Spammer username/e-mail/IP listing:

**Floris** · Wed 26 Feb '03, 6:33am

If you are hit by someone with that username, or that email, or the known IP's.

You are best of to collect their abuse before you prune their posts.

Gather a copy by downloading the .html file to a directory on your hard drive, make a .txt file with the username/ email and other profile details.

Find out the abuse departments for the involved hosts: The email they used, their used IP address, their spammed URLs and make 1 email with your complaints, your reference to your attached .zip file with the abuse logs (who have date and time stamps) and what you wish to be done about it and also make sure you mention that they are breaking their services terms of agreement. Because I am pretty sure they are not allowed to use those services to spam. It might be a nice idea to also refer to these threads to show that this is not a one time incident and that you seriously require something to be done about it. ALSO, write this all in your own words ofcourse. If you had any contact with an abuse department that awnsered your email besides the auto reply, maybe post it here, so we know which E-mail address to use.

The more complaints a company gets about a spammer, the more they are willing to clear their own name from not becomming 'an abusive service for spammers'.

Good luck everybody. And update your vBulletin to the latest 2.3.0 to prevent further/future abuse.

GameBox.net
This is a free E-mail service. GameBox.net is powered by HotPop, which might explain the other E-mail accounts being a HotPop one.
Their General Terms & Conditions are located here
Check their point: 2.12 Anti-Spam Policy
Which reads:

The Site is vigorously against the practice commonly referred to as “Spam”. Users who are reported and whose claims of “Spam” are validated by the Site, will have their respective accounts either immediately TERMINATED or SUSPENDED, at the sole discretion of the Site.

and

Messages posted to Usenet and message boards that are off-topic (unrelated to the topic of discussion), cross-posted to unrelated newsgroups, or posted in excessive volume;

And they mention to report abuse like this:
ABUSE REPORTING: If you wish to report a violation of our Anti-Spam Policy, please forward all evidence of abuse to: [email protected] Please refer responsibly!

HotPop.net
Free E-mail service
Terms of Services and Acceptable Use can be found here
Also funy to read there:

General Information
HotPOP, HotPOP.com, PunkAss, Punkass.com, SexMagnet, SexMagnet.com, BonBon.net, GameBox, GameBox.net, ToughGuy, ToughGuy.net, Phreaker.net, Get The Message and all associated logos are trademarks of HotPOP. HotPOP reserves copyright on all web pages and original code resident on HotPOP's systems.

Now we know from where we can expect more E-mail accounts from those abusive users.
They have a seperate Page for Anti Spam, which you can find here
This page also explains HOW to report abuse and what to look out for. You can report HotPop complaints of abuse here: [email protected]

BonBon.net will result in the HotPop web site, so use that same abuse email, but make clear this is a BonBon.net user, which helps them solve it quicker.

You can use the whois databases from Ripe, Arin, etc to lookup their host addresses and find their hostmasters, if you email them, make sure you end with a PS: if this email is emailed to the wrong host master, please reply back to me the correct email address if you have it, and please forward this email to the appropiate contact person. Because most host masters on a ripe contact are for a whole isp and not a individual reseller or whatever. They might assist you on your next step.
Don't forget to stay nice, but strict and clear in your emails, include all possible information in an easy to see/overview manner, date and time stamp everything. So they can trace their system logs to cross match against the user.

Oh, the same anti abuse / spam conditions apply for hotmail.com and their account is [email protected] I could paste the urls etc here, but I automaticly get the dutch version :>

**filburt1** · Wed 26 Feb '03, 6:34am

You forgot the IPs

**Floris** · Wed 26 Feb '03, 8:49am

Originally posted by CSU-CYS

Great post xiphoid. THanks for taking the time to gather that info and lay out those instructions.

And yes, i did forget the IP's.

Sorry, i was running out the door and they slipped my mind. However, the best i can do is go and refrence the other post for them... i've already removed each user individually and no longer have access to the IP's. Could someone be so kind as to post them?
Thanks, and thanks again xiphoid.
matt

(p.s., i'll delete this post if someone will post the IP's, to keep this thread mainly names and that sort of info).

Porn Spammer hit my forum - vBulletin Community Forum

http://www.vbulletin.com/forum/showpost.php?postid=418123&postcount=286

Hey guys, Logged on my board this morning and saw that a member had signed up and replied to nearly every thread with a spam message advertising ameteur porn. I banned him, recorded his IP and pruned all of his posts. Now, all I have is his IP. It didn't resolve to his ISP. How do I go about finding the ISP for which an IP

Check this post out.

if you update your first post, i will also delete this post.

**Floris** · Wed 26 Feb '03, 9:03am

Double posting are we?

Anyway, that looks like a normal user, you could always keep an eye on the posts by this user, and just ban it when it starts to post spam/pr0n links.

**phenom** · Wed 26 Feb '03, 9:06am

Keep an eye out for this one also:

212.244.226.44

This IP has been "replying to thread" on my forums for at least the past seven hours. Not only that, but there's FIFTEEN of them with the same IP, all trying to reply at the same time.

**SusanD** · Wed 26 Feb '03, 9:08am

Originally posted by xiphoid

Double posting are we?

Anyway, that looks like a normal user, you could always keep an eye on the posts by this user, and just ban it when it starts to post spam/pr0n links.

Sorry...I thought we were supposed to move post these over here instead.

**phenom** · Wed 26 Feb '03, 9:08am

Originally posted by CSU-CYS

ginaguy18p0r - [email protected]

Here's the IP I got for ginaguy18p0r: 200.207.53.33

**AWS** · Wed 26 Feb '03, 11:56am

Originally posted by SusanD

I installed 2.3 and everything is working fine. (I've had lots of guests today) :wink:

Anyway I just had a new user register...the name & email make me wonder:

User: puddycat
email domain: speakeasy.net

their ip starts with a 68 though.

Has anybody had this user???

Speakeasy is my ISP and my isp and my IPs are all in the 68. range.
Don't think you have to worry about that one.

**SusanD** · Wed 26 Feb '03, 12:02pm

AWS Thanks - I'd all ready come to that conclusion and I'm going to delete my earlier posts - I don't want this to turn into a witchhunt. I was concerned because "puddy" is pretty close to another word the pornbot might use.

**InSite** · Fri 28 Feb '03, 1:59pm

New one today:

henryguy79
[email protected]
200.207.153.49

**CSU-CYS** · Mon 3 Mar '03, 5:09pm

New one:
celebguy_dv
[email protected]
218.145.25.112
added to top.
matt

**TexasOutdoors** · Tue 4 Mar '03, 9:00am

Here's my most recent wannabe attacker:

Username: gymifty9
IP Addy: 198.94.127.6
Email Addy: [email protected]

And I now see it's trying to Register again with the same IP. lol, I just banned the one above.

**CSU-CYS** · Tue 4 Mar '03, 9:01am

Originally posted by TexasOutdoors

Here's my most recent wannabe attacker:

Username: gymifty9
IP Addy: 198.94.127.6
Email Addy: [email protected]

And another from me:
jimkel19
[email protected]
195.116.22.214

Will add both to the top in a min

**Yappi** · Tue 4 Mar '03, 9:35am

Just got this one:

hotgin20
[email protected]
200.30.100.201

Spammer username/e-mail/IP listing:

Spammer username/e-mail/IP listing:

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment