Jump to content

spam is sending on my behalf. How to fight?


admin88v
 Share

Recommended Posts

Someone spamming on our behalf using our forum domain (carder.pro)

spamcop send numerous complaints to my ISPs (including cloudflare).

As i understand its called DoeJob and is one of the way to use blackmailing to kill someones on internet.

http://www.mywot.com/en/forum/30718-report...obs-here?page=2

Even person who investigate those DoeJobs wrote:

"Such a domain will not send spam."

So its legitimate way to kill someone on internet using spamcop?

We switching IPs like a crazy and still doing spam?

Its clearly someone trying to act on our end and cause us problem

We could be criminals or just a place of ppl who trying to find out how to save money in their own pocket(by reading criminals), but let authorities decide such things. Not spamcop. We want to participate in fighting spam too, so help us please.

If spamcop should care about it - is spam. And we're not interested in it in ANY WAY.

Because:

1. Registration is closed right now (we do not accept new members).

2. We're well known all around the planet (no need to further expand).

3. We're overcrowded by useeless newbies.

So why we should do spam??? Its not good idea. Especially if u got problem about spam 3 days ago, switched ISP for that, and started spam again? Nonsense (i repeat)

That way ANY company/website could be blackmailed.

Google will spam "we can search"? No, everyone know that.

Spamcop will spam "we can fight the spam"? No, everyone know that.

Same situation with us.

I hope to get it solved. And help us to find out who is those spammer.

THank you

Edited by admin88v
Link to comment
Share on other sites

Someone spamming on our behalf using our forum domain (carder.pro)

spamcop send numerous complaints to my ISPs (including cloudflare).

[snip

I hope to get it solved. And help us to find out who is those spammer.

THank you

http://www.spamcop.net/sc?id=z5529026808zc...4f04e1751f6234z

http://www.spamcop.net/sc?id=z5529026807z4...6340db66645dfaz

Cloudflare have disabled SpamCop reports but many report spam privatly!

Botnet spam from Belarus pumping out thousands just to me from every Belarus IP in the country.

Not much can be done except explain to your ISP that it is a nonsense Botnet attacking your URL. Seems to me Belarus and Ukraine are in some sort of deliberate"pissant" internet war over nothing?

The fix is simple for windows computers by scanning it with freeware Spyware removal program from here

http://www.safer-networking.org/

Edited by petzl
Link to comment
Share on other sites

http://www.spamcop.net/sc?id=z5529026808zc...4f04e1751f6234z

http://www.spamcop.net/sc?id=z5529026807z4...6340db66645dfaz

Cloudflare have disabled SpamCop reports but many report spam privatly!

Botnet spam from Belarus pumping out thousands just to me from every Belarus IP in the country.

Not much can be done except explain to your ISP that it is a nonsense Botnet attacking your URL. Seems to me Belarus and Ukraine are in some sort of deliberate"pissant" internet war over nothing?

The fix is simple for windows computers by scanning it with freeware Spyware removal program from here

http://www.safer-networking.org/

They ddos our domain.

They try to blackmail it.

But when those 2 things happend at same time (and cloudflare see it) its easy to understand what someone doing it to eliminate us, so i hope spamcop and cloudflare have common sense.

Link to comment
Share on other sites

They ddos our domain.

They try to blackmail it.

But when those 2 things happend at same time (and cloudflare see it) its easy to understand what someone doing it to eliminate us, so i hope spamcop and cloudflare have common sense.

SpamCop is not your problem

You in Belarus?

Edited by petzl
Link to comment
Share on other sites

No.

Our website changed our IP aprox 5 times. And even behind cloudflare they tried to ddos us by revealing our server IP (which was in Ukraine too) by sending password reminder and checking for IP in headers.

The sites I have seen attacked are all in Ukraine and in Russian

The gang seems based in Belarus?

If in Ukraine try contacting

http://cert.gov.ua/?page_id=53

Link to comment
Share on other sites

The sites I have seen attacked are all in Ukraine and in Russian

The gang seems based in Belarus?

If in Ukraine try contacting

http://cert.gov.ua/?page_id=53

Well, its useless. Because we're treated as place for criminals. They dont want to get deep into what happend inside, and what people usually do, so i bother what they'll help. So i believe its not needed. But of course, we will do all legally needed steps to protect us.

