Spambot accounts
View previous topic | View next topic >
Post new topic Reply to topic
M.A.I.L. Forum Index -> Admin Discussion
   
Author Message

Joined: February 29, 2004
Posts: 1898
Submissions: 8
Location: Behind Enemy Lines in Marxistchussetts

Spambot accounts
Reply with quote
Posted on Wed Apr 12, 2006 9:02 pm
Link to Post: Link to Post

As most of us have seen lately, there has been an infestation of spambots in the guestbook. There have also been several spam threads created recently. These threads, naturally, have to be attached to accounts. There now seem to be at least several accounts that have been set up simply to exist as accounts with web links back to spambot central.

Here?s a brief list from the first page of Updates:

bachelordegree
ashleyfurniture
applycardcredit
addictinggame
IKEAGiftCenter

I don?t have account-stomping power here (probably a good thing?) or I?d take care of this m?self. That said, if someone who does would look into this I?d be much obliged. No rush. I just wanted to point them out.


"Do not go where the path may lead,
go instead where there is no path and leave a trail."
Ralph Waldo Emerson

My blog: The (New) Eclectic Dragonfly. Some of my stuff at CafePress!

Joined: February 15, 2002
Posts: 879
Submissions: 45
Location: Virginia Beach, VA

Reply with quote
Posted on Thu Apr 13, 2006 11:16 am
Link to Post: Link to Post

Add

conferencingweb

To that...


The whole problem with the world is that fools and fanatics are always so certain of themselves, and wiser people so full of doubts.--Bertrand Russell

Maille Code V2.0 T6.4 R5.4 E=o.o Fj6.2 MAl.a W$m C$b G0.5-2.6 I1.6-9.5 N20.26 Pn Dacjs Xa25g13w5 S00 CCu

Joined: February 29, 2004
Posts: 1898
Submissions: 8
Location: Behind Enemy Lines in Marxistchussetts

Reply with quote
Posted on Thu Apr 13, 2006 1:28 pm
Link to Post: Link to Post

A couple more:

phentermine
careertraining


"Do not go where the path may lead,
go instead where there is no path and leave a trail."
Ralph Waldo Emerson

My blog: The (New) Eclectic Dragonfly. Some of my stuff at CafePress!

Joined: April 15, 2002
Posts: 1819
Submissions: 1
Location: Calgary, AB. Canada.

Reply with quote
Posted on Thu Apr 13, 2006 3:30 pm
Link to Post: Link to Post

Assuming these won't just go away on their own...

Do we have a way of stopping this?

Maybe add to Blaise's one-man-army list, but perhaps we need one of those graphical word things you have to punch in.

Or, ban the IP they're coming from, if they're all coming from the same one.

Joined: February 29, 2004
Posts: 1898
Submissions: 8
Location: Behind Enemy Lines in Marxistchussetts

Reply with quote
Posted on Fri Apr 14, 2006 3:15 am
Link to Post: Link to Post

"Again?! That trick never works!"

Meomao1

This one's a casino.

Edit: I haven?t followed the link, so I?m not sure about this one:

ryanakca


"Do not go where the path may lead,
go instead where there is no path and leave a trail."
Ralph Waldo Emerson

My blog: The (New) Eclectic Dragonfly. Some of my stuff at CafePress!

Joined: September 26, 2002
Posts: 509
Submissions: 14

Reply with quote
Posted on Fri Apr 14, 2006 11:22 pm
Link to Post: Link to Post

Cynake wrote:
Maybe add to Blaise's one-man-army list, but perhaps we need one of those graphical word things you have to punch in.

There's a MOD for this on phpbb.com, just needs someone with ftp access to install the patches (I didn't get the password last time it changed, so that person's not me)
Cynake wrote:
Or, ban the IP they're coming from, if they're all coming from the same one.

That trick never works.


"If 50 million people say a foolish thing, it is still a foolish thing." ? Anatole France

Joined: February 29, 2004
Posts: 1898
Submissions: 8
Location: Behind Enemy Lines in Marxistchussetts

Reply with quote
Posted on Sat Apr 15, 2006 2:19 pm
Link to Post: Link to Post

As they come up I'll just keep adding to this list. Just so we have them all in one place. At least all from when I started noticing...

