[SpamCop-List] Re: Hardcode request -- Telodigm / thePowerBall.com / wickedspeed.net

Delete A Spammer spamcop-list
Fri, 2 Feb 2001 00:04:54 -0000


I am 95% sure that some of the DNS servers you mention are now on dial-up
connections.  I won't go into the details on how it is done - but it can be
done and regularly is done.

I have been fed-up with several spammers for a long time but because I deal
with so much spam I can only just cope with spamcop - never mind the manual
LARTs as well.

The evidence...

1) Many of the DNS servers used to service a spam site reference themselves
as BOTH nameservers.

2) The IP nos of the DNS server changes every couple of hours.

3) I have successfully complained about a DNS domain name to nominet along
with the evidence (20 odd spam headers and 15 sets of whois) and nominet
then blocked the domain name.  (I didn't get a reply to my complaint, but
they acted within 48 hours)  The whois still works, but

4) The sites are VERY unreliable and the server often appears to be down.
On a 56k dial-up it's bound to be.

5) Some of the DNS servers Julian mentioned below have VERY similar setups
to the ones which have

I'm not very well at the moment so please excuse me if I sound muddled.
Whilst each part of the evidence is not by itself proof, combined it starts
to make sense.  (I hope it does!)

I will try and find a copy of my nominet letter so that I can find out which
domains and name servers were involved.  I checked several weeks after they
were closed - and they were still closed.  However I am interested in
knowing if the nameservers have been reinstated since.

In case you are wondering how come I deal with so much spam, here are some
figures for spam received by a SINGLE hotel.

#, month, acks etc
134 Sep 60
191 Oct 88
311 Nov 175
325 Dec 249
398 Jan 301

The hotel above uses spamcop for all spam.  UCE which was suitable for the
hotel are NOT included in the figures above.  The hotel now recieves an
average of 15 spams daily and every month the daily average increases by 2
more. It is easy to see why spamcop is important and why all of our efforts
are important.

DAS

> Name:    NS2.MY-DNS.NET
> Address:  208.20.161.200 (no response)
>
> Name:    NS4.HOSTPOWER.NET
> Address:  216.144.196.4 (no response)
>
> Name:    NS3.HOSTPOWER.NET
> Address:  216.144.196.3 (no response)
>
> Name:    DNS1.DNS4YOU.NET
> Address:  216.144.208.200 (ok - our target! - for now, level3).
>