Hostmonster And Bluehost Spammer
Dec 26, 2008Hostmonster and Bluehost Spammer
What is the relationship between Hostmonster and Bluehost?
One spammer has a domain with an NS1.HOSTMONSTER.COM but their IP belongs to Bluehost.
Hostmonster and Bluehost Spammer
What is the relationship between Hostmonster and Bluehost?
One spammer has a domain with an NS1.HOSTMONSTER.COM but their IP belongs to Bluehost.
Hostmonster VS Bluehost
Whats different about the two. are they the same company. it looks like it. if so which would you chose?
I noticed that HostGator, HostMonster, and BlueHost are very popular, but I would really like to know which is better overall. I plan on running vBulletin, and when it gets more traffic I will upgrade to a VPS.
Based on your experiences, which one should I go with?
I'm gonna start an online affiliate biz and am looking for a good reliable and cheap hosting service. I came up with these. Now I'm finding it difficult to decide which one to go with.
And if you know of a better and cheaper service,
I signup bluehost early this month, i am very satisfied with bluehost hosting.
Bluehost established since 1996, and hosted more than 250,000 sites.
I had no problem of any until now, FTP access is reliable and fast, website is loaded fast, and no downtime detected yet.I also find their bluehostforum.com very useful in getting helps.
Bluehost $6.95 plan allow me to host up to 6 domains My domain i mentioning here is:
Time to time i perform speed test using hostpulse.com online test,
the result can be view at here:
anyone had experienced with bluehost are welcome to post here
i frequently read these forums for offers/to stay up to date with web hosting in general.
I never felt the need to register until now.
I have experienced what i believe to be sub-standard service from my paid hosting.
Here's what happened:
I got up, as usual to check my emails and i was hit with the following email
Your web hosting account for xxxxxxxx has been deactivated (reason: terms of service violation).
Although your web site has been disabled, your data may still be available for
up to 15 days, after which it will be deleted.
If you feel this deactivation is in error, please contact customer support as
soon as possible.
Thank you,
HostMonster.Com Support
xxxxxx (couldn't have url's in this post)
For support go to xxxxxx
Toll-Free: (866) 573-4678
I checked my domain, it returned nothing.
I don't believe that i have committed any terms of service violation and i am quite peeved off with the results.
My account was just suddenly deactivated with no warning, my domain (also registered via them) no longer works (i have no way of telling current visitors whats happened, the domain just wont work) and i have 15 days to contact them (via email) as phone is not an option as i live out of the US.
Not to mention after all that, i wouldn't review host-monster very greatly at all for speed, at first it was great but it just kept degrading from there until it was just extremely poor.
One thing they did do right was refund me (but i bet it doesn't include the domain) so ill be taking that money and my business else ware.
HostMonster or Hostgator whichone is better?
And they are offering unlimited domains...what does this mean actually?
In general I have been happy with hostmonster. Mostly because their support staff is polite and are willing to help. However, I do question the server reliability at times.
Lately when a customer registers at my forum or gallery, the customer does not get the activation email 4 or 5 hours later. Today, I tested it and sure enough, the activation email took 4 or 5 hours before it came.
I talked to tech support and they acknowledged they had over 250,000 emails backed up. That there are too many connections with hotmail accounts and that was causing a problem as well.
A customer having to wait 4 or 5 hours before they receive an activation email seems a bit long.
I'm not sure if hostmonster is going to do anything to prevent this from happening in the future, but for now they seem to be satisfied with the emails backing up on the server and the time it takes for them to be sent. They indicated this does not happen often, but I really don't know since I don't send myself emails on a daily basis.
I would rate email as one of the most important functions there is for a webmaster. Otherwise, hostmonster staff has been responsive and my hope is this will not be a constant problem.
If there are any other hostmonster webmasters out there, I would appreciate your feedback. You may have to send yourself a registration or a email to test it.
I'm come here to complain the hosting company hostmonster which is the very bad hosing provide company. Until now,
I have contact with them for 36 hours, and my website is still down.
the first 12 hours, the server is down. after that, they are installing sever packages on it. after that, they did
not do any work on it. they not recover my data, my website's content is gone!
I contact them many times, some time they reply me, and tell me server will be back up momentarily.
I'm very tired on this problem. I'm charge an comerece site, now some customers is going to refund from me, they
thought me as a cheater.
