Spam Alert
 
 Full Report: /King_Replica_spam195294.html
 
 Changed status to confirmed spam.IP Converted: 121.11.158.170

dword = 2030804650
hex1 = 0x790b9eaa
hex2 = 0x79.0xb.0x9e.0xaa
oct = 0171.013.0236.0252
View CIDR AS4134 Report: http://www.cidr-report.org/cgi-bin/as-report?as=4134

"4134 | CN | apnic | 2002-08-01 | CHINANET-BACKBONE No.31,Jin-rong Street"<br />
Extended information for AS4134:
State/Province:
Country: cn
Responsible Domain: chinanet.cn.net
Abuse Email: cncert@cert.org.cn
Criminal Evidence

See the Spam Wiki entry at http://www.spamtrackers.eu/wiki/index.php?title=King_Replicas
or from China: http://www.spamtrackers.hk/wiki/index.php?title=King_Replicas
See the McAfee Site Advisor information at http://siteadvisor.com/sites/piecestand.com


> 35 Reg
REGISTRATION OF THE WEB SITE: piecestand.com
ACTION: To suspend this criminal site which breaks your terms of service, set the domain status to clientHold


> HICHINA
REGISTRATION OF THE NAME SERVERS
These name servers are registered by criminals to resolve only illegal web sites. This breaks your terms of service. You can safely suspend them:
ns3.wiuyqican.com 121.11.158.170 Blacklisted China URIBL SBL65587 |
ns4.wiuyqican.com 59.63.41.98 Blacklisted China URIBL SBL65484 |

ACTION: To suspend these name servers successfully, follow these steps.
1. set the ns Address records to a non-routable address, such as 127.0.0.1 or 61.61.61.61.
2. Set the domain status to clientUpdateProhibited, clientTransferProhibited, clientDeleteProhibited, and clientHold


> CNCERT
IP ADDRESS OF HOST: 121.11.158.170
The IP address of this criminal site is within your allocated address space.
ACTION: Black-hole the route to this address to prevent further criminal activity

Arrival-Date: Fri, 4 Jul 2008 02:29:16 +0000 (UTC)

Final-Recipient: rfc822; regadm@hichina.com
Action: failed
Status: 5.0.0
Remote-MTA: dns; mxrelay.hichina.com
Diagnostic-Code: smtp; 553 This target address is not our MX service client.