On Tue, 21 Oct 2003 08:29:31 +0200, "Fruns Dimerik"
<bosschurch@planet.nl> wrote:
>Spam Remedy (anti spam created by spammers) is still moving. The word
>nagsoft says it all. Many suspect that this is a Trojan horse.
I wouldn't be surprised. The site shows being hosted at 202.103.67.50
and their nameservers at 193.121.11.15 and 202.103.67.50, with the
primary (former) one being hosted by EU.NET and the second (latter) by
Hunan Data. With highly-mobile stuff like this, it's as important to
report the DNS providers to THEIR ISPs as well as the site itself --
in this case, anti-spam@ns.chinanet.cn.net,
hostmaster@ns.chinanet.cn.net, and to liul@hndcb.hnpta.net.cn. for the
first, and to abuse@EU.net, abuse@kpn.be, postmaster@kpn.be, and
abuse@level3.net for the other. Even better, do a traceroute to each
nameserver IP , and email the abuse departments of the connectivity
providers as well. That's especially necessary when dealing with
Chinanet.
Sponge
Sponge's Secure Solutions
www.geocities.com/yosponge
My new email: yosponge2 att yahoo dott com


Reply With Quote