If you see my post, I suggest you to choose the other web hosting. Stay away from hostmonster, do not harm
yourself. Bluthost.com is also the same hosting company. so, please be clever.
here is our email I contact with Hostmonster:
Take care, this mail is replied from bluehost.
dateFri, May 22, 2009 at 9:53 AM
subject[ #318137]: Not Found
mailed-byhelpdesk.hostmonster.com
Dear Customer,
Currently the admin of your server is swapping new drives in to better improve system performance. Your site will
be back up momentarily.
Thank You,
Jonathan L. S.
Support Level 1
BlueHost.com
888.401.4678
dateFri, May 22, 2009 at 11:59 AM
subject[ #318137]: Not Found
mailed-byhelpdesk.hostmonster.com
Dear Customer,
We apologize for the trouble you've been having. Our administrators are working as fast as they can to get the
server back up on line.
Again I apologize for the wait.
Thank You,
EricJ
L1 Support
Hostmonster.com
866-573-4678
dateSat, May 23, 2009 at 2:10 PM
subject[ #318137]: Not Found
mailed-byhelpdesk.hostmonster.com
hide details 2:10 PM (12 hours ago)
Dear Customer,
There is no eta on the server at this time but please bear with us as we get it back on line.
Thanks for contacting us.
We apologize for the trouble you've been having,
Thanks
JChristensen
Level 1 Support Engineer
Hostmonster.com
(866) 573-HOST
dateSat, May 23, 2009 at 2:30 PM
subject[ #318137]: Not Found
mailed-byhelpdesk.hostmonster.com
We apologize for the inconvenience, but we have encountered some unexpected problems with the server. We currently
have no ETA, but I would expect that it won't be for maybe another 12 hours. Our SysAdmins have been working on
the server round the clock to get it back up as soon as possible. When it is back up, your files should be back as
I have a shared host with them for a few months which the disk usage for home/backup is usually around 85-95%. Right now I am experiencing very slow download speed. What about yours?
Server Load 2.92 (8 cpus)
Memory Used 42.6 %
Swap Used 0.01 %
Disk /dev/sdc1 (/home) 91 %
Disk /dev/sdd1 (/backup) 90 %
Disk /dev/sde1 (/backup/cpbackup/weekly) 43 %
Disk /dev/ram0 (/ramdisk) 24 %
Disk /dev/sdb1 (/) 22 %
I'm down to only 2 web hosting plan that I want to join and I wonder if anyone is using any one of them.
It seems siteground has a better plan(more space, traffic bandwidth, other feature) but hostmonster allow ssh access and I think that maybe good for installing our own software.
I also interested to see if anyone uses there free shopping cart software like osCommerce, zencart and cubecart.
Anyone has any trouble with them in PHP5 environment?
I have recently been receiving reports from AOL's feedback loop that my server is sending out spam. I have checked the whole server, but cannot find anything strange.
There are some strange things with these feedback reports. I'll post a few lines below (i crossed out my domain with xxx):
Quote:
Received: from andersenreesel by holderem.xxx.biz with local (Exim 4.23)
Received: (qmail 64859 invoked by uid 24901)
Received: from janislanhami by xxx.biz with local (Exim 4.26)
Received: (qmail 43829 invoked by uid 147); 08 Apr 2009 21:22:39 -0000
Received: from raphaelpinkertone by standei.xxx.biz with local (Exim 4.23)
Received: from imanoldelphine by dispatched.xxx.biz with local (Exim 4.23)
Received: from conrado by hostic.xxx.biz with local (Exim 4.23)
The first issue i have is with the subdomains, like "dispatched", "standei", "hostic", etc. These subdomains do not exist on my system. Also, my server does not run the exim MTA.
Another issue i have is the "invoked by uid" statements with uid's 147 and 24901. These UID's do not exist on my system. The passwd file uid's go to around 110.
Apart from these strange things, the IP that is listed in the upper part of the headers:
Quote:
Received: from xxx.biz (xxx.biz [85.xxx.xxx.xxx])
The domain and IP address is correct there, which should indicate that the spam was sent from my system. Or wasn't it?
to stop the IIS SMTP Spammers how you find the culprit spammers site I tried the smtp monitor but not avail.
View 10 Replies View RelatedI host a vBulletin forum on a US server. I've been getting a lot of signups from one particular spammer, wanting to post about gold harvesting for WoW. I've blocked his IP's, however he keeps using proxies.
