Well, this has got to be the most annoying piece of spam I have received recently. It seems that now even the crack-scripting community is using spam to advertise their “services.” I have included a copy of the email – the more disturbing items I have emphasized in bold. The email:<\/p>\n
From: noreply-52@ww-nn.web-hack.ru
\nBcc:
\nReturn-Path: noreply-52@ww-nn.web-hack.ru
\nX-OriginalArrivalTime: 06 Mar 2006 13:36:47.0450 (UTC)
\nFILETIME=410ABA0:01C64123]
\nDate: 6 Mar 2006 04:36:47 -0900
\nDear Sir\/Madam, Hello!
\nWe are internet hackers crew – Web-hack. We propose you for sale some interesting things: – private exploits – http:\/\/forum.web-hack.ru – stolen credit cards and bank accounts<\/strong> – http:\/\/forum.web-hack.ru – we infect users pc’s with your trojan for low prices (10000 infected pc’s for 25$)<\/strong> – http:\/\/forum.web-hack.ru – bulletproof domains and hosting – http:\/\/forum.web-hack.ru Best offer – bulletproof domain + hosting =0 usd\/week. You can use this hosting for any scam\/fraud and nobody will close it! For more information look at – http:\/\/forum.web-hack.ru P.S. We are registering bulletproof domains on our partner site http:\/\/www.r01.ru\/ there we have “our” people to guarantee stability of our domains and hosting so any organization like spamhaus.org cannot down our hosting and domains. We are now spaming 5 000 000 people<\/strong> look out the domain is alive as always and never gonna be down !! Please go and order our services at: http:\/\/forum.web-hack.ru Msg-ID: 12543<\/p><\/blockquote>\nWhois:<\/p>\n
forum.web-hack.ru
\nww-nn.web-hack.ru<\/p>\n217.107.217.167
\n217.107.217.168<\/p>\nOrgName: RIPE Network Coordination Centre
\nAddress: P.O. Box 10096
\nCity: Amsterdam
\nStateProv:
\nPostalCode: 1001EB
\nCountry: NL
\nComment:
\nRegDate:
\nUpdated: 2004-12-13
\nOrgID: RIPE
\nAddress: P.O. Box 10096
\nCity: Amsterdam
\nStateProv:
\nPostalCode: 1001EB
\nCountry: NL<\/p>\nReferralServer: whois:\/\/whois.ripe.net:43<\/p>\n
NetRange: 217.0.0.0 – 217.255.255.255
\nCIDR: 217.0.0.0\/8
\nNetName: 217-RIPE
\nNetHandle: NET-217-0-0-0-1
\nParent:
\nNetType: Allocated to RIPE NCC
\nNameServer: NS-PRI.RIPE.NET
\nNameServer: NS3.NIC.FR
\nNameServer: SUNIC.SUNET.SE
\nNameServer: NS-EXT.ISC.ORG
\nNameServer: SEC1.APNIC.NET
\nNameServer: SEC3.APNIC.NET
\nNameServer: TINNIE.ARIN.NET
\nComment: These addresses have been further assigned to users in
\nComment: the RIPE NCC region. Contact information can be found in
\nComment: the RIPE database at http:\/\/www.ripe.net\/whois
\nRegDate: 2000-06-05
\nUpdated: 2005-07-27<\/p>\n# ARIN WHOIS database, last updated 2006-03-05 19:10
\n# Enter ? for additional hints on searching ARIN’s WHOIS database.<\/p>\nwww.r01.ru<\/p>\n
195.24.65.17<\/p>\n
% This is the RIPE Whois query server #2.
\n% The objects are in RPSL format.<\/p>\n% Information related to ‘195.24.64.0 – 195.24.71.255’<\/p>\n
inetnum: 195.24.64.0 – 195.24.71.255
\nnetname: PARKLINE-1
\ndescr: Garant-Park-Telecom
\ndescr: Science Park, MSU
\ndescr: Lebedeva St., Leninskie Gory
\ndescr: Moscow 119899, Russia
\ncountry: RU
\nadmin-c: PAN-RIPE
\ntech-c: PAN-RIPE
\nstatus: ASSIGNED PI
\nmnt-by: PAN1-RIPE-MNT
\nmnt-by: RIPE-NCC-HM-PI-MNT
\nmnt-lower: RIPE-NCC-HM-PI-MNT
\nmnt-routes: PAN1-RIPE-MNT
\nsource: RIPE # Filtered<\/p>\nperson: Alexander V Panov
\naddress: MSU, Science Park, Garant-Park-Telecom
\naddress: Moscow
\naddress: Russia
\nremarks: phone: +7 095 7898207
\nphone: +7 495 7898207
\nremarks: fax-no: +7 095 9308800
\nfax-no: +7 495 9308800
\ne-mail: panov@parkline.ru
\nnic-hdl: PAN-RIPE
\nmnt-by: PAN1-RIPE-MNT
\nsource: RIPE # Filtered
\nremarks: modified for Russian phone area changes<\/p>\n% Information related to ‘195.24.64.0\/21AS25537’<\/p>\n
route: 195.24.64.0\/21
\ndescr: Garant-Park Telecom Block 3
\ndescr: Science Park, Moscow State University
\ndescr: Lenin’s Hills, Moscow, Russia
\norigin: AS25537
\nmnt-by: PAN1-RIPE-MNT
\nsource: RIPE # Filtered<\/p>\nDefinitely ones to watch for in your log files.<\/p>\n","protected":false},"excerpt":{"rendered":"
Well, this has got to be the most annoying piece of spam I have received recently. It seems that now even the crack-scripting community is using spam to advertise their “services.” I have included a …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[10],"tags":[147],"class_list":["post-152","post","type-post","status-publish","format-standard","hentry","category-security","tag-security"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pxT7i-2s","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.evardsson.com\/blog\/wp-json\/wp\/v2\/posts\/152","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.evardsson.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.evardsson.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.evardsson.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.evardsson.com\/blog\/wp-json\/wp\/v2\/comments?post=152"}],"version-history":[{"count":0,"href":"https:\/\/www.evardsson.com\/blog\/wp-json\/wp\/v2\/posts\/152\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.evardsson.com\/blog\/wp-json\/wp\/v2\/media?parent=152"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.evardsson.com\/blog\/wp-json\/wp\/v2\/categories?post=152"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.evardsson.com\/blog\/wp-json\/wp\/v2\/tags?post=152"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}