User Panel
User Panel
User Panel
|
Posted: 5/19/2003 12:06:15 AM EDT
[#1]
Search results for: 205.214.89.85
OrgName: VONOC OrgID: VONO Address: 5970 S. Greenwood Plaza Blvd City: Englewood StateProv: CO PostalCode: 80111 Country: US NetRange: 205.214.64.0 - 205.214.95.255 CIDR: 205.214.64.0/19 NetName: VONOC-04 NetHandle: NET-205-214-64-0-1 Parent: NET-205-0-0-0-0 NetType: Direct Allocation NameServer: NS1.VONOC.NET NameServer: NS2.VONOC.NET Comment: RegDate: Updated: 2003-01-07 TechHandle: FF186-ARIN TechName: Franzel, Fred TechPhone: +1-720-279-2011 TechEmail: [email protected] OrgAbuseHandle: VAD1-ARIN OrgAbuseName: VODC Abuse Dept OrgAbusePhone: +1-720-279-2011 OrgAbuseEmail: [email protected] OrgTechHandle: FF186-ARIN OrgTechName: Franzel, Fred OrgTechPhone: +1-720-279-2011 OrgTechEmail: [email protected] # ARIN WHOIS database, last updated 2003-05-18 20:10 # Enter ? for additional hints on searching ARIN's WHOIS database. There's the place hosting that URL that was linked from your e-mail. I'd forward a copy of that to their abuse department, and maybe give them a call and let them know what's going on. |
|
|
|
Posted: 5/19/2003 12:10:41 AM EDT
[#2]
Is it normal to copyright a email?
|
|
|
|
Posted: 5/19/2003 12:36:16 AM EDT
[#3]
Interesting ports on 205.214.89.85:
(The 1594 ports scanned but not shown below are in state: closed) Port State Service 1/tcp open tcpmux 21/tcp open ftp 22/tcp open ssh 25/tcp open smtp 53/tcp open domain 67/tcp open dhcpserver 68/tcp open dhcpclient 80/tcp open http 110/tcp open pop-3 111/tcp open sunrpc 143/tcp open imap2 443/tcp open https 465/tcp open smtps 993/tcp open imaps 995/tcp open pop3s 3306/tcp open mysql 6666/tcp open irc-serv Remote operating system guess: Linux Kernel 2.4.0 - 2.5.20 Uptime 17.600 days (since Thu May 1 12:53:42 2003) Trying 205.214.89.85... Connected to 205.214.89.85. Escape character is '^]'. 220-saudi1.vosn.net ESMTP Exim 3.36 #1 Mon, 19 May 2003 02:19:33 -0600 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail. TAKE IT DOWN!! |
|
|
|
Posted: 5/19/2003 12:55:47 AM EDT
[#4]
Yet another piece of Social Engineering that probably netted someone thousands of live eBay accounts...
-Troy |
|
|
|
Posted: 5/19/2003 1:04:52 AM EDT
[#5]
Quoted: Interesting ports on 205.214.89.85: TAKE IT DOWN!! I'm guessing that a public nmap posting together with the solicitation "Take it down" would make you an accessory should someone actually decide to "Take it down." It's your ass 'n all but damn man... not smart |
|
|
|
Posted: 5/19/2003 1:30:05 AM EDT
[#6]
How do you get info like below? Quoted: Search results for: 205.214.89.85 OrgName: VONOC OrgID: VONO Address: 5970 S. Greenwood Plaza Blvd City: Englewood StateProv: CO PostalCode: 80111 Country: US NetRange: 205.214.64.0 - 205.214.95.255 CIDR: 205.214.64.0/19 NetName: VONOC-04 NetHandle: NET-205-214-64-0-1 Parent: NET-205-0-0-0-0 NetType: Direct Allocation NameServer: NS1.VONOC.NET NameServer: NS2.VONOC.NET Comment: RegDate: Updated: 2003-01-07 TechHandle: FF186-ARIN TechName: Franzel, Fred TechPhone: +1-720-279-2011 TechEmail: [email protected] OrgAbuseHandle: VAD1-ARIN OrgAbuseName: VODC Abuse Dept OrgAbusePhone: +1-720-279-2011 OrgAbuseEmail: [email protected] OrgTechHandle: FF186-ARIN OrgTechName: Franzel, Fred OrgTechPhone: +1-720-279-2011 OrgTechEmail: [email protected] # ARIN WHOIS database, last updated 2003-05-18 20:10 # Enter ? for additional hints on searching ARIN's WHOIS database. There's the place hosting that URL that was linked from your e-mail. I'd forward a copy of that to their abuse department, and maybe give them a call and let them know what's going on. |
|
|
|
Posted: 5/19/2003 2:31:48 AM EDT
[#7]
I went to that sham site and it doesn't even have encryption on the page you're supposed to enter all your info.