He constantly signs up under the name "Array"... Is there a way I can block him for good? I can't moderate user sign-ups, as I'm mostly away from my computer and can't moderate them all the time.
None of domain in this email is hosted with us but there are thousand of emails day some body blast in our queue. We are failed to detect. We have enabled phpnobody spam logging but failed to get track of this user.
how to catch this spammer. There are no clues of to catch him.
[root@sm4 ~]# /root/qmHandle -m3261696
--------------
MESSAGE NUMBER 3261696
--------------
Received: (qmail 7056 invoked from network); 16 May 2007 05:34:18 -0500
Received: from axicom.net (HELO User) (67.112.176.250)
by 14.32.5446.static.theplanet.com with SMTP; 16 May 2007 05:34:18 -0500
Reply-To: <notice@boamilitary.com>
From: "Bank of America Military Bank"<notice@boamilitary.com>
Subject: Notification from Bank of America Military Bank
Date: Wed, 16 May 2007 04:44:51 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
<title>Military Bank Online and Bill Payer Deactivation</title>
<FONT face=Arial size=2> </FONT>
<DIV>
<p><font face="Arial" size="2" color="#FFFFFF"> ...<img border="0" src="http://power-web43.net/images/boa.bmp"></font></p>
<p><font face="Arial" size="2"> Dear
Member,</font></p>
<DIV><font face="Arial" size="2"> This is your official notification
from Bank of America Military Bank that the service(s) listed below<BR>
will be deactivated and deleted if not renewed immediately. Previous
notifications have<BR>
been sent to the Billing Contact assigned to this account. As
the Primary Contact, you<BR>
must renew the service(s) listed below or it will be deactivated
and deleted. <BR>
<BR>
<BR>
<b> <a target="_blank" href="http://moremail.epicalliance.com/america.php"><FONT color=#003399>Renew
Now</FONT></a> </b>your <b>Military Bank Online </b>and<b> Bill Payer </b>
services.</font></DIV>
<DIV><font face="Arial" size="2"> </font></DIV>
<DIV><font face="Arial" size="2"><BR>
SERVICE: <b>Military Bank Online </b>and<b> Bill Payer</b>.<BR>
EXPIRATION: <b>May, 18 2007</b></font></DIV>
<DIV><font face="Arial" size="2"> </font></DIV>
<DIV><font face="Arial" size="2"><BR>
Thank you for using Military Bank Online.
<br> We appreciate your business and the opportunity to serve you.</font></DIV>
<DIV><font face="Arial" size="2"> </font></DIV>
<DIV><font face="Arial" size="2"> Bank of America Military Bank
Member Service</font></DIV>
<DIV><font face="Arial" size="2"> </font></DIV>
<DIV><font face="Arial" size="2"><BR>
*****************************************************************************<BR>
IMPORTANT MEMBER SERVICE INFORMATION<BR>
*****************************************************************************</font></DIV>
<DIV><font face="Arial" size="2"> </font></DIV>
<DIV><font face="Arial" size="2"> Please do not reply to this message.
For any inquiries, contact Member Service.</font></DIV>
<DIV><font face="Arial" size="2"> </font></DIV>
<DIV><font face="Arial" size="2"> <BR>
Copyright © 2007 Bank of America Corporation. All rights reserved.</font></DIV>
</DIV>
None of domain in this email is hosted with us but there are thousand of emails day some body blast in our queue. We are failed to detect. We have enabled phpnobody spam logging but failed to get track of this user.
how to catch this spammer. There are no clues of to catch him.
How can I found the spammer on our server?
one of our customer trying to send mail with a PHP file! but I cannot found this account, can you help me to found this user?
Wanted to share a bit (read vent a bit if you're cynical ).
Just got the following e-mail from hostmonster.
-----------
Dear Dale:
Your web hosting account for ibycus.com has been deactivated (reason: site causing performance problems).
Although your web site has been disabled, your data may still be available for up to 15 days, after which it will be deleted.
If you feel this deactivation is in error, please contact customer support as soon as possible.
Thank you,
Support
For support go to
Toll-Free: (866) 573-4678
-------------
Apparently, there are two files on my website that are being hit quite a bit, and causing the server to slow down. (I admit, its a busy site, and the files are very big).
