The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Reverse IP lookup SPAM hole?

Discussion in 'General Discussion' started by casey, Jun 2, 2003.

  1. casey

    casey Well-Known Member

    Joined:
    Jan 17, 2003
    Messages:
    2,303
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    If there is trouble, it will find me
    How to I prevent the reverse ip lookup function at http://www.whois.sc from listing all the sites that I host? This is just as bad as /bandwidth/

    cPanel.net Support Ticket Number:
     
  2. casey

    casey Well-Known Member

    Joined:
    Jan 17, 2003
    Messages:
    2,303
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    If there is trouble, it will find me
    Really? That's a bummer.

    cPanel.net Support Ticket Number:
     
  3. h2oski

    h2oski Well-Known Member

    Joined:
    Dec 12, 2001
    Messages:
    68
    Likes Received:
    0
    Trophy Points:
    6
    wow, thanks for pointing out that sites ability to do a search of that nature.

    I have seen it in my logs but never thought anything of it, I assumed it was a simple whois search.

    that explains how these formmail spammers find all the domains on our servers.

    now, on to blocking it...
    Address lookup
    canonical name whois.sc.
    aliases
    addresses 198.78.175.26

    so, I would assume an iptables rule to block that ip would work?

    cPanel.net Support Ticket Number:
     
  4. tAzMaNiAc

    tAzMaNiAc Well-Known Member

    Joined:
    Feb 16, 2003
    Messages:
    559
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Sachse, TX
    You can block the IP for a small fee.. So they can't get this kind of Reverse IP information,apparently. This is from their members area:

    ===
    Blocking information on Whois Source only protects what Name Intellgence displays freely. The information is still publicly available and Name Intelligence can't do anything to stop people from researching the information out on their own. However Name Intelligence will not make your information freely available if the information is blocked using our blocking service.

    Reverse IP Blocking
    The user is given access to a control panel where they can block one IP address per one-time setup fee of $20. Or blocking an entire Class-C range of IP addresses is a one-time setup fee of $100. Once a blocking record(s) has been added to an account, the person can update and change the IP address or Class-C they are blocking free of charge at any time. We know DNS changes and we allow you to make life long free edits.

    Whois Record Blocking
    The user is given access to a control panel where they can block a whois record per one-time setup fee of $20. We encourage people to keep acurate whois records, ICANN's Policy allows for the deletion of domains that don't have acurate whois information. To globally protect whois record we encourage the use of PO Boxes, Business Addresses, or a private registration service such as GoDaddy's Domains By Proxy. If privacy is an issue, take your personal information seriously. Use a safe mail address. However don't list false information or your domain may be deleted.
    ==

    or you can have your domain registrar do private domain whois for all your records.

    cPanel.net Support Ticket Number:
     
  5. kris1351

    kris1351 Well-Known Member

    Joined:
    Apr 18, 2003
    Messages:
    963
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Lewisville, Tx
    Off the subject, but h2oski what chapter? Tx Kappa here :)

    cPanel.net Support Ticket Number:
     
  6. casey

    casey Well-Known Member

    Joined:
    Jan 17, 2003
    Messages:
    2,303
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    If there is trouble, it will find me
    Would you mind asking the homework questions in pm's? I really don't need e-mails notifying me that you have asked someone what chapter. Thanks.

    cPanel.net Support Ticket Number:
     
  7. sexy_guy

    sexy_guy Well-Known Member

    Joined:
    Mar 19, 2003
    Messages:
    848
    Likes Received:
    0
    Trophy Points:
    16
    These people are a major pain in the ass. I would love to see site like this removed from the net including but certainly not excluding the site called netcraft.com. They also list OS information about your box etc etc. I found out about this whois.sc when i looked in my logs to find some of my would be clients doing search on our server to a link called whois.sc so i dedicated to follow it. I was really unimpressed to say the least. They list my box having 275 sites on it yet that is totally incorrect.
    I hate these people.

    cPanel.net Support Ticket Number:
     
  8. casey

    casey Well-Known Member

    Joined:
    Jan 17, 2003
    Messages:
    2,303
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    If there is trouble, it will find me
    Re: Re: Reverse IP lookup SPAM hole?

    Amen.

    cPanel.net Support Ticket Number:
     
  9. sexy_guy

    sexy_guy Well-Known Member

    Joined:
    Mar 19, 2003
    Messages:
    848
    Likes Received:
    0
    Trophy Points:
    16
    So they want me to pay them 20.00 to prevent my site from being listed. This is criminal. Almost worst then communism.

    cPanel.net Support Ticket Number:
     
  10. howard

    howard Well-Known Member

    Joined:
    Apr 20, 2003
    Messages:
    233
    Likes Received:
    0
    Trophy Points:
    16
    guess you should also ask for removal of the nmap site and of course anything to do with stack fingerprinting :)

    cPanel.net Support Ticket Number:
     
  11. casey

    casey Well-Known Member

    Joined:
    Jan 17, 2003
    Messages:
    2,303
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    If there is trouble, it will find me
    What's nmap? But yeah, I'd prefer that people did not present information that could hurt my business.

    cPanel.net Support Ticket Number:
     
  12. howard

    howard Well-Known Member

    Joined:
    Apr 20, 2003
    Messages:
    233
    Likes Received:
    0
    Trophy Points:
    16
  13. spiraltechnics

    spiraltechnics Active Member

    Joined:
    Mar 2, 2003
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    6
    Don't Pay them a dime. If you do..then everyone will start in on it...I actually use it alot. I am now able to tell how big or in fact how small these bigmouthed forum people are.
    It's all good..

    cPanel.net Support Ticket Number:
     
  14. X-Istencedotcom

    X-Istencedotcom Well-Known Member

    Joined:
    Apr 14, 2003
    Messages:
    223
    Likes Received:
    0
    Trophy Points:
    16
    Haha, good one.

    Funny thing is that they say we host about 20 people, when in fact we host around 50 on the main IP.

    cPanel.net Support Ticket Number:
     
  15. casey

    casey Well-Known Member

    Joined:
    Jan 17, 2003
    Messages:
    2,303
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    If there is trouble, it will find me
    Same here, because most of my customers use domains other than com, net, and org. Still, I'd rather my com, net, and org customers not get spammed.

    cPanel.net Support Ticket Number:
     
Loading...

Share This Page