phishing emails

[Chris Gramer]

On Thu, 26 May 2005 16:43:53 +0200, "Vassilios Kotoulas"
<fedoralist at kotoulas.de> said:

> hi community,
> I must warn you that somebody uses the fedora mailing lists to get
> email adresses and to send them phishing emails. I recieved a html mail
> with a fake ebay login which links to
> http://140.121.196.32/phpBB2/db/index.html

Yup, I got the email, too.  I reported it to eBay and eBay UK (mine was
supposedly from the UK eBay).  Here's what Domain Dossier
(http://centralops.net/co/) says about it:

Address lookup

canonical name  bioclass.cs.ntou.edu.tw.
aliases         
addresses       140.121.196.32


Domain Whois record

Queried whois.twnic.net with "ntou.edu.tw"...

Ministry of Education Computer Center
   12th Fl, 106, Hoping E. Road, Sec 2.
   Taiwan Republic of China, R.O.C
   TW

   Domain Name: edu.tw

   Contact:
      TANet, Administrator  tanetadm at moe.edu.tw
      886-2-87329007


Network Whois record

Queried whois.apnic.net with "140.121.196.32"...

% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      140.117.0.0 - 140.138.255.255
netname:      TANET-BNETA
descr:        imported inetnum object for MOEC
country:      TW
admin-c:      TA61-AP
tech-c:       TA61-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-TW-TWNIC
changed:      hostmaster at arin.net 19980930
changed:      hm-changed at apnic.net 20030616
changed:      hm-changed at apnic.net 20041209
source:       APNIC

person:       TANET ADMIN
address:      Ministry of Education computer Center
address:      12F, No 106, Sec. 2, Heping E. Rd., Taipei
address:      Taipei Taiwan
country:      TW
phone:        +886-2-2737-7010 ext. 305
fax-no:       +886-2-2737-7043
e-mail:       tanetadm at moe.edu.tw
nic-hdl:      TA61-AP
mnt-by:       MAINT-TW-TWNIC
changed:      hostmaster at twnic.net 20020507
source:       APNIC

inetnum:      140.121.0.0 - 140.121.255.255
netname:      T-NTOU.EDU.TW-NET
descr:        Ministry of Education Computer Center
descr:        2F, No 106, Sec.2,Hping E. Rd.,
descr:        Taipei Taiwan
country:      TW
admin-c:      AS84-TW
tech-c:       AS84-TW
mnt-by:       MAINT-TW-TWNIC
remarks:      This information has been partially mirrored by APNIC from
remarks:      TWNIC. To obtain more specific information, please use the
remarks:      TWNIC whois server at whois.twnic.net.
changed:      chuang at mail.moe.gov.tw 19920502
status:       ASSIGNED NON-PORTABLE
source:       TWNIC

person:       ADMIN SINICA
address:      National Taiwan Ocean University
address:      2 Pei-Ning Road
address:      Keelung Taiwan
country:      TW
phone:        +886-2-2462-6312
fax-no:       +886-2-2463-1208
e-mail:       abuse at mail.ntou.edu.tw
nic-hdl:      AS84-TW
changed:      hostmaster at twnic.net 20050502
source:       TWNIC


-- 
  Chris Gramer
  cgramer at fastmail.fm