Hetzner abuse message

[zvs]

stupid twats

> Date: Fri, 1 Aug 2014 10:53:54 +0200
> From: abuse@hetzner.de
> To: hosis@<redacted>
> Subject: Abuse Message [AbuseID:111E82:12]: AbuseNormal: this guy robbed me all my bitcoins
>
> Dear Mr James <redacted>,
>
> We have received information regarding spam and/or abuse from samm.engine@gmail.com.
>
> Please would you take all necessary measures to avoid this in future.
>
> Furthermore, we request that you send a short response within 24 hours to us and to the complainant. This response should contain information about how this issue could happen and what you intend to do about it.
>
> How to proceed:
>
> -   Solve the problem.
> -   Send a response to us using the following link: http://abuse.hetzner.de/statements/?token=faced2477bfcdd49eb2573f03709cb2f
> -   Send a response by email to the complainant
>
> A technician will check the data and coordinate further proceedings. If multiple complaints have been received, the situation could lead to the server being blocked.
>
> Important note:
> When replying to us, please leave the abuse ID [AbuseID:111E82:12] unchanged in the subject line.
>
>
> Best regards,
>
> Dominik Prüßner
>
> Hetzner Online AG
> Industriestr. 25
> 91710 Gunzenhausen
> Tel: +49 (9831) 505-0
> Fax: +49 (9831) 505-3
> abuse@hetzner.de
> www.hetzner.de
>
> Register Court: Registergericht Ansbach, HRB 3204
> Management Board: Dipl. Ing. (FH) Martin Hetzner
> Chairwoman of the Supervisory Board: Diana Rothhan
>
> ----- attachment -----
>
> Return-path: <samm.engine@gmail.com>
> Envelope-to: abuse@hetzner.de
> Delivery-date: Thu, 31 Jul 2014 22:55:06 +0200
> Received: from [209.85.220.51] (helo=mail-pa0-f51.google.com)
> by lms.your-server.de with esmtps (TLSv1:RC4-SHA:128)
> (Exim 4.74)
> (envelope-from <samm.engine@gmail.com>)
> id 1XCxNR-0002xa-N4
> for abuse@hetzner.de; Thu, 31 Jul 2014 22:55:06 +0200
> Received: by mail-pa0-f51.google.com with SMTP id ey11so4397394pad.10
> for <abuse@hetzner.de>; Thu, 31 Jul 2014 13:54:55 -0700 (PDT)
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> d=gmail.com; s=20120113;
> h=mime-version:date:message-id:subject:from:to:content-type;
> bh=gVampOjFFYoXcs5UyrQQ/erdsQewzSTZuGkU1e1GlYQ=;
> b=YugGlzUr6fjWh7z2UkjkTtM4wkBvXujtf+wb9qWNTMEAjd0jDq5zb7WIt/nTy2fVXE
> AdzQWbSnC+uWNfvHX6MT+bir97XGYAcygvcrh6Fr+Zw21WK0q1MWKxy4y0aIZV72WRQl
> QkWMhhiB6F/2j3/PJEG1AmwAR+5zU9XsRe7ycy77NM9i1sXX8u+VD6kOtmbOrg3+R4A2
> 4QZG9ytitN/dw+GXret0mGoKzT6Sf1L6Wr8xBEicChQ5uysvaqLxmnDWNh7Ts0ckVl7r
> mc9r//TU4XMkgF7g2MM3GBye6tV+WQ0RFqHnCObHGnFj9koygBEJTlXWpC/VZhzpAyLh
> I53Q==
> MIME-Version: 1.0
> X-Received: by 10.66.180.98 with SMTP id dn2mr766883pac.83.1406840095409; Thu,
> 31 Jul 2014 13:54:55 -0700 (PDT)
> Received: by 10.70.127.236 with HTTP; Thu, 31 Jul 2014 13:54:55 -0700 (PDT)
> Date: Thu, 31 Jul 2014 17:54:55 -0300
> Message-ID: <CAD7O+conmqOQVqRsdE-+XR+1Ou=-9=O1WKoB8kosMt=JhBkoKw@mail.gmail.com>
> Subject: this guy robbed me all my bitcoins
> From: Sammir Bruzzone <samm.engine@gmail.com>
> To: abuse@hetzner.de
> Content-Type: multipart/alternative; boundary=047d7bdc9dee253efd04ff837c4e
> X-Virus-Scanned: Clear (ClamAV 0.98.1/19250/Thu Jul 31 18:01:16 2014)
> X-Spam-Score: 0.5 (/)
> Delivered-To: he1-abuse@hetzner.de
>
> --047d7bdc9dee253efd04ff837c4e
> Content-Type: text/plain; charset=UTF-8
>
> hi this guy are robbed coins around the world, you can see how much has
> robbed in coupe hours
> https://blockchain.info/es/tx/77fb92156ab79f6c44609dd9801a7f96f85330a406fb9b4312ef6da78ccc1fd6/0
> (there is my coins)
>
> https://blockchain.info/es/ip-address/5.9.24.81?offset=100 (all the
> trasactions done)
>

