Busted TOASTEDspambots - 211.75.91.19 0001 - 2004-01-07 211.75.91.19 - www.az124.com/azsonia mailto:montage@ms14.hinet.net

211.75.91.19_0001 - 2004-01-07 211.75.91.19 - www.az124.com/azsonia mailto:montage@ms14.hinet.net

Jan 7 12:49:53 www sendmail[29330]: i07HnpO29330: from=<sonia432988@pchome.com.tw>, size…1, class=0, nrcpts=1, msgid=<200401071749.i07HnpO29330@www.munged.ext>, proto=SMTP, daemon=MTA, relaya-230-123-74.HINET-IP.hinet.net [61.230.123.74]
Jan 7 12:49:56 www sendmail[29333]: i07HnpO29330: ctladdr=<uageiaai03l16b24@munged.ext> (8/0), delay:00:04, xdelay:00:03, mailer=prog, pri0682, dsn=2.0.0, stat=Sent

ageiaai03l16b24@ decodes to
211.75.91.19 2003-12-16 02:24

[16/Dec/2003:02:24:22 -0500] ts 211.75.91.19 "GET / HTTP/1.0" 200 4534 -
[16/Dec/2003:02:24:23 -0500] ts 211.75.91.19 "GET /stupid/disptext/freecashisgood.net_0001 HTTP/1.0" 200 5523 -
[16/Dec/2003:21:08:51 -0500] ts 211.75.91.19 "GET /toastedspamban.gif HTTP/1.0" 200 9305 http://www.munged.ext/stupid/?c
[16/Dec/2003:21:08:52 -0500] ts 211.75.91.19 "GET /cgi-bin/cwcount?d=toastedstupid&c=ib HTTP/1.0" 200 68 http://www.munged.ext/stupid/?c
[16/Dec/2003:21:08:53 -0500] cw 211.75.91.19 "GET /advert/sonysoft.jpg HTTP/1.0" 200 7830 http://www.munged.ext/stupid/?c
[16/Dec/2003:21:09:02 -0500] ts 211.75.91.19 "GET /stupid/?c HTTP/1.0" 200 564606 http://www.google.com/search?sourceid=navclient&ie=UTF-8&oe=UTF-8&q=Kazaa+Pal
[16/Dec/2003:21:37:40 -0500] ts 211.75.91.19 "GET /stupid/disptext/kazaa-pal.com_0001 HTTP/1.0" 200 13549 http://www.google.com/search?sourceid=navclient&ie=UTF-8&oe=UTF-8&q=Kazaa+Pal
[16/Dec/2003:21:37:40 -0500] cw 211.75.91.19 "GET /advert/aloudad1.jpg HTTP/1.0" 200 8243 http://www.munged.ext/stupid/disptext/kazaa-pal.com_0001
[16/Dec/2003:21:37:57 -0500] ts 211.75.91.19 "GET /cgi-bin/cwcount?d=toastedstupid&c=ib HTTP/1.0" 200 69 -
[16/Dec/2003:21:43:58 -0500] ts 211.75.91.19 "GET /cgi-bin/cwcount?d=toastedstupid&c=ib HTTP/1.0" 200 68 -
[17/Dec/2003:11:07:33 -0500] cw 211.75.91.19 "GET /cgi-bin/cwcount?d=error404&c=e HTTP/1.0" 200 77 http://www.munged.ext/media/vidfact/
[18/Dec/2003:01:00:31 -0500] vu 211.75.91.19 "GET /vidshare/textdisp?swarrine-sailplane HTTP/1.0" 200 4728 http://www.google.com.tw/search?q=sailplane+movie+&hl=zh-TW&lr=&ie=UTF-8&oe=UTF-8&start&sa=N
[18/Dec/2003:01:00:36 -0500] cw 211.75.91.19 "GET /cwlogo02.jpg HTTP/1.0" 200 7832 http://www.munged.ext/vidshare/textdisp?swarrine-sailplane
[18/Dec/2003:01:00:38 -0500] cw 211.75.91.19 "GET /advert/vegasusers.jpg HTTP/1.0" 200 13635 http://www.munged.ext/vidshare/textdisp?swarrine-sailplane

inetnum: 211.75.0.0 - 211.75.127.255
netname: HINET-TW
descr: CHTD, Chunghwa Telecom Co.,Ltd.
descr: Data-Bldg.6F, No.21, Sec.21, Hsin-Yi Rd.
descr: Taipei Taiwan 100
country: TW
admin-c: HN27-AP
tech-c: HN28-AP
remarks: This information has been partially mirrored by APNIC from
remarks: TWNIC. To obtain more specific information, please use the
remarks: TWNIC whois server at whois.twnic.net.
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20000225
status: ALLOCATED PORTABLE
source: APNIC

person: HINET Network-Adm
address: CHTD, Chunghwa Telecom Co., Ltd.
address: Data-Bldg. 6F, No. 21, Sec. 21, Hsin-Yi Rd.,
address: Taipei Taiwan 100
country: TW
phone: +886 2 2322 3495
phone: +886 2 2322 3442
phone: +886 2 2344 3007
fax-no: +886 2 2344 2513
fax-no: +886 2 2395 5671
e-mail: network-adm@hinet.net
nic-hdl: HN27-AP
remarks: same as TWNIC nic-handle HN184-TW
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20000721
source: APNIC

person: HINET Network-Center
address: CHTD, Chunghwa Telecom Co., Ltd.
address: Data-Bldg. 6F, No. 21, Sec. 21, Hsin-Yi Rd.,
address: Taipei Taiwan 100
country: TW
phone: +886 2 2322 3495
phone: +886 2 2322 3442
phone: +886 2 2344 3007
fax-no: +886 2 2344 2513
fax-no: +886 2 2395 5671
e-mail: network-center@hinet.net
nic-hdl: HN28-AP
remarks: same as TWNIC nic-handle HN185-TW
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20000721
source: APNIC

