Life After Comics II



Visit Base Classics - Gaming Chairs

 
--Recent Posts

Looking for comic book checklists?

Click Here!

Life After Comics II :: Comic Book Discussion :: Administration & Error Reporting :: Spam - View Topic
Topic Rating: *****
Reply Printable View
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Spam (5th Feb 14 at 11:47pm UTC)Quote Reply
Thanks Brother J for mentioning the spammer. I'd have zapped it sooner, but I was at work. I deleted the thread because I couldn't change the title of the thread after I deleted his post. I'm still learning some of the admin limitations.

It's about the third or fourth time he's slipped though.
He's a persistent one from Indonesia. I don't usually have problems from Indonesia.
I've blocked 131,072 IP addresses from Indonesia in the past few days. If he wants to be a jerk, I'm willing to block all of southeast Asia.
I don't know why these idiots keep posting. If they flood a board, it just runs off their potential customers.

http://www.nirsoft.net/countryip/id.html

He's used the same webmail service more than once. If he tries to use it again he'll be redirected to Interpol's cybercrime home page. Smiley

Defiant1
Alex
Knowledgeable Member
***

Posts: 264
Status: Offline
Joined:  

Reputation: 105%  


pm
Re: Spam (7th Feb 14 at 5:34am UTC)Quote Reply
I am not suggesting the spamming idiots are ok, but I hate the use of the word spam to describe miscreants who do shit on a public board.

Spam is tasty. I like it!
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (7th Feb 14 at 10:57am UTC)Quote Reply
 
I am not suggesting the spamming idiots are ok, but I hate the use of the word spam to describe miscreants who do shit on a public board.

Spam is tasty. I like it!


For me, it's only tasty if it's fried. That's why I fry the spam. {Cool}

Defiant1

Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (8th Feb 14 at 4:29pm UTC)Quote Reply
Yeah. This is interesting. It takes time to block 131,000 IP's, but I can keep blocking.
http://www.plotip.com/

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (12th Feb 14 at 1:05am UTC)Quote Reply
Our spammer came back, but didn't post. I deleted his account again. I broadened the scope of an earlier ban. I increased the number of IP's affected.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (12th Feb 14 at 4:29am UTC)Quote Reply
This spammer is kinda fun. He's persistent. I'm thinking about redirecting him to a web page that will kill his browser. I haven't played around with scripts like that in a long time, but this guy kinda deserves it. I probably won't because retracing his tactics is educational.

Defiant1
Alex
Knowledgeable Member
***

Posts: 264
Status: Offline
Joined:  

Reputation: 105%  


pm
Re: Spam (12th Feb 14 at 8:33am UTC)Quote Reply
This site might have useful tricks to stop spammers.

I am not an expert however, so I promise NOTHING.
http://www.toastedspam.com
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (12th Feb 14 at 6:07pm UTC)Quote Reply
I'm not seeing anything that helps. It looks more like a site to help spammers in disguise. The spammer I'm dealing with used a Russian email site that offers temporary email addresses. The site implies it is helping stop you from getting spam, but it's obvious that spammers are using it as a tool to help them spam people.

Security is a tricky business. You become most vulnerable when you trust the people that you think are on your side. Years ago I installed a freeware program that was supposed to stop hackers from installing software that remotely controlled your computer. One day I was playing with a program that lets you peek into executable files and extract pictures or other content. I peeked into that security program and found pause, play, and record buttons. None of those buttons are present when you run the program, so it became obvious that the author was remotely accessing the computers of people who installed his security program.

Defiant1
Alex
Knowledgeable Member
***

Posts: 264
Status: Offline
Joined:  

Reputation: 105%  


pm
Re: Spam (12th Feb 14 at 6:20pm UTC)Quote Reply
Jumping Jimminy
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (13th Feb 14 at 3:42am UTC)Quote Reply
Our spammer tried to visit today from a blocked IP address. He must be running out.

Defiant1
Star Brand
Veteran Member
*****

[Avatar]

Posts: 2,231
Status: Offline
Location: Phoenix
Joined:  

Reputation: 109%  


pm
Re: Spam (13th Feb 14 at 3:49pm UTC)Quote Reply
We live another day!
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (13th Feb 14 at 6:13pm UTC)Quote Reply
 
We live another day!


No visits from Indonesia today (so far).

Defiant1

Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (28th Feb 14 at 1:14am UTC)Quote Reply
Very interesting. Upon our spammer discovering that he could not register with his Indonesian IP address, he switched over to an Iranian IP address. I also started censoring groups of letters that exist in his web links, so he is unable to post click-able links in the manner which he is accustomed. He's fun to interact with. So far he's a nuisance, but it's inspiring me to be more creative.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (28th Feb 14 at 11:23pm UTC)Quote Reply
2 visits from our Indonesian/Iranian spammer and today no spam posted. His last registration was done using a temporary email address from Image.com. I wasn't sure if wildcard characters worked for blocking email addresses, but he hasn't used any email domains that I have attempted to block, so perhaps the filters are working. I've also been proactive and blocked some known domains for temporary email addresses. I grabbed all the known spam domains associated with his Iranian IP address. I'm sure there are more, but it's getting more difficult for him and the rewards are less satisfying.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (15th Mar 14 at 1:08am UTC)Quote Reply
Our spammer is relentless. He's using a google proxy to register. He registered from an Israeli IP and an Argentina IP address. He posted with a gmail account, but his links were corrupted by my filters. The only link which would work upon clicking it is/are his profile links. I haven't seen any posts from the email domains on my block lists. I've collected some good info to report him to Google. Debating now whether to block Google services or force new accounts to be approved by an admin. I don't really care. Again, I'm having fun with this chess game going back and forth. In some ways he's imaginative. In other ways he's been pretty stupid.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (15th Mar 14 at 10:53pm UTC)Quote Reply
Still playing with the spammer today. One spam account setup, no posts. I'm not entirely sure if registering an account guarantees that he can post.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (17th Mar 14 at 2:56am UTC)Quote Reply
Still collecting more data on the guy. I know the software he's using.
M247 is hosting his website.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (29th Mar 14 at 8:18pm UTC)Quote Reply
Our spammer likes to register on the board through anonymous proxies which I add one by one as he picks a new one. I have implemented a new filter which will make checking the status of his spam more difficult. He makes about 3 or 4 visits between registering new accounts. Those in-between visits are more difficult now. Also, my filters appear to be blocking him from posting on some of his visits. On others, I'm limited because it would adversely affect my regular members. My censored words and phrases are ruining his http links, so the fruit of all his work is rotten even after he posts. I will add more filters as he tries to do his work-arounds.

Defiant1
Alex
Knowledgeable Member
***

Posts: 264
Status: Offline
Joined:  

Reputation: 105%  


pm
Re: Spam (30th Mar 14 at 5:50am UTC)Quote Reply
Is there anyway you could fashion a protocol requiring new posters to post on other threads prior to starting their own? I am sure you know how better than me, just thinking...
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (30th Mar 14 at 12:27pm UTC)Quote Reply
 
Is there anyway you could fashion a protocol requiring new posters to post on other threads prior to starting their own? I am sure you know how better than me, just thinking...


There may be a way to assign all new members to restricted posting status, but if he's able to register and post, he'll do it anywhere. He doesn't care.
There is a way to require that all new memberships to get my approval before their login is accepted, but I feel it discourages new members from joining. Upon looking around at other boards hosted by this service, I see that his spam has overtaken them all or they require an admin to approve new accounts.

I would go so far as to say this guy appears to have destroyed the future and value of this domain. I would think the owners could sue the hell out of him. The software and methods he's using clearly show the intent to bypass security protections and filters. The amount of effort this guy is spending looks more like a vendetta against the site owner. Would you spend hours and hours to register one spam account that had no posts and garbled text in the profile setup? He's doing that repeatedly knowing that it'll be deleted within 2 to 12 hours. I'm pretty sure this guy is from the UK also.

Defiant1

Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (16th Apr 14 at 12:30am UTC)Quote Reply
Our attacker picked at a weak spot. Let me know if anyone's experience logging in or posting has been drastically different.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (13th May 14 at 11:00pm UTC)Quote Reply


Still plugging away at the IP blocking. Our spammer sure wastes a lot of time getting a profile setup for less than a day. Sometimes I have his accounts killed within an hour.

Defiant1

Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (17th May 14 at 2:10am UTC)Quote Reply
Hey Spammer...
Do you really know Arabic and Japanese? Pretty cool.

Ndang balio aku kangen setengah mati

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (17th May 14 at 7:49pm UTC)Quote Reply
Interesting back story on the spam we're getting.

http://en.wikipedia.org/wiki/Vance_Miller

http://blogs.mirror.co.uk/investigations/2009/04/huge-blaze-destroys-factory-of.html

Image

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (3rd Jun 15 at 10:03pm UTC)Quote Reply
The first new spam signup in a long time occurred late yesterday. The username was Indonesian words and translates to whitehair. I found that amusing. He/She/It posted from an IP address associate with a law firm in the New England states. He/She/It used a gmail account. Strange. Gmail requires a phone number for sign-up.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (28th Dec 15 at 1:23am UTC)Quote Reply
A spam flood hit at 7:18PM board time and lasted roughly 5 minutes generating 3 pages of posts in the general comics section. I'm investigating the IP now. Be patient. My power was off at home when the spam flood hit or I would've had it blocked and prevented almost as soon as it was happening. Upon rebooting my computer, I had the poster blacked within 20 minutes and the three pages of spam posts cleared within 50 minutes.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (28th Dec 15 at 1:54am UTC)Quote Reply
Upon research, the spam was posted from a Japanese IP address. Sorry Japan. I've just blocked 4,325,376 IP addresses in your country. I don't care if I have to block every IP address in Asia. I speak English.

The spammer wanted to check his work..

Visitor ...4-2-0-cust204.2-4.cable.virginmedia.com
IP Address 86.6.128.205
Date 27 Dec, Sun, 19:47:02
Net SpeedCable/DSL
Organization Virgin Media
Browser Chrome 47
Continent Europe
Operating System Mac OS X
Country United Kingdom
Screen Resolution1280x1024
State / Region London, City of
Screen Color 24 Bit (16.7M)
City London
Javascript Enabled

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (28th Dec 15 at 2:36pm UTC)Quote Reply
Our spammer made a return visit at 2:41 AM EST on 12/28/2015. He was blocked.
I get the feeling that the spam here is a sabotage effort to the company by someone in London. Maybe a business partner?
I will continue to monitor this jerk.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (28th Dec 15 at 5:30pm UTC)Quote Reply
About 40% of my traffic overnight was from Amazon. I thought that was interesting. Another 30% was malicious traffic. Maybe 50% malicious if you factor Russia, Ukraine, and South Korea.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (26th Feb 16 at 11:42pm UTC)Quote Reply
I got a spam email that said:

Quote:
Scanned Invoice

Dear defiant1 ,

Scanned Invoice in Microsoft Word format has been attached to this email.

Thank you!

Oliver Wolf
Sales Manager


I wrote back:
Quote:
Oliver,

Do me a favor. Stick your finger in your ass. Twist it to the left and right. Then pull it out and suck on it. If you want, you can sniff it first.


Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (27th Feb 16 at 12:00am UTC)Quote Reply
I got a spam email that said:
Quote:

Angel Lo writes:

> Hello,
> Please contact me for a transaction.
> Angel Lo


Hmmm! Angel Lo... That sounds like Angelo.
Regardless, my reply was:
Quote:
I fucked your mother in the ass while your dad jerked off in the corner. He wiped all the ejaculate into his hair and shouted out "I'm a melted ice cream cone."

They are concerned that you stay on the computer too much and smell like a mix of shit and garlic. They also want me to tell you that frozen tampons are not the same as a Popsicle. They asked if I could get you to quit sucking on them.


Follow-up: The email bounced back. {Sad}


Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (27th Feb 16 at 12:18am UTC)Quote Reply
I got a spam that said:
Quote:
This Is For Your Urgent Attention!

Electronic Fund Transfer of US$10,500,000.00

We write to notify you that the International Monetary Fund (IMF) in
conjunction with HMR & Customs has instructed us to release a total sum of
(US$10,500,000.00) to you through Electronic wire transfer as your recovered
inheritance fund.
Based on this mandate, you are required to fill the enclosed Transfer
Application Form and return back to us quickly for us to commence processing
the rekease of your recovered inheritance principal sum of US$10,500,000.00 via
electronic wire transfer as instructed by IMF and HMR & Customs.
For: TSB Bank Plc, (UK).

Thank you,

Chief Finance Officer
TSB Bank Plc, (UK)
Southwark Park,
London SE16 3TP, UK


I started replying to some of these types of emails. I went online and found a picture of a turd. I downloaded it and I opened up Irfanview. Using Irfanview, I created a slideshow with the one image. I exported it as a ".exe" file. I named the file "Financial_Data.exe". I replied back with the following text and attached the ".exe" file:


Quote:
I am concerned for security, so the attached file will verify the GUID number on your computer before revealing the transfer information you request. It will match it to the GUID number embedded in the email you sent.
This is the only way I can assure that my information is going to the correct recipient.

The password to the data file is: GU!!@LI1p
For security and safe file access, reference the SHA-2 [512] Hash Value for the
attachment:
c0bf13e15de418ba18223c861d2b0e667d2b6c142df8849c7d885ef202fc170f1226dd5e006aa45b703a27f2a7969c3a8d70d3038a46f15dce871805c28da5e9

Thank you for the email.


This tactic seems to shut up most spammers. I was having the same spammers email me more than once.

Defiant1
Brother J
Veteran Member
*****

Posts: 2,144
Status: Offline
Joined:  

Reputation: 110%  


pm
Re: Spam (27th Feb 16 at 2:18pm UTC)Quote Reply
{Grin}

Good to see you having some fun with these jackasses.
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (27th Feb 16 at 4:30pm UTC)Quote Reply
Sometimes when these spammers try telling me they have money waiting on me, I reply with something like this:

Quote:
I am rich and I do not need your money. You should send this money to some poor idiot in Africa. Those people are pathetic and less than human. They are always looking for someone to pay their way through life. I'm sure they are crying for handouts. I'm rich though. I piss in a 24K Gold toilet and my helicopter takes me to work every day.


The text will vary, but the general feelings evoked by my reply is usually about the same.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (15th Jul 16 at 1:57am UTC)Quote Reply
Today I got a couple of spam emails at a spam bait account. I took the contact info from one spam message (O l g a) and replied to the other spam message from S u z a n saying I was very interested in finding out more. I posed as O l g a and asked S u z a n to write me at my Russian email address (O l g a's email address) .

The idea of me connecting spammers to each other just seems like the right thing to do.

Defiant1
Defiant1
Administrator
*****

[Avatar]

Posts: 17,678
Status: Offline
Joined:  

Reputation: 100%  


pm
Re: Spam (25th Jul 17 at 11:45pm UTC)Quote Reply
The board got another spam post. Don't try to access my board from Poland. I blocked the IP range from 94.254.192.0 - 94.254.255.255 which is a shitload of IP addresses.

195.181.166.86 was a Denmark visit a few hours later. I may block the IP range around that user too. The Poland IP could easily be an anonymous proxy and the real spammer could have checked up on his her work from another anonymous proxy in Denmark. I suspect that the real source of the spam is from the UK.

Defiant1
 Reply Printable View

Close
COMIC CHECKLISTS

--Recent Posts

Looking for comic book checklists?

Click Here!



eXTReMe Tracker

Learn About Cookies!
All times are GMT-4 :: The current time is 9:22am
Page generated in 3.0872 seconds
Purchase Ad-Free Credits
This Forum is Powered By vForums (v2.4)
Create a Forum for Free | Find Forums