The files aren't new there, and neither is the traffic, but the plug was pulled with no warning what so ever, and no offer of remediation on their part beyond refunding the remaining portion of my contract (I would hope so too!).
I can understand that they may not be able to continue to host my site due to the volume of traffic it generates, but they really could have handled this much better.
I just want to move from hostmonster to dedicated server
the problem is the database(vbulletin) size about 1 GB
when I try make backup for it through ssh it arraive to 723 MB then stop becuase it have highload on hostmonster system they not allowed more than 20% cpu
I take to them they tell me can’t do any thing I please them make backup but they say we can’t do any thing for you and I’m sure they can log by root and do it with ssh on less than 1 minute
how can I make backup or if there r way to move the database to the new server
2 day ago and I can’t move to the new server
HostMonster just updated its control panel (CPanel) to the latest version.
Also provides some ad coupons, such as: Google, Yahoo, MS adCenter, etc.
Now create a new website is more flexible. You can change the directory.
But it still has limitation. After you create, you can't change it.
I just setup my own LAMP server.
It is only used for my own domains so I want to be able to watch all mail that gets sent from my server, via php or otherwise.
Basically I just want to be able to personally monitor what mail is getting sent from my server so that I can watch for possible spammer activity.
I am using postfix and webmin.. I have sendmail installed to, but I don't think it is getting used..
I guess theres got to be a log somwhere... but I am not sure where it is?
I have postfix set to CC me of all mail that gets sent but, it doesnt seem to work all the time.. just for certain things..
Now first I will say I have NO idea how such spamming works, how a punk can get on my server and sent emails out.
I have had a team to look at it they also did something, but now it happens again for the 5th time, what can i do, are there any software or tools one can use like a antivirus to check the server and how can I avoid such sh..
How i can stop Spammer from my server?
my control panel is CPANEL !
what software i must install?
i have the following inside: /usr/local/apache/domlogs
worldlanguage.com-smtpbytes_log
deafper4mer.org-smtpbytes_log missingchildrenblog.com-smtpbytes_log worldlpgas.com-smtpbytes_log
deathball.net-smtpbytes_log missingkids.com-smtpbytes_log worldnet.att.net-smtpbytes_log
deberrym.freeserve.co.uk-smtpbytes_log mistressj.com-smtpbytes_log worldswithoutend.com-smtpbytes_log
djchass.com-smtpbytes_log ms9.hinet.net-smtpbytes_log zollnergarmisch.de-smtpbytes_log
djessentials.com-smtpbytes_log msa.hinet.net-smtpbytes_log zomtide.com-smtpbytes_log
djgavin.com-smtpbytes_log msn.com-smtpbytes_log zoominfo.com-smtpbytes_log
djlw.com-smtpbytes_log mtaconsulting.com-smtpbytes_log ztree.com-smtpbytes_log
djphear.com-smtpbytes_log mtco.com-smtpbytes_log zuneluv.com-smtpbytes_log
dkburnap.com-smtpbytes_log mtdemocrat.com-smtpbytes_log zwergenland-sterkrade.de-smtpbytes_log
dmans.com-smtpbytes_log mtu-net.ru-smtpbytes_log zyit.com-smtpbytes_log
dmatrans.com-smtpbytes_log mulberrycorner.com-smtpbytes_log zymico.com-smtpbytes_log
dmoz.org-smtpbytes_log multexinvestornetwork.com-smtpbytes_log zytor.com-smtpbytes_log
dncinc.com-smtpbytes_log multimedia.cl-smtpbytes_log zzangbbori.com-smtpbytes_log
dnpeters.com-smtpbytes_log mundosofa.com-smtpbytes_log
doble.com-smtpbytes_log murphyspage.com-smtpbytes_log
all this domains are NOT hosted on my server (there are a lot more of this entries.)
I has ben told that this domain namens are used while spaming.
Is there any way to idetify what acocunt has ben hacked and sends spaming via pop3 or apache.
I note a lot of pop3 connections fron russian, china vietnam and high cpu load this happens.
(nobody sernder has already ben dsable il WHM tweaks)
I just found posts every a few days from an apparent spammer "sagepowder" in my forum (not so popular and has nothing to do with skiing). The subject is always "new here".
The content is "Any snowboarders or skiiers on this forum? I am planning a trip to BC on a snowboarding trip next week" or "I am new here, just saying hello".
