2006-06-23

'Leni Neto' -- Parana, Brazil

'%CUSTOM_FINANCIAL_TERMS@gmail.com'

You may have received some of these in the last couple of months. Some 'custom financial terms' (when they do it right), followed by a random word, separated by underscores.

There are a few harvest IPs. This one's in Brazil, and has the name 'Leni Neto':

$ whois NET-64-15-139-32-1

CustName: Leni Neto
Address: candido de abreu 107
City: Parana
StateProv:
PostalCode: 83280
Country: BR
RegDate: 2006-05-25
Updated: 2006-05-25

There's also

$ whois 209.200.225.93

OrgName: ADDD2NET COM INC DBA LUNARPAGES
OrgID: ACIDL
Address: Add2Net, Inc.
Address: Lunarpages Division
Address: 100 East La Habra Blvd.
City: La Habra
StateProv: CA

$ whois 65.23.156.33

OrgName: Datarealm Internet Services
OrgID: DIS-91
Address: PO Box 1616
City: Hudson
StateProv: WI
PostalCode: 54016
Country: US

and finally

$ whois 72.2.24.104

OrgName: Big Pipe Inc.
OrgID: BGPP
Address: Suite 400
Address: 630 - 3rd Ave. SW
City: Calgary
StateProv: AB
PostalCode: T2P-4L4
Country: CA

I'm guessing the last three are colo for hosting spam content. Anyone in Parana know 'Leni'?

0 Comments:

Post a Comment

Links to this post:

Create a Link

<< Home