admin88v Posted July 10, 2013 Share Posted July 10, 2013 Someone spamming on our behalf using our forum domain (carder.pro) spamcop send numerous complaints to my ISPs (including cloudflare). As i understand its called DoeJob and is one of the way to use blackmailing to kill someones on internet. http://www.mywot.com/en/forum/30718-report...obs-here?page=2 Even person who investigate those DoeJobs wrote: "Such a domain will not send spam." So its legitimate way to kill someone on internet using spamcop? We switching IPs like a crazy and still doing spam? Its clearly someone trying to act on our end and cause us problem We could be criminals or just a place of ppl who trying to find out how to save money in their own pocket(by reading criminals), but let authorities decide such things. Not spamcop. We want to participate in fighting spam too, so help us please. If spamcop should care about it - is spam. And we're not interested in it in ANY WAY. Because: 1. Registration is closed right now (we do not accept new members). 2. We're well known all around the planet (no need to further expand). 3. We're overcrowded by useeless newbies. So why we should do spam??? Its not good idea. Especially if u got problem about spam 3 days ago, switched ISP for that, and started spam again? Nonsense (i repeat) That way ANY company/website could be blackmailed. Google will spam "we can search"? No, everyone know that. Spamcop will spam "we can fight the spam"? No, everyone know that. Same situation with us. I hope to get it solved. And help us to find out who is those spammer. THank you Link to comment Share on other sites More sharing options...
petzl Posted July 10, 2013 Share Posted July 10, 2013 Someone spamming on our behalf using our forum domain (carder.pro) spamcop send numerous complaints to my ISPs (including cloudflare). [snip I hope to get it solved. And help us to find out who is those spammer. THank you http://www.spamcop.net/sc?id=z5529026808zc...4f04e1751f6234z http://www.spamcop.net/sc?id=z5529026807z4...6340db66645dfaz Cloudflare have disabled SpamCop reports but many report spam privatly! Botnet spam from Belarus pumping out thousands just to me from every Belarus IP in the country. Not much can be done except explain to your ISP that it is a nonsense Botnet attacking your URL. Seems to me Belarus and Ukraine are in some sort of deliberate"pissant" internet war over nothing? The fix is simple for windows computers by scanning it with freeware Spyware removal program from here http://www.safer-networking.org/ Link to comment Share on other sites More sharing options...
admin88v Posted July 10, 2013 Author Share Posted July 10, 2013 http://www.spamcop.net/sc?id=z5529026808zc...4f04e1751f6234z http://www.spamcop.net/sc?id=z5529026807z4...6340db66645dfaz Cloudflare have disabled SpamCop reports but many report spam privatly! Botnet spam from Belarus pumping out thousands just to me from every Belarus IP in the country. Not much can be done except explain to your ISP that it is a nonsense Botnet attacking your URL. Seems to me Belarus and Ukraine are in some sort of deliberate"pissant" internet war over nothing? The fix is simple for windows computers by scanning it with freeware Spyware removal program from here http://www.safer-networking.org/ They ddos our domain. They try to blackmail it. But when those 2 things happend at same time (and cloudflare see it) its easy to understand what someone doing it to eliminate us, so i hope spamcop and cloudflare have common sense. Link to comment Share on other sites More sharing options...
petzl Posted July 10, 2013 Share Posted July 10, 2013 They ddos our domain. They try to blackmail it. But when those 2 things happend at same time (and cloudflare see it) its easy to understand what someone doing it to eliminate us, so i hope spamcop and cloudflare have common sense. SpamCop is not your problem You in Belarus? Link to comment Share on other sites More sharing options...
admin88v Posted July 10, 2013 Author Share Posted July 10, 2013 You in Belarus? No. Our website changed our IP aprox 5 times. And even behind cloudflare they tried to ddos us by revealing our server IP (which was in Ukraine too) by sending password reminder and checking for IP in headers. Link to comment Share on other sites More sharing options...
petzl Posted July 10, 2013 Share Posted July 10, 2013 No. Our website changed our IP aprox 5 times. And even behind cloudflare they tried to ddos us by revealing our server IP (which was in Ukraine too) by sending password reminder and checking for IP in headers. The sites I have seen attacked are all in Ukraine and in Russian The gang seems based in Belarus? If in Ukraine try contacting http://cert.gov.ua/?page_id=53 Link to comment Share on other sites More sharing options...
admin88v Posted July 10, 2013 Author Share Posted July 10, 2013 The sites I have seen attacked are all in Ukraine and in Russian The gang seems based in Belarus? If in Ukraine try contacting http://cert.gov.ua/?page_id=53 Well, its useless. Because we're treated as place for criminals. They dont want to get deep into what happend inside, and what people usually do, so i bother what they'll help. So i believe its not needed. But of course, we will do all legally needed steps to protect us. They main question what will happend if some other website which is legal 100%, selling something (for exmaple boots) and some bad person (dickhead actually) sending spam like: We're selling boots, come to our website niceboots.com They will be forced to change IPs in same speed of light too? This is pretty easy way to eliminate rival business. And pretty easy, tbh. Link to comment Share on other sites More sharing options...