inetnum: 211.75.91.0 - 211.75.91.255
netname: HINET-NET
descr: CHTD, Chunghwa Telecom Co., Ltd.
descr: Data-Bldg. 6F, No. 21, Sec. 21, Hsin-Yi Rd.,
descr: Taipei Taiwan
country: TW
admin-c: CYK-TW
tech-c: CYK-TW
mnt-by: MAINT-TW-TWNIC
remarks: This information has been partially mirrored by APNIC from
remarks: TWNIC. To obtain more specific information, please use the
remarks: TWNIC whois server at whois.twnic.net.
changed: fkchung@ms1.hinet.net 20030123
status: ASSIGNED NON-PORTABLE
source: TWNIC

person: Chung Yung Kang
address: Chunghwa Telecom Data communication Business Group
address: No.21, Hsin-Yi Rd., sec. 1
address: Taipei Taiwan
country: TW
phone: +886-2-2322-3442
fax-no: +886-2-2344-2513
e-mail: cykang@ms1.hinet.net
nic-hdl: CYK-TW
remarks: This information has been partially mirrored by APNIC from
remarks: TWNIC. To obtain more specific information, please use the
remarks: TWNIC whois server at whois.twnic.net.
changed: hostmaster@twnic.net 19990924
source: TWNIC

------------------------------------------------------------

Return-path: sonia432988@pchome.com.tw Wed Jan 7 12:49:53 2004 [2004-01-07 12:49:54 51939]
Received: from munged.ext (61-230-123-74.HINET-IP.hinet.net [61.230.123.74])
by www.munged.ext (8.11.6/8.11.6) with SMTP id i07HnpO29330
for <uageiaai03l16b24@munged.ext>; Wed, 7 Jan 2004 12:49:52 -0500
Message-Id: <200401071749.i07HnpO29330@www.munged.ext>
From: =?Big5?B?eWFob2+5caRss/g=?= <123@hinet.net>
Subject: =?Big5?B?r3WkSK91qMahQadBpECpd6Sjq0ihSQ==?Date: Thu, 8 Jan 2004 00:56:56 +0800
X-spamfilt: Chienworks* SpamFilt - 2004-01-07 12:49:54 - [51939]
X-spamfilt: Subject contains very long word
X-spamfilt: Excessive use of HTML: 9.63646032758987
X-spamfilt: s=/s - 1 - \W{4,}
X-spamfilt: bay hits: +0 -102
X-spamfilt: bay head: +2.6 -
X-spamfilt: bay body: + -
X-spamfilt: bay html: +1.8 -0.9
X-spamfilt: bay index: 0.958907938874394
X-spamfilt: #0 +0 -2 =1

<html>

<head>
<meta http-equiv="Content-Language" content="zh-tw">
<meta name="GENERATOR" content="Microsoft FrontPage 5.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<meta http-equiv="Content-Type" content="text/html; charset=big5">
<title>½Ð¥ý¬Ýºô¯¸</title>
</head>

<body bgcolor="#FFFF99">

¡@
½Ð¥ý¬Ýºô¯¸
¦pªG¦³¿³½ì½Ð¯d¤U¸ê®Æ
§ÚÌ·|»P§A³sµ¸
¡@

<a href="http://www.az124.com/azsonia/">½Ð¶i¤J</a>

</body>

</html>

------------------------------------------------------------

Montage Internatinal Corp.
No. 137, Chung-Shan St., Hsi-Chi,
Taipei, 211
TW

Domain Name: AZ124.COM

Administrative Contact-
Philip-John Wang: montage@ms14.hinet.net
Montage Internatinal Corp.
No. 137, Chung-Shan St., Hsi-Chi,
Taipei, 211
TW
Phone- 886 2 2631 3558
Fax-
Technical Contact-
Philip-John Wang: montage@ms14.hinet.net
Montage Internatinal Corp.
No. 137, Chung-Shan St., Hsi-Chi,
Taipei, 211
TW
Phone- 886 2 2631 3558
Fax-

Record update date: 2003-10-31 09:54:46
Record create date: 2003-10-31
Record expires on: 2004-10-31
Database last updated on: 2004-01-07 15:38:36 EST

Domain servers in listed order:

VDNS1.DIGITALUNITED.COM 139.175.252.19
VDNS2.DIGITALUNITED.COM 139.175.55.245

www.az124.com has address 192.72.83.76

Search results for: 192.72.83.76

OrgName: Institution for Information Industry
OrgID: III-3
Address: 9F, No. 125, Song Jiang Road
Address: Taipei, 10247
City:
StateProv:
PostalCode:
Country: TW

NetRange: 192.72.3.0 - 192.72.252.255
CIDR: 192.72.3.0/24, 192.72.4.0/22, 192.72.8.0/21, 192.72.16.0/20, 192.72.32.0/19, 192.72.64.0/18, 192.72.128.0/18, 192.72.192.0/19, 192.72.224.0/20, 192.72.240.0/21, 192.72.248.0/22, 192.72.252.0/24
NetName: SEED-NETS
NetHandle: NET-192-72-3-0-1
Parent: NET-192-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.SEED.NET.TW
NameServer: DNS.SEED.NET.TW
NameServer: TCDNS.SEED.NET.TW
NameServer: KSDNS.SEED.NET.TW
Comment:
RegDate: 1990-06-27
Updated: 2000-01-18

TechHandle: CK1107-ARIN
TechName: Kao, Cheng-I
TechPhone: 886-2-26966447
TechEmail: sysop@dns.seed.net.tw

# ARIN WHOIS database, last updated 2004-01-06 19:15
TOASTEDspam.com toasted spam dot com