Twitch unleashes scorched-earth attack to unveil malicious spambot creator


AutoMod tool to prevent such attacks, involved sexual harassment and the solicitation of child sex.

Twitch, which bills itself as the “leading video platform and community for gamers,” says it has traced the attacks to, which offers spambot attacks for sale. From there, Twitch investigators believe the perpetrator is associated with the e-mail address of and a Shaw Communications IP address of located in Coquitlam, British Columbia. In addition, Twitch thinks a PayPal account associated with the e-mail is connected, according to court documents.

Twitch, in a petition (PDF) to the British Columbia courts last week, said it “is unable to uncover additional identifying information.” The site wants the court to order the release of a massive amount of information toward that end.

For starters, Twitch wants Shaw to produce any identifying information about the customer associated with the IP address. Twitch also wants an order commanding PayPal to hand over identifying information “of the customer associated with,, or”

As for CloudFlare, which is the server host of, Twitch wants it to unmask identifying information associated with the domain. Twitch is making the same request to WhoisPrivacy and WhoisGuard to unveil ownership of the and domains.

What’s more, Twitch claims that all of these companies “are involved in the Spambot Attacks,” including WhoisPrivacy and WhoisGuard for “providing a means for the perpetrator to don the cloak of anonymity to undertake this harmful conduct.”

Twitch said it spent hundreds of hours investigating the attacks.

In the course of the Investigation, Twitch also determined that the attacker broadcast himself working on his bot software. Very shortly after the broadcast, was updated to offer that software. The attacker was associated with a Shaw IP address, namely This IP address is located in Coquitlam, BC, Canada, and it is believed that the perpetrator of the Spambot Attacks is located in the same place as this IP address.

The PayPal account associated with uses the e-mail address

Among other reasons, Twitch says it’s entitled to the information because the person behind the spambots is breaching the company’s terms of service.

Powered by WPeMatico