I checked the apache log and it doesn't seem to be a robot script posting this. i.e. it browses to the index page, picked up my hidden field that blocks robots, post new topic, the go back to index page.
What surprised me is that when I google this guy, I got 108,000 results with the same content on tons of forums! All with total post number of 1 or 2 on each forum:
[url]
How did he do this? How to block this?
I recently moved web services for one of my hosted domains (let's call it example.com) from one server (let's call it .org) to another server (let's call it .net) example.com has been on .org for about 5 years. .org handled all example.com web services, and all email. I recently updated example.com's DNS record to point www.example.com and example.com to the .net server. I didn't change the MX record or mail.example.com to point to .net. Mail continues to be delivered normally to example.com on the .org server.
Except now spammers are hitting the .net server, e.g.
Sep 26 09:26:03 host postfix/smtpd[15098]: NOQUEUE: reject: RCPT from unknown[12.171.150.130]: 554 5.7.1 <AutumnvagaryMontano@example.com>: Relay access denied; from=<> to=AutumnvagaryMontano@example.com proto=SMTP helo=<mdgen-print.marylandgeneral.org>
Is it normal practice for spammers to send dictionary attack based spam to a domain's server that doesn't even handle email? All the spam coming is clearly just random email addresses not based on anything that exsists at the domain, and most of the addresses are so very random I can't imagine they exsist anywhere.
For about a month or so now I have a domain I host under serious attack from what I think are spammers. It's a wordpress site, and they are getting big numbers of POST requests to the WordPress comments file, e.g.
Code:
POST /wp-comments-post.php HTTP/1.1
It's a well distributed attack, and I'm doing well with some scripts I wrote to block the requests to the wp-comments-post.php file. The real comment file has long since been moved, so any POST to the file gets firewalled. It's several thousand IPs from all over the place.
I don't believe it's a malicious attempt to bring the site down, but I'm guessing it's a blog comment spammer that has something set wrong and he's pounding this site to death by accident. I could be wrong on that though.
Anyone have any good defense scripts to share?
in our case, HACKER no DELETE files...
He send Spam by POST to file.php
We have APACHE_suexec + PHP in SAFE_MODE=true;
Server is down 3 times in < of 24 hours by this motive.
In this moment We have more of 20.000 mails to send to Bellsouth and Yahoo...
We know this becouse we run
exim -bpr | exiqsumm -c | head
Count Volume Oldest Newest Domain
----- ------ ------ ------ ------
26797 66MB 7h 5m yahoo.com
3260 615KB 3h 3h bellsouth.net
1253 540KB 9h 2h webtv.net
1134 329KB 3h 2h excite.com
926 261KB 5h 3h optonline.net
226 258KB 3h 3h sbcglobal.net
----------------------------------------------
Wath we can do?
How we can stoped this mails?
How we can STOPED FOREVER to this spammer?
My System is a Windows Server 2012 r2 with Plesk 12.
On this system i have installed MailEnable as my Mailserver.
So at the moment something is spam on this server, but i can't find out who is it.
Received: from win02.XXXXXX([MY IP] helo=WIN02.home)
(envelope-from <root@XXXXXXXX>)
id 1XlyHP-00038b-R0
for x; Wed, 05 Nov 2014 11:57:37 +0100
[Code].....
The header is meaning that the spams come from root@, but there is no account with the name root@...
On linux it is so easy to find the spam with qmail or postfix. Why mailenable it is so difficult
I had two websites on hostmonster for over a year and last weekend they migrated my site without a proper back up and completed DELETED both of my entire websites along with 900 other websites. If you have had problems with hostmonster in the last three years, please get in contact with me to join a class action law suit against them. They are claiming zero responsibility for the horrific act. Not only do they expect us to rebuild our websites at our expense they are expecting us to be o.k. with the loss of revenue this has also created. Hostmonster generates millions of dollars each month in revenue. Corporate america - enough of your passing the buck. It's time for us to stick together and make they pay for their mistakes. Please contact me to join the class action lawsuit.
View 14 Replies View RelatedSometimes my clients install untrusted scripts to their account what causes spamming, because these scripts sending high number of spam emails. Is there an automatically way to disable php mail function, or disable the account temporary?
[URL]
I'm looking to get hosting and domain names.
Does anyone know anything bluehost.com, or are there any other hosts you'd recommend? (I don't need anything too expensive)