[zvs]

> Date: Sat, 2 Aug 2014 20:54:08 +0200
> From: abuse@hetzner.de
> To: hosis@<redacted>
> Subject: Abuse Message [AbuseID:111E82:12]: AbuseNormal: this guy robbed me all my bitcoins
>
> Dear Mr James <redacted>,
>
> As you could not solve the problem within the given time or the maximum number of tests, the ticket will be forwarded for manual testing to our technician who will coordinate how to proceed further.
>
> If we received multiple complaints, the situation can be lead to a server blocking.
>
> Important note:
> When you reply to us, please leave the abuse ID [AbuseID:111E82:12] unchanged in the subject line.
>
> Best regards,
>
> Hetzner-Support
>
> Hetzner Online AG
> Industriestr. 25
> 91710 Gunzenhausen
> Tel: +49 (9831) 505-0
> Fax: +49 (9831) 505-3
> abuse@hetzner.de
> www.hetzner.de
>
> Register Court: Registergericht Ansbach, HRB 3204
> Management Board: Dipl. Ing. (FH) Martin Hetzner
> Chairwoman of the Supervisory Board: Diana Rothhan

[zvs]

www.nogleg.com/hetzner.txt

i've got a few more msgs from them also

have to fix it to include it all.  just going to leave everything as is, nothing to hide etc

ed: ok, all included now

[umairsaleem010]

www.nogleg.com/hetzner.txt

i've got a few more msgs from them also

have to fix it to include it all.  just going to leave everything as is, nothing to hide etc

ed: ok, all included now

why he is abusing any personal matters?

[Kabapka]

hummm what is happening?

[rarkenin]

This server's operator is not stealing your bitcoins, to the best of my knowledge, and filing complaints will either end up with nothing happening, or an innocent bitcoin relay node being taken off the net. The "relayed by" field on a blockexplorer shows what node the blockexplorer heard of the transaction from. It is very unlikely that it originated there.

If I am understanding the situation correctly, your demanding that 5.9.24.81 be taken down by their host is doing a disservice to the community, by helping set a bad precedent of relaying nodes being responsible for txns they relay, and by taking down a highly-connected bitcoind node.

[silvestar]

This server's operator is not stealing your bitcoins, to the best of my knowledge, and filing complaints will either end up with nothing happening, or an innocent bitcoin relay node being taken off the net. The "relayed by" field on a blockexplorer shows what node the blockexplorer heard of the transaction from. It is very unlikely that it originated there.

If I am understanding the situation correctly, your demanding that 5.9.24.81 be taken down by their host is doing a disservice to the community, by helping set a bad precedent of relaying nodes being responsible for txns they relay, and by taking down a highly-connected bitcoind node.

Exactly.
The IP data found on blockchain.info are most of the time just the IP of the relay as the site connects to just a few hundred nodes directly.

[NidgePeters]

Martin Hetzner is a member of a fan forum called lovelylivtyler.com as a member Marster. You can go there and search for him and see his posts about fixing server problems on there. I found this out because on the websites (previous) homepage it was said: "thanks to our member Marster Mart-(in)(Hetzn) -er for providing a (free) secondary server for the site-- the server I traced to Germany, Hetzner. lol. A bit weird.
Sorry for posting so late into a topic, but I thought this was very interesting.