|
|
|
|
Posted: 5/19/2003 2:33:01 AM EDT
[#8]
Quoted: How do you get info like below? [url]http://www.arin.net/whois/index.html[/url] Right there. Just type in any IP address and you're good to go. |
|
|
|
Posted: 5/19/2003 3:29:10 AM EDT
[#9]
So I shouldn't have entered all of my info in that page I got in my email? I was wondering why it was asking for my credit card number.
|
|
|
|
Posted: 5/19/2003 3:43:39 AM EDT
[#10]
Wouldn't eBay be interested?
|
|
|
|
Posted: 5/19/2003 4:33:14 AM EDT
[#11]
Ebay knows about this sort of stuff but its hard to get it under control and deal with it. People just need to not be so gullible.
|
|
|
|
Posted: 5/19/2003 11:37:02 AM EDT
[#12]
Quoted: Quoted: Interesting ports on 205.214.89.85: TAKE IT DOWN!! I'm guessing that a public nmap posting together with the solicitation "Take it down" would make you an accessory should someone actually decide to "Take it down." It's your ass 'n all but damn man... not smart Woops. I forgot to add a whole paragraph in that last post, what I [red]meant[/red] to say: ---- Dear admin of faked ebay identity theft server: I have taken a peek at your server (entirely non-intrusive) and found that you have a few services that potentially could be used for a remote user to gain root access to your machine. Now, I would never advocate or actually do such a thing, but it would be a terrible thing if somebody were to crack your server and steal all of the identities which you have rightfully scammed. So, please, in the interest of your own security regarding your server, TAKE IT DOWN!! ---- I apologize for the confusion here, and the accidental omission that did, in fact, insinuate that I would be somebody who would do such a nasty thing which I do not condone. |
|
|
|
Posted: 5/19/2003 1:05:37 PM EDT
[#13]
[/quote]
Woops. I forgot to add a whole paragraph in that last post, what I [red]meant[/red] to say: I apologize for the confusion here, and the accidental omission that did, in fact, insinuate that I would be somebody who would do such a nasty thing which I do not condone. [/quote] Yeah Yeah. Tell it to the judge [:D] |
|
|
|
Posted: 5/19/2003 1:16:04 PM EDT
[#14]
220-[b]saudi1[/b].vosn.net ESMTP Exim 3.36 #1 Mon, 19 May 2003 02:19:33 -0600
Anybody else notice this? How do you get that kind of port info? |
|
|
|
Posted: 5/19/2003 2:20:25 PM EDT
[#15]
Quoted: Yeah Yeah. Tell it to the judge [:D] What, you a judge or something? Like the guy is gonna call the police because all of his credit card info, SSN's, mailing addresses, mother's maiden names, etc. Were hacked/stolen. Puulleeeze. I can't say how the information was found, as that would further implicate me in activities which I don't know nothin about. I posted the mailer line simply because of the hostname (saudi1). [:D] |
|
|
|
Posted: 5/19/2003 2:39:52 PM EDT
[#16]
Quoted: Dear admin of faked ebay identity theft server:~ |
|
|
|
Posted: 5/19/2003 2:45:25 PM EDT
[#17]
Quoted: How do you get that kind of port info? You don't want to know. Most ISP's consider this type of activity "hostile" and when somebody complains, you can say bye-bye to your account. |
|
|
|
Posted: 5/19/2003 3:03:51 PM EDT
[#18]
I've gotten that same email several times. It's fraud. Forward it to eBay and they will investigate.
|
|
|
Win a FREE Membership!
Sign up for the ARFCOM weekly newsletter and be entered to win a free ARFCOM membership. One new winner* is announced every week!
You will receive an email every Friday morning featuring the latest chatter from the hottest topics, breaking news surrounding legislation, as well as exclusive deals only available to ARFCOM email subscribers.
AR15.COM is the world's largest firearm community and is a gathering place for firearm enthusiasts of all types.
From hunters and military members, to competition shooters and general firearm enthusiasts, we welcome anyone who values and respects the way of the firearm.
Subscribe to our monthly Newsletter to receive firearm news, product discounts from your favorite Industry Partners, and more.
Copyright © 1996-2024 AR15.COM LLC. All Rights Reserved.
Any use of this content without express written consent is prohibited.
AR15.Com reserves the right to overwrite or replace any affiliate, commercial, or monetizable links, posted by users, with our own.
