Porn Spammer hit my forum

[Memnoch-NMX-]

Bleh. My forums were hit by one of them last night. Here's a discussion myself and a few other clans have been having about this problem:

http://www.nightmarextreme.com/forum/showthread.php?threadid=1264

Here's the list I've come up with so far:

billy_mad25	 193.188.97.151  [email][email protected][/email]
georgesltd56	63.147.249.47   [email][email protected][/email]
jimyoung19a1	211.28.96.9	 [email][email protected][/email]
duem_18		 208.60.126.2	[email][email protected][/email]
bof19_br0	   200.206.165.40  [email][email protected][/email]
yummy-juice)25  208.60.126.2	[email][email protected][/email]

What I did temporarily was to ban the @gamebox.net and @bonbon.net email domains from being used to create accounts.

[Floris]

http://www.vbulletin.com/forum/showthread.php?threadid=66080

Someone started a clean new thread with a listing of these hosts/users/etc

People might want to take a look, I also included tips and advice about how to report and where to find terms of agreements, etc.

[dynamite]

Okay, I still have 15 guests trying to reply on my site. Same IP, every one of 'em.

Is there any way I can kick these "guests" outta my forum?

These are more than likely a webbot which is spidering your site. I had 19 this morning. You can check out your logs and see which one it is, and then exclude it in the robots.txt file.

[phenom]

ahh, logs.... hmmm.... lemme see....

where would that be?

[dynamite]

ahh, logs.... hmmm.... lemme see....

where would that be?

Talk to you host. They should be able to tell you, if not they may be able to provide a copy of the logs.

[Tim Weber]

According to Whois at Network Solutions, GameBox.net, BonBon.net, and hotPOP.com all live here:

1550 Tremont St. #1
Boston
MA,02120
US

The DNS servers for all of them are given as nsx.jerky.net, which resides at ... 1550 Tremont St. #1 (as Jerky Network Services).

Does anyone here live in Boston? Is that an abandoned building?

The Jerky entry actually has a human-type name attached: Andrew Shoemaker. And an e-mail address: [email protected]. Let's see if anyone's home ...

[Roody]

According to Whois at Network Solutions, GameBox.net, BonBon.net, and hotPOP.com all live here:

1550 Tremont St. #1
Boston
MA,02120
US

The DNS servers for all of them are given as nsx.jerky.net, which resides at ... 1550 Tremont St. #1 (as Jerky Network Services).

Does anyone here live in Boston? Is that an abandoned building?

The Jerky entry actually has a human-type name attached: Andrew Shoemaker. And an e-mail address: [email protected]. Let's see if anyone's home ...

Keep us updated Tim. I'm curious to hear what happens.

[phenom]

That address is eerily familiar to me, and I have a hunch why/who, but I'm not sure yet.

[ManagerJosh]

According to Whois at Network Solutions, GameBox.net, BonBon.net, and hotPOP.com all live here:

1550 Tremont St. #1
Boston
MA,02120
US

The DNS servers for all of them are given as nsx.jerky.net, which resides at ... 1550 Tremont St. #1 (as Jerky Network Services).

Does anyone here live in Boston? Is that an abandoned building?

The Jerky entry actually has a human-type name attached: Andrew Shoemaker. And an e-mail address: [email protected]. Let's see if anyone's home ...

Pulled this up on mapquest....dunno if it helps much.

http://www.mapquest.com/maps/map.adp?country=US&address=1550+Tremont+Street+&city=Boston&state=MA

Though this is intresting...Google found this:

http://www.google.com/search?hl=en&lr=&ie=ISO-8859-1&q=1550+Tremont+Street+Roxbury%20Crossing

[mheinemann]

Pulled this up on mapquest....dunno if it helps much.

http://www.mapquest.com/maps/map.adp?country=US&address=1550+Tremont+Street+&city=Boston&state=MA

Though this is intresting...Google found this:
http://www.google.com/search?hl=en&l...ury%20Crossing

Total Distance: 1829.58 miles
Total Estimated Time: 29 hours, 48 minutes

I think I'll let someone else go. lol

[phenom]

Check this stuff out:

https://www.ccs.neu.edu/home/ewiley/resumes/resume.doc

http://sundry.eng.intersil.com/users/john/spam/spammers.txt

[phenom]

it's like a lynch mob here.

[dynamite]

So, I am going to guess it is some punk in college running his own server, so there's probably not much luck getting him shutdown without finding out who handles his Point-of-Presence and then contacting them. Of course, I guess if they received several hundred emails they might take some action!

[dynamite]

[edit] Never mind, I typed something wrong in here so I removed it [/edit]

[phenom]

you spelled it wrong, it's jerky.net, not jerkey.net