RobitcalWorld [**Whats with this guy**]

Equinox

Equinox

New member
I realise that this user was banned from the forums not too long ago, but what the heck is this all about:
Every piece of information I posted about myself on HostingDiscussion he has sent to me in IM through AIM and MSN. I've finally blocked him, but still seem to get his stupid bloody adverts about his crap hosting company through my mail. If this user is ever found on HostingDiscussion again, I will be most displeased.

Has anyone else had the same experience as me? I hope not...bloody idiot!
~Equinox
 
I can assure you that he will not be back to HD anytime soon. However, you can try to contact his host to get the emails to stop. The IP Address of his site is 70.85.33.66. This IP belongs to ThePlanet, so I would recommend contacting them as I am sure that spam is against their policies.
 
I am CTO of Robotical World. We never spam people!
We fired a few annoying staffs recently (almost all).
And they've been abusing, and we had haters and abusers around.
He even abuses our hosting, and caused exim to crash
A guy is abusing our services, and we never spam e-mails
Please BE SURE THAT WE NEVER SPAM PEOPLE
Btw, can we have the person who keeps contacting you?
He is using our name to make our service go bad...sigh:

All information resides below (Ticket at the planet):

Abuse: Monitoring Phishing Spam from 70.85.33.66

The same user has sign up again and I believe the user is spamming out letters again. I have already suspended their account again. Please foward to abuse and tell me how to stop it. Maybe I should stop instant account activation?
--------------------------------------
(c22812robo-02/24/2005 06:27:34):Ordered from IP: 67.180.208.201
IP traced back to: c-67-180-208-201.client.comcast.net

Ordered from IP: 24.6.89.46
IP traced back to: c-67-180-208-201.client.comcast.net

Their program/script has be analyzed:

Place or Update Credit Card on File
Dear FIRSTNAME ,This is your final warning about the safety of your eBay account. If you do not update your billing informations your access on eBay will be restricted and the user deleted. This might be due to either following reasons: - A recent change in your personal information (i.e. change of address) - Submiting invalid information during the initial sign up process. - An inability to accurately verify your selected option of payment due an internal error within our processors. Your credit card on file with eBay Card number: XXXX-XXXX-XXXX-4322 (Not shown for security purposes) Expiration date: 11/05 Please sign in to your eBay account and update your billing information:https://signin.ebay.com/saw-cgi/eBayISAPI.dll?SignIn&UsingSSL=1If your account information is not updated, your ability to sell or bid on eBay will become restricted.Thank you,eBay Billing Department------------------------------------------
-------------------------------------- eBay treats your personal information with the utmost care, and our Privacy Policy is designed to protect you and your information. eBay will never ask their users for personal information, such as bank account numbers, credit card numbers, pin numbers, passwords, or Social Security numbers in an email. For more information on how to protect your eBay password and your account, please visit User Account Protection. This eBay notice was sent to you based on your eBay account preferences and in accordance with our Privacy Policy. To change your notification preferences, click here. If you would like to receive this email in text format, click here. Copyright © 2005 eBay Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners.eBay and the eBay logo are trademarks of eBay Inc.

----------------------------

rom: ukrswebhelp@ebay.com Add to Address Book
Subject: FPA NOTICE: eBay Registration Suspension - Breach of User Agreement- batelcruzuk27@yahoo.co.uk
Date: Fri, 14 Jan 2005 10:13:59 PST

Dear batelcruzuk27 (batelcruzuk27@yahoo.co.uk),

We regret to inform you that your eBay account has been suspended due
to concerns we have for the safety and integrity of the eBay community.

As we state in the User Agreement, Section 8, we may immediately issue
a warning, suspend, or terminate your membership and refuse to provide
our services to you if we believe that your actions may cause legal
liability for you, our users or us. We may also take these actions if you
have breached the User Agreement or if we are unable to verify or
authenticate any information you provide to us.

Due to the suspension of this account, please note that you are
prohibited from using eBay in any way. This includes the registering of a new
account.

Please note that this suspension does not relieve you of your
obligation to pay any fees you may currently owe to eBay.