petzl Posted July 10, 2013 Share Posted July 10, 2013 Well, its useless. Because we're treated as place for criminals. They dont want to get deep into what happend inside, and what people usually do, so i bother what they'll help. So i believe its not needed. But of course, we will do all legally needed steps to protect us. They main question what will happend if some other website which is legal 100%, selling something (for exmaple boots) and some bad person (dickhead actually) sending spam like: We're selling boots, come to our website niceboots.com They will be forced to change IPs in same speed of light too? This is pretty easy way to eliminate rival business. And pretty easy, tbh. Check back a while later and see if someone else has better information To me whats happening is these criminals are sending millions of emails with your link and people getting them click that link creatin a DDoS attack on your site. Your site is not the only one being attacked by this crime gang http://www.spamcop.net/sc?id=z5529026805z6...e5c813b71628b8z Another Russian site Link to comment Share on other sites More sharing options...
admin88v Posted July 10, 2013 Author Share Posted July 10, 2013 Check back a while later and see if someone else has better information To me whats happening is these criminals are sending millions of emails with your link and people getting them click that link creatin a DDoS attack on your site. Your site is not the only one being attacked by this crime gang http://www.spamcop.net/sc?id=z5529026805z6...e5c813b71628b8z Another Russian site I dont believe what their spam method is doing such big impact on hits. I can show you screenshot with UDP attack of 10Gb/s and 3 days ago it become somethign like 1Gb/s (have screens), so its not just usual spam. Our exadmin suffered allready and posted on spamcop about the issue. http://forum.spamcop.net/forums/index.php?...=9086&st=20 And same situation now. I just want to understand simple thing. If person is clear 100%, sell legit things... And it can be vanished from internet so easy with spamcop help using such dirty method? Link to comment Share on other sites More sharing options...
turetzsr Posted July 10, 2013 Share Posted July 10, 2013 Hi, admin88v, ...Knowledgeable and competent admins (by "admins," I mean the people who can do something to stop your legitimate activities) will not be fooled by such "Joe Jobs." SpamCop reports of "spamvertized links" are only "for your information" messages and knowledgeable admins will treat them as such and (appropriately) ignore them if they point to legitimate customers. The target of what little action SpamCop takes, placing IP addresses on the SpamCop blacklist, is limited to the source of the e-mail spams and does not include spamvertized hosts, so (if I understand correctly that you are being spamvertized against your will) SpamCop's blacklisting can not affect you. ...Bottom line: if your service provider is knowledgeable and competent, you can ignore this problem, it will not affect you. If your provider is either not knowledgeable or incompetent and therefore you are being affected, you now have two very good reasons to find another provider. Link to comment Share on other sites More sharing options...
admin88v Posted July 10, 2013 Author Share Posted July 10, 2013 Well, thats what i wanted to hear. Anyway - its usual practice nowdays? I mean the aggresive act called "Joe Jobs"? Link to comment Share on other sites More sharing options...
turetzsr Posted July 10, 2013 Share Posted July 10, 2013 <snip> its usual practice nowdays? I mean the aggresive act called "Joe Jobs"? ...That I can not say but I do not see it much (that I can tell). It probably varies pretty widely. Link to comment Share on other sites More sharing options...
admin88v Posted July 10, 2013 Author Share Posted July 10, 2013 Well, thanks for answers. Link to comment Share on other sites More sharing options...
petzl Posted July 10, 2013 Share Posted July 10, 2013 I dont believe what their spam method is doing such big impact on hits. I just want to understand simple thing. If person is clear 100%, sell legit things... And it can be vanished from internet so easy with spamcop help using such dirty method? All spamcop does is report email from (this case) a botnet to the ISP in charge of the IP where the email come from. (just notifies ISP about a potential security problem) Your site has been marked innocent bystander and SpamCop Does not now report your site Whats happening to you is there are thousands of Botnet/zombie computers connected to the internet. Aside from sending spam listing your site, they are repeatedly attacking your site. Some of the infected IP's doing this I reported this morning Sydney time 178.125.159.231 178.123.145.250 37.45.247.204 37.212.83.79 176.102.28.215 37.213.82.254 178.126.106.164 37.44.88.219 37.212.29.16 37.212.29.16 There are maybe 50 more I got in 8 hours. None go to my inbox all trapped in my "Very Easy Report" folder, which I send/report at one click of the mouse button. Trouble is these zombie computers are all in the hands of criminals, who have access to everything on them Belarus could stop the spam I'm receiving by blocking outbound port 22. However the owners of these computers have probably lost their passwords to criminals as well! May pay your users to read my "signature below" AND change their password The sites this particular crime gang are attacking are Russian text. I suspect you are somewhere from there (According to your URL "whois" it tells me you are) Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.