Postfix hit again (Spam)

Mon Jun 5 01:33:19 UTC 2006

CodeHeads wrote:

> And the xpl.netmisphere2.com site has hacking information:
> http://xpl.netmisphere2.com/  I think this outta be illegal!!

The registrar and registrant are both in France, and yes it is illegal.

The criminal's name is Canale Jeremy and he lives in Paris.

His fake registrant contact data should be enough to have his domain 
shut down, if you LART him upstream, citing false/incomplete contact 
data as the complaint:

###### Much of what follows is fake or incomplete ######
  Server Used: [ whois.ovh.com ]

xpl.netmisphere2.com = [ 82.237.120.143 ]

   local time    : Monday  05-Jun-2006 03: 16: 38 CEST
   last modified : Saturday  29-Oct-2005 00: 24: 16 CEST
   domaine       : netmisphere2.com
   request from  : 206.117.161.80: 3939
   domain:		NETMISPHERE2.COM
   owner:		
   person:		Canale Jeremy
   address:	xxx
   adresse:	PAris  74 007
   adresse:	FR
   phone:		17
   fax:		
   cddc at cdcd.cdee

   admin-c:	CJ6263-OVH
   tech-c:		CJ6263-OVH
   bill-c:		CJ6263-OVH
   nserver:	ns1.netmisphere2.com
   nserver:	ns2.sivit.org
   created:	2005-07-07 14: 00: 00
   expires:	2006-07-07 20: 57: 50
   changed:	2005-07-07 21: 16: 07
   nic-hdl:	CJ6263-OVH
   person:		jtemmerde pffff
   organisation:	T-nul
   address:	chez ta mere
   address:	Obernai  16 prout
   adresse:	FR
   phone:		17
   fax:		
   cdcd at fefe.com

   created:	2005-07-07 20: 52: 03
   changed:	2005-10-29 00: 21: 14
############

###### But he can't hide his upstream provider ######
role:            Administrative Contact for ProXad
address:         Free SAS / ProXad
address:         8, rue de la Ville L'Eveque
address:         75008 Paris
phone:           +33 1 73 50 20 00
fax-no:          +33 1 73 50 25 01
remarks:         trouble:      Information: http://www.proxad.net/
remarks:         trouble:      Spam/Abuse requests: abuse[AT]proxad.net
############

-- 
K.
http://slated.org - Slated, Rated & Blogged

Fedora Core release 5 (Bordeaux) on sky, running kernel 2.6.16-1.2122_FC5
  02:29:18 up 8 days, 22:09,  1 user,  load average: 0.00, 0.01, 0.00