I'm not sure about this one, but the URL makes me suspicious:

Dogergy

Edit: 'nother suspicious looking one: frider


"Do not go where the path may lead,
go instead where there is no path and leave a trail."
Ralph Waldo Emerson

My blog: The (New) Eclectic Dragonfly. Some of my stuff at CafePress!

Joined: February 29, 2004
Posts: 1898
Submissions: 8
Location: Behind Enemy Lines in Marxistchussetts

Reply with quote
Posted on Fri Apr 21, 2006 12:41 pm
Link to Post: Link to Post

googler is a new account that posted a thread with a pornographic picture and a link to a virus. This one needs special attention for an account stomping, IMHO.

Thanx in advance.


"Do not go where the path may lead,
go instead where there is no path and leave a trail."
Ralph Waldo Emerson

My blog: The (New) Eclectic Dragonfly. Some of my stuff at CafePress!

Joined: November 20, 2003
Posts: 2561
Submissions: 77
Location: Northbrook, IL

Reply with quote
Posted on Fri Apr 21, 2006 2:27 pm
Link to Post: Link to Post

wow now you know that wasn't a commercially operated bot. just some idiot trying to cause trouble.

Joined: February 29, 2004
Posts: 1898
Submissions: 8
Location: Behind Enemy Lines in Marxistchussetts

Consolidaded List
Reply with quote
Posted on Fri Apr 21, 2006 5:14 pm || Last edited by HerrBGone on Thu Jun 15, 2006 12:59 pm; edited 65 times in total
Link to Post: Link to Post

I think I'll just keep adding the questionable ones to this list as I find them. Feel free to edit/add to this post to keep all of the problem accounts in on neat pile for whoever (Blaise?) will need to deal with this. If somebody wants to check on them and edit my post to say Legit or Boot for each I'd greatly appreciate it. Please do not remove names from the list even if they turn out to be legit. Please instead mark them as legit. This way they won?t keep popping back onto the list only to be removed.

Again, no rush.
--------
New consolidated list:

Known bot accounts:

bachelordegree
ashleyfurniture
applycardcredit
addictinggame
IKEAGiftCenter
conferencingweb
phentermine
careertraining
Meomao1
alprazolam
sanderino
Bilbo Mayz
xanax
Allleeexxx
Portman7
musicaolmusic
Lapaza_196x
musicman
Pokerman3
poyco21
gostar_baiter
FanMmp3
TomSpenda - been in the list for a while and just posted spam in the boards 5/7/6
sanamedusa
mycanmed - another one posting spam in the boards
meankoil - another one posting spam in the boards
mixedance2002
belonger
rlegalx - another one posting spam in the boards
Coat10549
ValentinoSSSss
cheat-casino
StantonWariorist
PornoVideoFree
exptoy
Kraven01111
mariomosas
Simonek
prozac
mavbv4d
Lusis Backwood
jomanda
bobby_smollet
casinogratis
ProGambl12
abcd5674
Clarkjones - another one posting spam in the boards - in every forum! (I stomped what I could...)
Cokacalas
Porno-Video-Free2
onlinegambling
ceo4less
ann31_85
John109121092
Lusis Backwood JR
fenissen
acne - another one posting spam in the boards. First one to post a second time.
nrandon10921
MrMcManaman
pornofree
Donalda1as
Female Sexual Enhancement
diplomrus
Linen N Thingscom
icqrunforum
Sketch_son
AzzaroBork
dooho This one posted a thread of random named links in the articles section
marge This one also posted a thread of random named links in the articles section
getfunhere2008
JiggerLova
Starwarrior
1_emoneyexchange_1 may be a phishing scam
Farmatseft666
Best Stock To Invest In
AlexCops
Trinity Fillsen
trefeda
ditecom This one also posted a thread of unnamed links in the articles section
In Jail Kim Lil The pattern's not the same, but the link looks spamish.
viagra-shop
freller
Latest news about Ultram euphoria
Mortgage Refinance
linfore
MikitsuroNa
GopisMimra Looks like they're morphing their script slightly to alter the look. This time they changed the account name from the 'real name' and 'from' line.