They main question what will happend if some other website which is legal 100%, selling something (for exmaple boots) and some bad person (dickhead actually) sending spam like:

We're selling boots, come to our website niceboots.com

They will be forced to change IPs in same speed of light too? This is pretty easy way to eliminate rival business.

And pretty easy, tbh.

Link to comment
Share on other sites

Well, its useless. Because we're treated as place for criminals. They dont want to get deep into what happend inside, and what people usually do, so i bother what they'll help. So i believe its not needed. But of course, we will do all legally needed steps to protect us.

They main question what will happend if some other website which is legal 100%, selling something (for exmaple boots) and some bad person (dickhead actually) sending spam like:

We're selling boots, come to our website niceboots.com

They will be forced to change IPs in same speed of light too? This is pretty easy way to eliminate rival business.

And pretty easy, tbh.

Check back a while later and see if someone else has better information

To me whats happening is these criminals are sending millions of emails with your link and people getting them click that link creatin a DDoS attack on your site.

Your site is not the only one being attacked by this crime gang

http://www.spamcop.net/sc?id=z5529026805z6...e5c813b71628b8z

Another Russian site

Link to comment
Share on other sites

Check back a while later and see if someone else has better information

To me whats happening is these criminals are sending millions of emails with your link and people getting them click that link creatin a DDoS attack on your site.

Your site is not the only one being attacked by this crime gang

http://www.spamcop.net/sc?id=z5529026805z6...e5c813b71628b8z

Another Russian site

I dont believe what their spam method is doing such big impact on hits.

I can show you screenshot with UDP attack of 10Gb/s and 3 days ago it become somethign like 1Gb/s (have screens), so its not just usual spam.

Our exadmin suffered allready and posted on spamcop about the issue.

http://forum.spamcop.net/forums/index.php?...=9086&st=20

And same situation now.

I just want to understand simple thing.

If person is clear 100%, sell legit things... And it can be vanished from internet so easy with spamcop help using such dirty method? :o

Link to comment
Share on other sites

Hi, admin88v,

...Knowledgeable and competent admins (by "admins," I mean the people who can do something to stop your legitimate activities) will not be fooled by such "Joe Jobs." SpamCop reports of "spamvertized links" are only "for your information" messages and knowledgeable admins will treat them as such and (appropriately) ignore them if they point to legitimate customers. The target of what little action SpamCop takes, placing IP addresses on the SpamCop blacklist, is limited to the source of the e-mail spams and does not include spamvertized hosts, so (if I understand correctly that you are being spamvertized against your will) SpamCop's blacklisting can not affect you.

...Bottom line: if your service provider is knowledgeable and competent, you can ignore this problem, it will not affect you. If your provider is either not knowledgeable or incompetent and therefore you are being affected, you now have two very good reasons to find another provider.

Link to comment
Share on other sites

I dont believe what their spam method is doing such big impact on hits.

I just want to understand simple thing.

If person is clear 100%, sell legit things... And it can be vanished from internet so easy with spamcop help using such dirty method? :o

All spamcop does is report email from (this case) a botnet to the ISP in charge of the IP where the email come from.

(just notifies ISP about a potential security problem)

Your site has been marked innocent bystander and SpamCop Does not now report your site

Whats happening to you is there are thousands of Botnet/zombie computers connected to the internet. Aside from sending spam listing your site, they are repeatedly attacking your site.

Some of the infected IP's doing this I reported this morning Sydney time

178.125.159.231 178.123.145.250 37.45.247.204 37.212.83.79 176.102.28.215 37.213.82.254 178.126.106.164 37.44.88.219 37.212.29.16 37.212.29.16

There are maybe 50 more I got in 8 hours. None go to my inbox all trapped in my "Very Easy Report" folder, which I send/report at one click of the mouse button.

Trouble is these zombie computers are all in the hands of criminals, who have access to everything on them

Belarus could stop the spam I'm receiving by blocking outbound port 22. However the owners of these computers have probably lost their passwords to criminals as well!

May pay your users to read my "signature below" AND change their password

The sites this particular crime gang are attacking are Russian text. I suspect you are somewhere from there

(According to your URL "whois" it tells me you are)

Edited by petzl
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...