Regards,

eBay Trust and Safety


------------------------------------------
----------

***Urgent Fraud Prevention Group Notice*** You have received this email because we have strong reason to believe that your eBay account had been recently compromised. In order to prevent any fraudulent activity from occurring we are required to open an investigation into this matter. To speed up this process, you are required to verify your eBay account by following the link below. https://signin.ebay.com/saw-cgi/eBayISAPI.dll?SignIn&UsingSSL=1(To complete the verification process you must fill in all the required fields) Please Note: If your account informations are not updated within the next 72 hours, then we will assume this account is fraudulent and will be suspended. We apologize for this inconvenience, but the purpose of this verification is to ensure that your eBay account has not been fraudulently used and to combat fraud. We appreciate your support and understanding, as we work together to keep eBay a safe place to trade. Thank you for your attention on this serious matter. We apologize for any delay in resolving this situation. Regards, Morris FranklineBay SafeHarborInvestigations Team Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered. eBay treats your personal information with the utmost care, and our Privacy Policy is designed to protect you and your information. Copyright © 2004 eBay Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners. eBay and the eBay logo are trademarks of eBay Inc. eBay is located at 2145 Hamilton Avenue, San Jose, CA 95125.

---------------------------

They cloaked the link - Real link is to:

http://61.3.142.3/mrtg/secure/eBayS...p?MfcISAPICommand=SignInFPP&UsingSSL=1&email=

http://cgi4.ebay.com/ws/eBayISAPI.d...p?MfcISAPICommand=SignInFPP&UsingSSL=1&email=




------------------------------------------

(aallen-02/24/2005 06:40:50):
I am sending this ticket to Abuse.
--------------------------------------
(c22812robo-02/24/2005 06:52:36):I'll put this message on the footer of my page:

------------------------------------------
------------------------------------------
------------

- If you break the TOS that you agreed to when ordering. -

- Your account will result in immediate suspention and the abuse will reported immediatly and action will be taken. -

-TOS Challengers (Abusers), We do NOT welcome you, STAY OUT!-

-----------------------

I also reported the abuse to comcast....
--------------------------------------
(c22812robo-02/24/2005 06:53:42):Plese help me in anyway you can.
--------------------------------------
(c22812robo-02/24/2005 06:54:50):Paypal payment:

Dear Robotical World - RW Networks,

Yustyna Kunyk just signed up for a subscription to Professional Plan [sadfsafsa.com].

yuriy911@hotmail.com's first subscription payment, for $6.27 USD has already been sent to your PayPal account.


------------------------------
Subscription Details
------------------------------

Date of sign up: Feb. 24, 2005

Subscription Name: Professional Plan [sadfsafsa.com]

Subscription Number: S-649707314K332145U Custom Number: 778ed8138ac5f4c2297024ea900f0b65

Subscription Terms:


$6.27 USD for the first month

Then $6.27 USD for each month

------------------------------
Subscriber Information
------------------------------

Name: Yustyna Kunyk
Email: yuriy911@hotmail.com



Sincerely,
PayPal

------------------------------------------
--------


--------------------------------------
(c22812robo-02/24/2005 07:13:10):More Info:

INFORMATION YOU REQUESTED:

a. 02/24/2005
b. 2:21 AM
c. Clients Local IP: Ordered from IP: 24.6.89.46 - - Click to Trace
only captured on orders that go through order system
Clients Local ISP: IP traced back to: c-24-6-89-46.client.comcast.net
D. 70.85.33.77 - http://hosting.**************.com/step_one.php
E: 81
 
Last edited:
Dragonlordgod,

One of the best things you can do is block that user's IP address from accessing your server.

From the command prompt, type:
route add IP.IP.IP.IP dev lo
and replace the IP's with the user's IP.

Don't add your IP unless you can SSH in from another IP ;)

Regards,
 
Thanks for the info Dragonlord. I would also support what Exon said about blocking IPs. Probably your best bet!
~Equinox
 
Forgot to mention, other helpful ones that go in with adding would probably be viewing and removing IPs!

While at the command prompt issue the command: route -n
That will show you the IPs currently being blocked.

To remove an IP from the list use: route del IP.IP.IP.IP. dev lo

Hope that helps!
 
Thanks for all the suggestions. I'll block him. :thumbup:

Hope he doesn't come again and we're sorry this happened to you. :sad:
 
Couple months back we went through something similar, however, our problem was a 16 year old who thought because he could steal his mom's credit card out of her purse, signup, upload a script that someone else made, and execute it that he was going to be able to "Hack the planet" - we caught him fairly quick before too much damage was done, and (sad to say) called his mommy and told on him. :D
 
You must log in or register to reply here.

Supporters

Back
Top