Re: [Exim] New generation of spammers

Top Page
Delete this message
Reply to this message
Author: George Szekely
Date:  
To: exim-users
Subject: Re: [Exim] New generation of spammers
>Not like its hard to find these low lifes :)
>
>For Hotoptions.net
>
>enjoy...
>
>Cyber Services, Inc. UU-208-226-48-2 (NET-208-226-48-0-1)
>                                   208.226.48.0 - 208.226.51.255
>Cyber Services, Inc. CSRV-6 (NET-208-226-48-0-2)
>                                   208.226.48.0 - 208.226.48.254



You can block port 25 for 208.226.48.0 - 208.226.48.254
but hotoptions.net will still resolve to 127.0.0.1





>
>Their ISP is UUNET
>
>Registrant:
> Advertising International
> 5840 Red Bug Lake Rd. #415
> Winter Springs, FL 32708
> US
> 407-650-3437
>Fax:407-650-3437
>
>
>Domain Name: HOTOPTIONS.NET
>
>Administrative Contact:
> Newlan, Cynthia vacplanners@???
> 5840 Red Bug Lake Rd. #415
> Winter Springs, FL 32708
> US
> 407-650-3437
>Fax:407-650-3437
>
>
>Technical Contact:
> Newlan, Cynthia vacplanners@???
> 5840 Red Bug Lake Rd. #415
> Winter Springs, FL 32708
> US
> 407-650-3437
>Fax:407-650-3437
>
>
>Record last updated 03-04-2003 01:15:21 AM
>Record expires on 01-30-2004
>Record created on 01-30-2003
>
>Domain servers in listed order:
>    NS0.DIRECTNIC.COM    204.251.10.100
>    NS1.DIRECTNIC.COM    206.251.177.2

>
>----- Original Message -----
>From: "George Szekely" <gms@???>
>To: <exim-users@???>
>Sent: Wednesday, March 12, 2003 8:57 AM
>Subject: [Exim] New generation of spammers
>
>
>> Take "hotoptions.net" for example. It's impossible to lock them out.
>> Do a ping, tracerout, lookup, whatever... It all resolves to
>> "127.0.0.1". How? These spammers own their own registry.
>>
>>
>>
>>
>> ; <<>> DiG 2.1 <<>> @ns1.earthlink.net hotoptions.net. ANY
>> ; (1 server found)
>> ;; res options: init recurs defnam dnsrch
>> ;; got answer:
>> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
>> ;; flags: qr rd ra; Ques: 1, Ans: 4, Auth: 2, Addit: 0
>> ;; QUESTIONS:
>> ;; hotoptions.net, type = ANY, class = IN
>> ;; ANSWERS:
>> hotoptions.net. 2533 SOA ns1.directnic.com.
>> hostmaster.hotoptions.net. (
>> 1047487529 serial
>> 16384 refresh (4 hours 33 mins 4 secs)
>> 2048 retry (34 mins 8 secs)
>> 1048576 expire (12 days 3 hours 16 mins 16 secs)
>> 2560 ) minimum (42 mins 40 secs)
> > hotoptions.net. 61942 A 127.0.0.1
>> hotoptions.net. 86373 NS ns0.directnic.com.
>> hotoptions.net. 86373 NS ns1.directnic.com.
>> ;; AUTHORITY RECORDS:
>> hotoptions.net. 86373 NS ns0.directnic.com.
>> hotoptions.net. 86373 NS ns1.directnic.com.
>> ;; Total query time: 12 msec
>> ;; FROM: us.mirror.menandmice.com to SERVER: ns1.earthlink.net
>207.217.126.41
>> ;; WHEN: Wed Mar 12 09:51:44 2003
>> ;; MSG SIZE sent: 32 rcvd: 172
>>
>> --
>>
>> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim
>details at http://www.exim.org/ ##
>>
>>
>>
>
>
>--
>
>## List details at http://www.exim.org/mailman/listinfo/exim-users
>Exim details at http://www.exim.org/ ##