| Author | Message |
|---|
Vektor
2009-03-01
12:14:16
|
| Quote | A scammer is using altervista.org to host scam pages to steal login credentials for various websites including dchublist.com , no-ip.com and live.com .
| Quote: | | [2009-02-11 01:47] <']['€AM€LiT€> Report from dchublist (79.52.3.97) - The user IF "YOU ARE IN SEARCH OF REGENERATION DNS EXPIRED AS MAY INFER USER TEST THIS SITE dnshub.altervista.org" |
|
| -TE- wrote: | | [2009-02-11 23:32] <-TE-> Report from dchublist (79.52.3.97) - The user Add "your hubs n this new list http://searchub.altervista.org/ by staff dchublist" |
|
| -TE- wrote: | | [2009-02-22 10:10] <-TE-> Report from dchublist (79.52.3.95) - The user Hello, "I'm an operator dchubblist please the owner of this hub must enter of http://www.myers.altervista.org by putting email and pass for a control hub if not done there will be problems with hubs thanks" |
|
| -TE- wrote: | | [2009-02-22 10:20] <-TE-> Report from dchublist (79.52.3.95) - The user Hello, "I'm an operator dchubblist please the owner of this hub must enter of http://www.myers.altervista.org by putting email and pass for a control hub if not done there will be problems with hubs thanks" |
|
| -TE- wrote: | | [2009-03-01 03:32] <-TE-> Report from dchublist (79.18.143.52) - The user Hello, "I'm an operator dchubblist please the owner of this hub must enter of http://listdchub.altervista.org/ by putting email and pass for a control hub if not done there will be problems with hubs thanks" |
|
Reporting these scam pages to abuse@altervista.org has the result of his account being suspended.
We've seen that this particular scammer has certain strings in his $MyINFO that can be banned in hubsofts in case you don't want to ban his ISP.
| Code: | | !set for desc add spammone=n,e Spammers are not allowed in this hub! _ban_ |
|
| -TE- wrote: | [12:49] <-TE-> From IP: 79.18.143.52, nick: dchublist - Forbidden word(s) "spammone" found in description - "Spammone"
[14:10] <-TE-> From IP: 151.56.123.89, nick: support-dc - Forbidden word(s) "spammone" found in description - "Spammone" |
|
The nick dchublist is reserved for dchublist pinger, and in most hubs it is not registered. To register the dchublist pinger, register an account @ http://www.dchublist.com, add your hub and set a password for dchublist pinger that will be used in your hub. Also, register the nick dchublist in your hub.
|
|
[-TE-]-Molotov
2009-03-07
15:46:51
|
| Quote | | ¤-¤-¤_OPChat_¤-¤-¤ wrote: | | [12:54:49] <¤-¤-¤_OPChat_¤-¤-¤> REPORT: user 'Hello,' which is offline Reason='I'm an operator please the owner of this hub must enter of http://dyndnsvsnoip.altervista.org/ by putting email and pass for a control hub if not done there will be problems with hubs thanks'. reporter -- IP=' 79.42.140.190 ' Host=' ' User=' Support ' |
|
and after a few hours
| http://dyndnsvsnoip.altervista.org/ wrote: |
Account sospeso
Questo account è stato sospeso perchè non in linea con il regolamento della comunità.
|
|
Once again the lamer got shutdown. =) |
|
Vektor
2009-03-15
17:25:22
|
| Quote | | ¤-¤-¤_OPChat_¤-¤-¤ wrote: | | [17:22:52] <¤-¤-¤_OPChat_¤-¤-¤> REPORT: user 'duc' which is offline Reason='downloaded the new version in 2009 at this address http://79.37.49.88:2000/no-ip.rar'. reporter -- IP=' 79.37.49.88 ' Host=' ' User=' support-no-ip ' |
|
Of course, no-ip.rar has a no-ip.exe in it (which was submitted to all antiviruses to be added to their databases). It connects DC bots to 84.19.178.17:436, bots have this tag: <++ V:64 l,M:A,H:1/0/0,S:1>.
Local path to his "no-ip project" (stored in no-ip.exe): C:\Documents and Settings\Emanuele\Desktop\no.ip\Progetto1.vbp
Messages displayed:- La password inserita non è corretta!Cambiarla e riconnettersi!
- Il vostro MSN e' stato blokkato da 3 kontatti....Sbloccaggio in korso . . .
- Please enter your e-mail address and password below.Don't have an account? No problem, to sign-up free!Forgot your password?Even better, to have it e-mailded to you!
- Checking Remote IP Address.
Current IP address found, using for updates.
Retrieving hosts, please wait.
Invalid Username/Password. - Updating to IP: NAT/Router/Proxy
- Please check the hosts you want updated, checks take effect
- To submit a bug/suggestion please and fill out the form
- Account used for updates: Theprison@hotmail.com
|
|
|
