Web Hosting Talk







View Full Version : What to do with potential spammer...


DangerMouse
11-08-2002, 08:22 AM
Hi there,

I have good reason to believe that one of my customers that signed up yesterday will be using his account to spam email addresses.

Looking in his cgi-bin i see a program called spamax and 2 text lists that are full of email addresses..one of them being 4.9mb big.

Now then.. I havent any proof that he will be using this program, but it is definitely looking that way.. what should i do?

I dont want this IP to be blocked, so should i suspend the account now or wait for definite proof before taking action?

Any help is appreciated..

Thanks!

DM :)

Unixhoster
11-08-2002, 08:30 AM
Terminate it .. why do you wait ?

I terminate any account Store ( just store ) spam or IRC software, usually spammers will run the spam software in dead time in weekend so you will not notice the spam tell he already sent 1000s of messages

+

%200 of Spammers use stolen credit cards


why wait ?

thomas830
11-08-2002, 08:37 AM
If You have his phone number call him, say that you are confirming the order etc.

If You cannot reach the person, non working number etc. I would terminate his account ASAP.

Al Mazzola
11-08-2002, 08:40 AM
Did you check this customer out before signing him up? You might want to do a quick "google groups" search on his name, domain name, and any other details you might have to see what comes up.

Personally, I'd say it looks quite suspect based on what you've posted, and would at the very least suspend the account and investigate further.

=mazz=

TheTech
11-08-2002, 08:59 AM
Add that script to your TOS/Policies as a script that cannot be used on your server. And then suspend his account and email him that the script will be removed within the next 24 hours.. and remove it yourself. :)

DangerMouse
11-08-2002, 09:14 AM
Ok,

I suspended the account because i remembered exactly what i put in the TOS.

"making available any software, program, product, or service that is designed to facilitate sending UCE"

In my eyes, the program has been made available because it is loaded in the public directory. No questions, thats breaking the rules.

So account has been suspended and an email sent to the owner. The domain is not an existing domain and it looks like it maybe in the process of being ordered.