Suspected bot accounts:

Dogergy
frider
anime1
2pacnew
3manxgo
bottle_gym
493J
Rulez666
killerbee
leggera2
Syndia
LonelyK
beasan
leggera1
Loponosik
Against the warz
AlexCoppas
Trisha
alfa_romeo_0007
german
Ghjkljkljkl
looq-eu
bennybcn
Azzaro Bork
News Processing
Meat Smoked
Skorobogajev I. May not be, but 'feels odd.'
Skyquake URL goes to a 'free on line game'
Old Woman

Troll/Virus/posted porn in the boards:

googler - strongest possible sanction requested ASAP

Phishing Scam

Citizen bank auto loan Let's stomp them ASAP.

What's up with these?! Surprised

Ellen_Saint_A - this one has some weird shtuff going on
Vanessa_C - same here
Rms80 - [updates] claims this one is a submitting member, but doesn't have a link in view submissions. Search doesn't find anything either.

Shirley you must be joking...

Richardspam

--------
Edit: HBG added 'a bunch' more 4/25/6 Went back through the 10 most recent pages of the member list. This appears to have been going on for some time.
Edit: Latest update: 6/14/6
I wonder what the world record is for the most edits to a single post on a message board. Rolling Eyes


"Do not go where the path may lead,
go instead where there is no path and leave a trail."
Ralph Waldo Emerson

My blog: The (New) Eclectic Dragonfly. Some of my stuff at CafePress!

Joined: April 15, 2002
Posts: 1819
Submissions: 1
Location: Calgary, AB. Canada.

Reply with quote
Posted on Sat Apr 22, 2006 10:00 am
Link to Post: Link to Post

cohort wrote:
There's a MOD for this on phpbb.com, just needs someone with ftp access to install the patches (I didn't get the password last time it changed, so that person's not me)


PM Blaise and grab that password if you feel confident changing it. This needs to be dealt with quick!

Would be good to have someone who can do little changes here and there anyway. No double-whammy of Blaise not having the time to do some urgent work, when he's also not around to give out the password when there *is* something urgent.

Joined: September 26, 2002
Posts: 509
Submissions: 14

Reply with quote
Posted on Mon Apr 24, 2006 8:33 am
Link to Post: Link to Post

He got it to me, but it'll require more work than I had anticipated, as there's no available upgrade patch from 2.0.4 -> current. And, the current mod is based on the current code, so...


"If 50 million people say a foolish thing, it is still a foolish thing." ? Anatole France

Joined: September 26, 2002
Posts: 509
Submissions: 14

Reply with quote
Posted on Tue Apr 25, 2006 10:26 pm
Link to Post: Link to Post

Speaking of which, the current version of the board software has a captcha system built-in.


"If 50 million people say a foolish thing, it is still a foolish thing." ? Anatole France

Joined: August 23, 2004
Posts: 1491
Submissions: 0

Reply with quote
Posted on Wed Apr 26, 2006 4:59 pm
Link to Post: Link to Post

http://www.mailleartisans.org/board/viewtopic.php?t=7011

Here's another one: fanMmp3

I don't have access to delete the thread, so it's still up at the moment.

Joined: February 29, 2004
Posts: 1898
Submissions: 8
Location: Behind Enemy Lines in Marxistchussetts

Reply with quote
Posted on Wed Apr 26, 2006 5:57 pm
Link to Post: Link to Post

All gone, and I've noted the account name in my ever growing list.


"Do not go where the path may lead,
go instead where there is no path and leave a trail."
Ralph Waldo Emerson

My blog: The (New) Eclectic Dragonfly. Some of my stuff at CafePress!

Post new topic Reply to topic
Jump to:  
Page 1 of 2. Goto page 1, 2  Next
All times are GMT. The time now is Mon Oct 20, 2014 9:38 am
M.A.I.L. Forum Index -> Admin Discussion
Display posts from previous: