Zero2Cool
14 years ago
Words can not depict how pissed off I am right now. Someone reported PackersHome.com as a SPAM website, that sends spam.

If I can not find the malicious script, PackersHome.com will be deleted, permanently and I can't do anything about it. Arvixe was nice enough to allow me this time to search for the issue and resolve it.

I'm doing another full site backup as we speak.


This is the email that could end PH.com

MIME element (message/feedback-report)
Encapsulated message (message/rfc822)
Headers of embedded message (message/rfc822)
Delivered-To: x
Received: by 10.90.132.18 with SMTP id f18cs52994agd;
Thu, 13 Jan 2011 18:14:35 -0800 (PST)
Received: by 10.91.8.20 with SMTP id l20mr467016agi.147.1294971275657;
Thu, 13 Jan 2011 18:14:35 -0800 (PST)
Return-Path:
Received: from rhino.arvixe.com (stats.rhino.arvixe.com [74.86.163.xxx])
by mx.google.com with ESMTPS id 1si1480406ano.176.2011.01.13.18.14.35
(version=TLSv1/SSLv3 cipher=RC4-MD5);
Thu, 13 Jan 2011 18:14:35 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of doogie@rhino.arvixe.com designates 74.86.163.xxx as permitted sender) client-ip=74.86.163.xxx;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of doogie@rhino.arvixe.com designates 74.86.163.xxx as permitted sender) smtp.mail=xxx@rhino.arvixe.com
Received: from xxxby rhino.arvixe.com with local (Exim 4.69)
(envelope-from )
id 1PdZBT-0004of-PC
for x; Thu, 13 Jan 2011 18:14:35 -0800
To: x
Subject: I've come across an interesting download

X-PHP-Script: www.packershome.com/index.php for 112.201.206.16
Date: Thu, 13 Jan 2011 18:14:35 -0800
From: jotam
Message-ID:
X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_211ffbc2d5b41ba727c216efb6a5ec07"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - rhino.arvixe.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [881 878] / [47 12]
X-AntiAbuse: Sender Address Domain - rhino.arvixe.com


UserPostedImage
Pack93z
14 years ago
Anything that we can do to help?
"The oranges are dry; the apples are mealy; and the papayas... I don't know what's going on with the papayas!"
Zero2Cool
14 years ago

Anything that we can do to help?

"Pack93z" wrote:



I don't know, man. I'm so pissed off and discouraged right now, its just not good.

I hate spam and hate script kiddies even more.


I don't know what to do. I'm deleting the other software's that I had running and hoping that it was one of them that was the culprit and doing a few other things to prevent a shut down.
UserPostedImage
Zero2Cool
14 years ago
I've done several things behind the scenes to prevent this issue occurring again and one that directly effects each of you. Unfortunately, you will need to enter a numerical security code when you log in to help ensure you're not a robot.

I'm still digging through options and files to see what else I can do.
UserPostedImage
peteralan71
14 years ago
fuuuuuuuuuuuuuck. sorry man. good luck.
Green Bay: Home of the Green & Gold. And the hunter orange. And the camouflage.
UserPostedImage
longtimefan
14 years ago
Just cuz someone reported you as spam the host takes their word for it?
Pack93z
14 years ago
The jig is up, the news is out, they've finally found me.. ;)

UserPostedImage

Now.. seriously.. can you block the bots from hitting the pages?
"The oranges are dry; the apples are mealy; and the papayas... I don't know what's going on with the papayas!"
wpr
  • wpr
  • Preferred Member
14 years ago
Man that is terrible. MUST HAVE BEEN A BEARS FAN.
UserPostedImage
Nonstopdrivel
14 years ago
How did it not occur to the host that your domain and IP address may have been (probably were) spoofed? Back up your database onto a thumb drive just in case the worst happens.

I have unlimited web space and bandwidth that I'd be happy to donate if it came to that, though I doubt it will.
UserPostedImage
Zero2Cool
14 years ago

Now.. seriously.. can you block the bots from hitting the pages?

"Pack93z" wrote:



Yes, the flood control does that, but if you click a few links too fast, it'll ban you for 60 seconds or something like that, maybe 10 minutes? I had it on the site for awhile, which seemed to speed things up, but Wade got lost, lol.

Just cuz someone reported you as spam the host takes their word for it?

"longtimefan" wrote:


Yes, one person, sent one email and BYE BYE PH.com pretty disturbing huh?
UserPostedImage
Fan Shout
beast (4h) : Wow, 95% drop in investment revenue? Would be interesting to hear the details of why...
dfosterf (25-Jul) : It's my one day deal complaint dept. on shareholder meeting day
dfosterf (25-Jul) : Probably a homer access credential intimidation kinda thing
dfosterf (25-Jul) : Meathead "journalists" skip this, concentrating on operational revenue when convenient. They switch when net revenue is more favorable.
dfosterf (25-Jul) : Resulting in an actual drop of net revenue of 12.5%. She is from Minnesota. Just sayin'
dfosterf (25-Jul) : Any plans to hold Maureen Smith (CFO) accountable for a 95% drop in investment revenue?
Mucky Tundra (25-Jul) : In your face, HBO!
Mucky Tundra (25-Jul) : @ByRyanWood Mark Murphy: “A great source of pride of mine is that we were never on Hard Knocks.”
Mucky Tundra (25-Jul) : *years
Mucky Tundra (25-Jul) : @mattschneidman Mark Murphy says he anticipates “many Packers games” being played in Germany, Ireland and/or the U.K. over the next 5-10 yea
dfosterf (25-Jul) : *cafeteria* I have hit my head also, so I sympathize
dfosterf (25-Jul) : Possibly hit his head leaning into the glass protecting the food in the cafateria
dfosterf (25-Jul) : Maybe a low flying drone
dfosterf (25-Jul) : Did Savion Williams run into a goalpost or something?
Mucky Tundra (25-Jul) : also, no bueno when a guy starts getting concussions right off the bat in his career
Zero2Cool (25-Jul) : Concussion is worse. Banks probably vet off day via back booboo claim
Mucky Tundra (25-Jul) : @AndyHermanNFL Jordy Nelson out at camp today. No word if he’s in play for one of the two open roster spots ; )
dfosterf (25-Jul) : Is that better or worse than Banks bad back?
Zero2Cool (25-Jul) : Savion concussion ... not good.
packerfanoutwest (24-Jul) : Aaron Rodgers’s first pass of first team period was picked off
Mucky Tundra (24-Jul) : tbh I didn't hear of his passing
Zero2Cool (24-Jul) : Cosby Show. Malcom Jamal Warner I think is real name
Mucky Tundra (24-Jul) : I was thinking of Ozzy and Hulk
Mucky Tundra (24-Jul) : Who's Theo?
Zero2Cool (24-Jul) : How is Theo alliteration?
Mucky Tundra (24-Jul) : Bad week for people whose names are alliterations
Zero2Cool (24-Jul) : Hulk Hogan gone too.
Zero2Cool (24-Jul) : Oh, it's toe injury
Zero2Cool (24-Jul) : Hope it's not serious. that would stink
dfosterf (24-Jul) : Sounds like an ankle not a knee for Fields
dfosterf (24-Jul) : Ya Flaccp on Browns
Zero2Cool (24-Jul) : Maybe Tyrod Taylor instead
Zero2Cool (24-Jul) : He's on Browns, right?
dfosterf (24-Jul) : They would probably go with Flacco is my guess if Fields out
dfosterf (24-Jul) : Fleece 'em again!
Zero2Cool (24-Jul) : Malik Willis might be someone Jets come after
packerfanoutwest (24-Jul) : Packers introduce 1923-inspired classic uniform, leather-look helmet
Zero2Cool (23-Jul) : Both LB Quay Walker and Rookie DB Micah Robinson have passed their physicals
Zero2Cool (23-Jul) : Happy to see site feels more snappy snappy
Zero2Cool (23-Jul) : No sir. I did not.
dfosterf (23-Jul) : You didn't get free childcare when you were at work?
wpr (23-Jul) : These guys make hundreds of thousands of dollars a year. Pay for their own childcare.
dfosterf (23-Jul) : 2nd issue. Number 1 issue was no gameday childcare. 1 of 3 teams not providing it
Zero2Cool (23-Jul) : Suppose if locker room is main issue, we sitting pretty
wpr (23-Jul) : I thought so Mucky. In those useless player polls GB always rates high overall. Locker is a part of it.
Mucky Tundra (23-Jul) : Wasn't the locker room just updated like 6 or 7 years ago?
Zero2Cool (23-Jul) : I have forum updated on different site. We'll see how this one goes before going to that
Zero2Cool (23-Jul) : Elgton Jenkins has a back injury, is expect to end contract dispute
wpr (23-Jul) : It's funny the PA complained about the locker room. It wasn't that long ago it was top shelf. Things change in a hurry.
wpr (23-Jul) : The site is much more better.
Please sign in to use Fan Shout
2025 Packers Schedule
Sunday, Sep 7 @ 3:25 PM
LIONS
Thursday, Sep 11 @ 7:15 PM
COMMANDERS
Sunday, Sep 21 @ 12:00 PM
Browns
Sunday, Sep 28 @ 7:20 PM
Cowboys
Sunday, Oct 12 @ 3:25 PM
BENGALS
Sunday, Oct 19 @ 3:25 PM
Cardinals
Sunday, Oct 26 @ 7:20 PM
Steelers
Sunday, Nov 2 @ 12:00 PM
PANTHERS
Monday, Nov 10 @ 7:15 PM
EAGLES
Sunday, Nov 16 @ 12:00 PM
Giants
Sunday, Nov 23 @ 12:00 PM
VIKINGS
Thursday, Nov 27 @ 12:00 PM
Lions
Sunday, Dec 7 @ 12:00 PM
BEARS
Sunday, Dec 14 @ 3:25 PM
Broncos
Friday, Dec 19 @ 11:00 PM
Bears
Friday, Dec 26 @ 11:00 PM
RAVENS
Saturday, Jan 3 @ 11:00 PM
Vikings
Recent Topics
4h / Green Bay Packers Talk / beast

4h / Green Bay Packers Talk / beast

25-Jul / Around The NFL / Mucky Tundra

25-Jul / Green Bay Packers Talk / Mucky Tundra

25-Jul / Green Bay Packers Talk / TheKanataThrilla

25-Jul / Green Bay Packers Talk / dfosterf

25-Jul / Around The NFL / beast

24-Jul / Green Bay Packers Talk / Martha Careful

24-Jul / Around The NFL / beast

24-Jul / Green Bay Packers Talk / Mucky Tundra

23-Jul / Green Bay Packers Talk / beast

23-Jul / Green Bay Packers Talk / wpr

22-Jul / Random Babble / Zero2Cool

22-Jul / Green Bay Packers Talk / Zero2Cool

22-Jul / Green Bay Packers Talk / Zero2Cool

Headlines
Copyright © 2006 - 2025 PackersHome.com™. All Rights Reserved.