Jump to content

Legendary narkop is back


dra007
 Share

Recommended Posts

Anyone knows about this narkop business I have been flooded with spam by them but there isn't much info of who these guys are. Just as I was breathing easier another idiot spammer shows up..

Submitted: Friday, January 04, 2013 9:22:53 AM +0100:

Legendary Narkop is back

5897297522 ( 123.24.115.21 ) To: abuse[at]vnn.vn

--------------------------------------------------------------------------------

Submitted: Friday, January 04, 2013 9:22:52 AM +0100:

Legendary Narkop is back

5897297524 ( 182.177.189.200 ) To: ahmed.imtiaz[at]ptcl.net.pk

--------------------------------------------------------------------------------

Submitted: Friday, January 04, 2013 9:22:52 AM +0100:

Legendary Narkop is back

5897297529 ( 182.182.102.151 ) To: ahmed.imtiaz[at]ptcl.net.pk

--------------------------------------------------------------------------------

Submitted: Friday, January 04, 2013 9:22:52 AM +0100:

Legendary Narkop is back

5897297546 ( 187.172.114.50 ) To: abuse[at]uninet.net.mx

--------------------------------------------------------------------------------

Submitted: Friday, January 04, 2013 9:22:51 AM +0100:

Legendary Narkop is back

5897297568 ( 115.79.99.36 ) To: postmaster[at]vietel.com.vn

5897297567 ( 115.79.99.36 ) To: abuse[at]fptonline.net

5897297564 ( 115.79.99.36 ) To: tiennd[at]viettel.com.vn

5897297563 ( 115.79.99.36 ) To: report[at]vncert.vn

5897297562 ( 115.79.99.36 ) To: admin[at]fpt.vn

Link to comment
Share on other sites

Never heard of them before - some sort of cyberwar according to http://www.cyberwarnews.info/2012/11/22/narkop-hacked-36000-user-details-complete-database-leaked/

The "Legendary Narkop is back" spam apparently directs recipients to http://www.narkop.net which is Romanian-hosted. The "real" narkop seems to be http://www.narkop.com (German-hosted) which carries the notations:

"Registrant

Suspended by Registrar

Suspended Domain"

with PARKINGCREW.NET nameservers.

Whatever is going on seems to mostly involve the Russian user base and spam to others is maybe just accidental/scattergun fallout. Seems destined to fade away pretty quickly if all of that is right.

Link to comment
Share on other sites

Anyone knows about this narkop business I have been flooded with spam by them but there isn't much info of who these guys are. Just as I was breathing easier another idiot spammer shows up..

Botnet spam I get a few each day from Botnet IP's

http://www.spamcop.net/sc?id=z5448970451zf...25cf60f299c397z

In SpamCop "notes" I include the CBL link to abuse address

http://cbl.abuseat.org/lookup.cgi?ip=123.24.115.21

Above link suggests how to repair infected email server

I use grey listing which basically means I only get email through a email server.

Seems effective if "abuse" reads or has a working email address.

Now the spambot is using for me subject

Discount Software

http://www.spamcop.net/sc?id=z5449623575z9...919e768e9c8befz

Link to comment
Share on other sites

  • 2 weeks later...

hello. I am the site administrator, on behalf of which is sent to the spam "Legendary Narkop is back"

Our website has never sent spam. This is done by the rivals who wants to discredit the web site. Our site is not interested in the foreign audience as we even do not have a foreign version of our site, but spam is being sent all over the world. The registrars and antispam services don't want to cope with this problem and unfair rivals use such situation with the aim of adding of the competing web site to the different black lists for its further blocking by the hoster and registrar.

how to struggle with this phenomenon, I don't know.

Link to comment
Share on other sites

  • 4 weeks later...

hello. I am the site administrator, on behalf of which is sent to the spam "Legendary Narkop is back"

Our website has never sent spam. This is done by the rivals who wants to discredit the web site. Our site is not interested in the foreign audience as we even do not have a foreign version of our site, but spam is being sent all over the world. The registrars and antispam services don't want to cope with this problem and unfair rivals use such situation with the aim of adding of the competing web site to the different black lists for its further blocking by the hoster and registrar.

how to struggle with this phenomenon, I don't know.

Just botnet spam you can ask SpamCop not to send reports

Better still to just "sort" them to a convenient folder/file

botnet spam often just "joe jobs" random websites sometime for blackmail (ask for money to stop) The term is Ransom spam

A website being reported by SpamCop is just for your information unless one decides to complain "upstairs" no harm will come.

For child porn I complain directly to police of Country concerned so it pays to monitor

Actually good you are getting reports

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...