Security Incidents mailing list archives

Re: Something nasty


From: Gerhard den Hollander <gerhard () JASON NL>
Date: Thu, 7 Sep 2000 10:50:09 +0200

* Adam Maloney <adamm () SIHOPE COM> (Wed, Sep 06, 2000 at 08:53:05AM -0500)
I've attached an e-mail that I received to a few info@ accounts at a
couple of my domains.  The IP block that this originated from and the URL
references is in .NL, the whois information for upwatch.com is registered
in Amsterdam.

inkoop is dutch, and simply means to buy.

My guess is that this one of the many small bsuiness ventures trying to get
rich fast .. in their case probably simply by reselling unix shell account
access.

Their IP (212.19.213.241) is on the net of InTouch.nl,
which is an ISP that does webhosting and other stuff.

This all looks like a typical startup company not exactly knowing how to
behave on the 'Net.




Kind regards,
 --
Gerhard den Hollander                           Phone +31-10.280.1515
Technical Support Jason Geosystems BV           Fax   +31-10.280.1511
                                   (When calling please note: we are in GMT+1)
gdenhollander () jasongeo com                          POBox 1573
visit us at http://www.jasongeo.com                 3000 BN Rotterdam
"TeamWare" for finding Oil & Gas...The Smart Way    The Netherlands

      This e-mail and any attachment is/are intended solely for the named
  addressee(s) and may contain information that is confidential and privileged.
       If you are not the intended recipient, we request that you do not
         disseminate, forward, distribute or copy this e-mail message.
      If you have received this e-mail message in error, please notify us
           immediately by telephone and destroy the original message.


Current thread: