vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Community Lounge (https://vborg.vbsupport.ru/forumdisplay.php?f=13)
-   -   need help tracing IP (https://vborg.vbsupport.ru/showthread.php?t=173312)

lasto 03-17-2008 04:34 PM

need help tracing IP
 
1 Attachment(s)
got home today and recieved this email to my email account

Received: by 10.141.4.5 with SMTP id g5cs53826rvi;
Mon, 17 Mar 2008 05:22:21 -0700 (PDT)
Received: by 10.141.43.5 with SMTP id v5mr41936rvj.216.1205756540360;
Mon, 17 Mar 2008 05:22:20 -0700 (PDT)
Return-Path: <piecesofeighty@aol.com>
Received: from imo-d21.mx.aol.com (imo-d21.mx.aol.com [205.188.144.207])
by mx.google.com with ESMTP id 39si31717902wrl.29.2008.03.17.05.22.19;
Mon, 17 Mar 2008 05:22:20 -0700 (PDT)
Received-SPF: pass (google.com: domain of piecesofeighty@aol.com designates 205.188.144.207 as permitted sender) client-ip=205.188.144.207;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of piecesofeighty@aol.com designates 205.188.144.207 as permitted sender) smtp.mail=piecesofeighty@aol.com
Received: from piecesofeighty@aol.com
by imo-d21.mx.aol.com (mail_out_v38_r9.3.) id o.d45.248dce81 (37116)
for <**************>; Mon, 17 Mar 2008 08:21:55 -0400 (EDT)
Received: from webmail-me06 (webmail-me06.webmail.aol.com [64.12.88.198]) by cia-ma01.mx.aol.com (v121.4) with ESMTP id MAILCIAMA012-90fc47de6263f1; Mon, 17 Mar 2008 08:21:55 -0400
To:*********************
Subject: your sucky ass vbulletin board
Date: Mon, 17 Mar 2008 08:21:55 -0400
X-MB-Message-Source: WebUI
X-AOL-IP: 96.234.73.32
X-MB-Message-Type: User
MIME-Version: 1.0
From: piecesofeighty@aol.com
Content-Type: multipart/alternative;
boundary="--------MB_8CA56409FA32425_468_537A_webmail-me06.sysops.aol.com"
X-Mailer: AOL Webmail 35304-STANDARD
Received: from 96.234.73.32 by webmail-me06.sysops.aol.com (64.12.88.198) with HTTP (WebMailUI); Mon, 17 Mar 2008 08:21:55 -0400
Message-Id: <8CA56409FA0C1C7-468-2893@webmail-me06.sysops.aol.com>
X-Spam-Flag: NO


----------MB_8CA56409FA32425_468_537A_webmail-me06.sysops.aol.com
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"


did you know that we are going to flood your ++++ed up, shitty ass, broken-ass-links,?board every night?? Get ready boy!

----------MB_8CA56409FA32425_468_537A_webmail-me06.sysops.aol.com
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="us-ascii"


<div>did you know that we are going to flood your ++++ed up, shitty ass, broken-ass-links,&nbsp;board every night?&nbsp; Get ready boy!</div>
<div id='u8CA56409FA0C1C7-468-2893' class='aol_ad_footer'><FONT style="color: black; font: normal 10pt ARIAL, SAN-SERIF;"><HR style="MARGIN-TOP: 10px">Supercharge your AIM. Get the <A title="http://download.aim.com/client/aimtoolbar?NCID=aolcmp00300000002586" href="http://download.aim.com/client/aimtoolbar?NCID=aolcmp00300000002586" target="_blank">AIM toolbar</A> for your browser.</FONT> </div>

----------MB_8CA56409FA32425_468_537A_webmail-me06.sysops.aol.com--


I dont know much about this but i heard IPs are traceable and they can be traced back is this possible as who ever sent the email has also made 3 accounts on my board and spammed the board really bad today with posts which i can not repeat here.


Can anyone find out if the info from above matches the ip in the pic below.

nexialys 03-17-2008 06:33 PM

real hackers never announce their misfits... this guy is like all the others.. making big words to make you fear .. they usually ask you to pay them in their paypal account so they will not do it if you pay...

luckily it is not one of your threats...

Paul M 03-17-2008 06:42 PM

That IP belongs to Verizon Internet Services Inc - abuse email is security[at]verizon.net

optrex 03-17-2008 06:45 PM

verizon are useless they wont act on it, just check out all the results on google. I had one the other week and reported it to them , you just get an automated bounce as a response.

lasto 03-17-2008 07:20 PM

ive recieved the bounce email already

SEOvB 03-17-2008 07:26 PM

I suppose you could do the sensible thing and ban their IP at the server level, and then you won't have to worry about it much :D

Zachariah 03-17-2008 11:15 PM

Newark, NJ, USA

Name: pool-96-234-73-32.nwrknj.fios.verizon.net
IP Address: 96.234.73.32
Location: Newark (40.733N, 74.172W)
Network: VIS-BLOCK

fios = fiber optic

OrgAbuseHandle: VISAB-ARIN
OrgAbuseName: VIS Abuse
OrgAbusePhone: +1-214-513-6711
OrgAbuseEmail: security@verizon.net


Attach your e-mail and send them one. I had a few people that DOSS my site for weeks.
I sent logs of activity to ISPs of the attackers and in 2 days the attackers were gone.
Just keep logs of activity and all communications.

AmbitiousOne 03-18-2008 03:25 PM

What do you do when someone is using a proxy server? I have had many idiots conspire to DDOS my site. And quite frankly, I can't stand hearing it. They are all on proxy server!

optrex 03-18-2008 03:44 PM

I use the proxy server hack and it tells me the real IP address. It seems to work quite well.

alphadeity 03-19-2008 03:13 PM

If an attacker is good at what they do they can hide their real IP address no matter what. They best way to avoid proxy attacks is to block all proxy connections at the server level. But even this is not fool proof.


All times are GMT. The time now is 09:00 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02270 seconds
  • Memory Usage 1,739KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete