Domain Name.......... tenshinohane.com
Creation Date........ 2008-01-27 13:04:08
Registration Date.... 2008-01-27 13:04:08
Expiry Date.......... 2009-01-27 13:04:08
Organisation Name.... Heath Ledger Sdn
Organisation Address. Canada City Street
Organisation Address.
Organisation Address. Canada
Organisation Address. 54785
Organisation Address. WG
Organisation Address. CA
Admin Name........... Heath Ledger Sdn
Admin Address........ Canada City Street
Admin Address........
Admin Address........ Canada
Admin Address........ 54785
Admin Address........ WG
Admin Address........ CA
Admin Email.......... heathe@hotmail.com
Admin Phone.......... +86.785236
Admin Fax............ +86.8741256
Tech Name............ Heath Ledger Sdn
Tech Address......... Canada City Street
Tech Address.........
Tech Address......... Canada
Tech Address......... 54785
Tech Address......... WG
Tech Address......... CA
Tech Email........... heathe@hotmail.com
Tech Phone........... +86.785236
Tech Fax............. +86.8741256
Bill Name............ Heath Ledger Sdn
Bill Address......... Canada City Street
Bill Address.........
Bill Address......... Canada
Bill Address......... 54785
Bill Address......... WG
Bill Address......... CA
Bill Email........... heathe@hotmail.com
Bill Phone........... +86.785236
Bill Fax............. +86.8741256
Name Server.......... ns1.dns.com.cn
Name Server.......... ns2.dns.com.cn
