DRC Forum » General Discussion » Absolute Random Insanity » Tired of faggots. Ownage time. » Page 1 of 1

[|DRC| Wartex]

Every day, 3-5 people (well, bots) try to sign up on our forum. I implemented a script that automatically bans the IP before they even create an account, effectively banning them from my entire net of sites. Forum also emails me the details that were submitted during the registration. Today I decided to read thru them, and discovered something nice. The last signup attempt:

-----------------------------
Spam Bot Registration Attempted.

IP Address = 85.141.165.211
Hostrname = ppp85-141-165-211.pppoe.mtu-net.ru
Spammer's Username = mikhel_pavlov
Spammer's Password = slwhbmzuERoXzRyL
Spammer's email address = pirogovrv@mail.ru
Spammer's Webpage URL = http://www.puzzlle.ru/
-----------------------------

If you look at the password, that's not a typical spambot password, usually spammers use "pass123" or "test123", neither it is gibberish from random typing since it has uppercase letters.

I had a feeling this pass is used for his mail.ru mailbox. Not surprisingly, it worked.

Well, now what we have in a (small-time) spammers mailbox is a few hundreds of registration confirmation emails from phpbb-based boards, which are of no interest to us. The important part is *outgoing email*. Which is all kind of personal email. After digging thru 5-6 letters we find the following: resume.doc. The original email (by quotation) is a request from some company to send his resume. What we have is:


Address:
Moscow, RU
Svobodny Blvd #xx, apt #xx
Phone: (495) 301-xxxx, (916) 907-xxxx


Real name: Pirogov Roman Vladimirovich

Born: June 12 1985 in Moscow.

Education, 4th year IT of http://www.mpei.ru/MainPage.asp


Worked for Goodwin Europe from january 17 to may 16 2005 as a programmer/tester.

June 18 - august 23 worked in the USA as a "website promoter" (read "fucking spammer") and "web developer".

Known languages: VC++, Delphi, VB, Perl, PHP, Java script

Interests: web-design, programming.


==================================================

So we have a 100% accurate info on our lamer. Tomorrow I'm going to call him from skype repeatedly. Then I'm going to tell him where he lives, as well as email all his contacts and tell them he is a fucking spammer, and attach his resume. I changed his password as well as security question, so he can't get into the mailbox.

----------------------------

Moral of the story: Don't use the same password for spambots and your email and never, under any circumstances fuck with DRC.

[Sponsored Ad]

[OLDie]

Wartex... now that is having some fun!!
_________________
The Harder You Work The Luckier You Get!

[|DRC| Messiah]

total OWNAGE! nice work boss!
_________________
Computer: Home Grown = Pentium 4HT 2.8GHZ, Biostar Group P4TSV, 2 GB SDRAM Corsair XMS4000 3,4,4,8, Geforce 6800 GT 256MB, Sound Blaster X-fi Platinum, HDD's seagate(ST3250823AS) SATA 250GB, WD(WDC WD2500KS-00MJB0) SATA 250GB, External 100 GB WD, Sony DVD DRU510A, HP DVD740 with lightscribe, Rosewill Case TU-155S, Saitek Key board ku-0418, Mouse Logitech MX518, Speakers logitech X-530 | Samsung 19in 16:9 ratio Syncmaster 941bw

[|DRC| psycheus]

Dude that is so awesome!! Let us know what happens
_________________
psycheus.com
tacnit.com

[|DRC| SLIM]

ahahhahahha nice work!

[|DRC| Death]

LOL I bet it's nice being you.

[|DRC| Iceman]

Now thats what I call OWN3D!

P.S. Should you not disable his site link with a * .......Just thinking he will see where it links to on his site.

Oh shit! ....I wonder if he uses the same password for his sites FTP!? LOL .... You should see if you can figure it out......connect via proxy, and fuck him up the ass.......upload some some gay porn or something

[darthanian]

Wartex what happened?
_________________

[|DRC| Death]

. It's tempting to be harsh, but I admire my own self-control here.

Basically darthanian a bot signed up to the forum with this info:

|DRC| Wartex wrote:

---

IP Address = 85.141.165.211
Hostrname = ppp85-141-165-211.pppoe.mtu-net.ru
Spammer's Username = mikhel_pavlov
Spammer's Password = slwhbmzuERoXzRyL
Spammer's email address = pirogovrv@mail.ru
Spammer's Webpage URL = http://www.puzzlle.ru/

His password is different from a lot of spambot passwords as they choose simple ones such as 'pass123' etc...

Wartex figured that this password was also used for his .ru mailbox, it worked. Wartex found out his address, name, interests, residence etc.. Wartex changed his password and security question so he can't access his e-mails again. Basically, it's a fifty-line (there about) way of saying don't mess with DRC because it will backfire.



And after all that I've just realized that he might mean what happened to the guy after this happened

[|DRC| Wartex]

He tried to register again yesterday, and now uses new email. I changed the password on it as well:

IP Address = 85.141.167.148
Hostrname = ppp85-141-167-148.pppoe.mtu-net.ru
IP Lookup 1 = http://www.nwtools.com/default.asp?prog=express&host=85.141.167.148
IP Lookup 2 = http://whois.domaintools.com/85.141.167.148
Spammer's Username = dmitrevkv
Spammer's Password = slwhbmzuq1
Spammer's email address = dmitrevkv@mail.ru
Spammer's Webpage URL = http://www.puzzlle.ru/

[|DRC| Death]

LOL he used the same password again?

[|DRC| Wartex]

Lamers don't learn.

[|DRC| Iceman]

Lets all find a good proxy and sign the faggot up for some gay porn

[|DRC| Wartex]

He rarely checks the email, so no use. I will post his phone number on a russian "dating" website (gay.ru etc) with a text like "hot gay male looking for some boy on boy action as well as enjoys scat, bondage and arseplay".

[|DRC| Iceman]

[|DRC| psycheus]

I can't wait to see how this one turns out!

[|DRC| Wartex]

Same dude, registered again

IP Address = 85.141.165.64
Hostrname = ppp85-141-165-64.pppoe.mtu-net.ru
IP Lookup 1 = http://www.nwtools.com/default.asp?prog=express&host=85.141.165.64
IP Lookup 2 = http://whois.domaintools.com/85.141.165.64
Spammer's Username = puzzlle_d
Spammer's Password = slwhbmzu
Spammer's email address = puzzlle_d@mail.ru
Spammer's Webpage URL = http://www.puzzlle.ru/

Changed his new email password again.

[|DRC| Wartex]

bump

[|DRC| Death]

lmao this is genius! Did we ever discover the fate of this guy?

[|DRC| Wartex]

I ended up calling him and scaring him to death. He promised he won't do it again.

[|DRC| intekra]

That is fucking awesome

[|DRC| Death]

Wartex wrote:

---

I ended up calling him and scaring him to death. He promised he won't do it again.

lmao. So he actually physically took the time to register over and over again? Talk about waste of life.

[|DRC| Wartex]

No, it was his bot registering.

[Ashalafar]

Told rolled sold?

[sharon100]

wow great info...... its really interesting.....

[|DRC| Wartex]

sharon100 wrote:

---

wow great info...... its really interesting.....

web development services

you fucking spammer cunt. You are next.

[|DRC| psycheus]

Getem' getem'! You go Wartex. Here is the contact information from whois..

whois wrote:

---

Technical Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
Note - All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676