help me kill a spammer please?
- Started
- Last post
- 30 Responses
- kerus
i reported a spammer and had 2 of his accounts/redirects shut down. he then forged my name into the headers of his spam. the result is my getting over 25,000 bounceback and pissed off emails i the past 18 hours.
the account is on a unix shell, i have a .procmailrc file filtering most of the crap out, but i want this dude nailed.
is there any way to find out who he resells for and get him canned?? or at least make him lose his commission?
the sites hes spamming directly for (no ID strings or referrer info either) are:
http://nuvofx.com/
http://www.hostpromo.net/hostlin…PS - this all started when i reported him using every but of info in his DNS information etc, so the dude is checking an account somewhere
- kerus0
18 hours later, i removed the filter for 45 seconds and got over 300 emails. heh.
think i hit a nerve?
- unfittoprint0
drive by shooting.
we never had this talk.
- kerus0
unfit: *nod*
- jox0
I only did it because you reported me.
Kidding :) If you know his addy you can track him down, and see which smtp-server he uses. (can't remember the site where you did that, tho) Then it should be fairly easy to find out who he is, or at least WHERE he is. Talk to your ISP, they will most certainly be interested in helping you since spam is being sent out using their / your mailserver.
- kerus0
seriously, is there any way to find out who this MF'er is reselling for?
- jox0
Scroll down in my previous post.
- kerus0
ah.. theyre not actually using our mailserver.. it SEEMS to be coming from innotek.de i *think*.. my ISP is supposedly on the case, but its 26 hours later, they dont close for holidays, and i got the "we'll call you back" answer again
- jox0
damn - tricky situation. Maybe try to close down your email alias for a few hours / days? Eventually he'd think you switched addy ..
But seriously, what a piece of shit. I would gladly pay to help you kick his sorry ass if or when you find him.
- rabattski&rabattski0
small chance that you can find out who he is. in the end you'll have an ip number and the smtp servers used, the only way to backtrack it in combination with the time sent is to see the logs of the smtp server used. that's not really gonna happen. the only thing you can do is report it. especially to the hosts of the concerning smtp server. anyways, it's time that some organisation took care of all the smtp servers who allow relaying because the less you have the harder spamming gets (they will be more traceable).
- kerus0
at this point i dont care about finding out who he is etc.. he's got 2 sites reselling hosting from SOMEWHERE, and id love to find out where and hopefully plead to their sysadmins to close his reselling accounts.
- rabattski&rabattski0
oh and pray that he's not ip spoofing. which makes it even more impossible.
another thing. i checked the log of my router recently but is it a trend that shitloads of remote ip's try to access my router? weird shit going. all other dsl connections and on weird weird ports as well. had to reboot to get another ip because i was getting 10 hits per second. shit like edonkey ports pinging, some rare ms admin port accessing. what's going on these days?
- kerus0
ok thanx. scroll up and read what i wrote. heh
- rabattski&rabattski0
oi! shit. yer right. i read it too fast.
- rabattski&rabattski0
little bit confused. so that guy you want to get is spamming for nuvofx.com? and you want to report it to nuvofx.com?
- kerus0
they arent using referrer ID's or any sort of strings, so the spammer IS nuvofx.com AND hostpromo.net
even if its not them, they need to be shut down for condoning the behavior.
- rabattski&rabattski0
well both can be whoised. address and phonenumbers are mentioned. so you can give 'em a ring. or send by a crew.
- kerus0
the phone numbers and address are bogus. they are for another webhost in florida.. 3 different tech support people confirmed that none of the names are in their machines anywhere
- rabattski&rabattski0
and the ones in nevada?
- kerus0
its the phone number for a residence. the lady was like "please stop calling me" when i called. hehe