Discussion about spammer

If it doesn't fit elsewhere, it goes here
SnDPhoenix
Posts: 2690
Joined: Tue Dec 26, 2006 5:44 pm
Location: West Florida

Post by SnDPhoenix » Thu Aug 11, 2011 11:54 am

tzuk wrote:just for the sake of changing it.
I was thinking for security fixes and bug fixes, not just a new look. :P
tzuk wrote:If you know of any specific vulnerabilities with the forum software, I would appreciate specific details rather than vague warnings, so I can fix the problems.
Sorry to sound vague, I was not referring to any specific vulnerabilities that I know of but instead I just mean that there is a whole "library" of exploits for phpBB in those popular exploit databases.
However, thankfully this forum is v2.0.23, which only has a couple exploits I am aware of. :)
Though, you have to watch out for any phpBB mods installed as well!
tzuk wrote:No ... :) A forum account called footprints has been spamming about some show, but that's not what I meant. I am referring to the insane anti-social person who has been the subject of this topic from the start.
Oh ok, I guess I didn't see his posts yet or forgot about him. The only spammer I've seen recently is the Abdullah show guy and sometimes you'll see someone bump an old topic and their signature will contain links to some generic spam site.
Buster wrote:I still wonder why he keeps posting that.
Isn't that spamming? :lol:

D1G1T@L
Posts: 577
Joined: Sun Apr 17, 2011 7:40 pm
Location: DefaultBox

Post by D1G1T@L » Thu Aug 11, 2011 11:40 pm

There are some very good techniques to prevent forum spam as per this article

Regarding prevention of new member links, there is a phpbb plugin I've found here

opera
Posts: 212
Joined: Sat May 26, 2007 11:15 am
Location: uk

Post by opera » Fri Aug 12, 2011 2:03 am

Tzuk please see your pm's

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Fri Aug 12, 2011 5:49 am

I appreciate the suggestions from everyone, but this is a case of an obessive human who is deliberately connecting 3-4 times a day, each time finding a new proxy bot computer to connect through (because I applied an IP ban on the bot he was using earlier), only to post this targetted garbage here. I don't think any automatic solutions is going to work.
tzuk

SnDPhoenix
Posts: 2690
Joined: Tue Dec 26, 2006 5:44 pm
Location: West Florida

Post by SnDPhoenix » Fri Aug 12, 2011 8:21 am

He might also be connecting through TOR, thus he gets a new IP address like every couple minutes, plus he can right click the tray icon and select "New Identity" to force a new IP address from a different TOR node any time he wants. :(
Windows 7 SP1 x64, Sandboxie v3.70 x64 with Experimental Protection, GnuPG, OTR (Off-The-Record), Sticky Password, My Brain.

Ruhe
Posts: 803
Joined: Thu Jul 03, 2008 8:56 am
Location: Germany
Contact:

Post by Ruhe » Fri Aug 12, 2011 4:50 pm

I'm banned too, because I'm using HMA! Pro VPN

Peter2150
Posts: 879
Joined: Tue Mar 27, 2007 9:46 pm
Location: Washington DC

Post by Peter2150 » Fri Aug 12, 2011 9:47 pm

I've also been banned from a couple of my Hotspot VPM IP's.

Probably the best suggestion is a couple of mods strategically located around the world. Then when he posts nail him.

Pete

Ruhe
Posts: 803
Joined: Thu Jul 03, 2008 8:56 am
Location: Germany
Contact:

Post by Ruhe » Sat Aug 13, 2011 2:34 am

Ban by IP isn't really a good idea.
I may not visit this board just by using VPN?

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Sat Aug 13, 2011 12:35 pm

SnDPhoenix wrote:He might also be connecting through TOR, thus he gets a new IP address like every couple minutes, plus he can right click the tray icon and select "New Identity" to force a new IP address from a different TOR node any time he wants. :(
At first he was using servers. By this I mean, when I looked up the various IPs he used, the results I got were all in blocks of IPs allocated to hosting companies. That was probably a year ago. But in the past few months that's no longer the case and the IPs now mostly look like typical ISP dialup IPs.

Anyway, the IP bans don't really help at all, other measures have proved to be much more helpful. So with that said, I just cleared the ban list. I am sorry the bans were banning honest folks. :)
tzuk

Buster
Posts: 2576
Joined: Mon Aug 06, 2007 2:38 pm
Contact:

Post by Buster » Mon Aug 15, 2011 4:37 am

The forum is full of spam again.

@tzuk - My suggestion:

Give privileges to a few trusted users (Guest10 would be a good candidate) to remove users with less than x messages (spammers) and all their messages.

opera
Posts: 212
Joined: Sat May 26, 2007 11:15 am
Location: uk

Post by opera » Mon Aug 15, 2011 6:34 am

And make sure those trusted users with the privileges are in different timezones e.g Europe, USA

SnDPhoenix
Posts: 2690
Joined: Tue Dec 26, 2006 5:44 pm
Location: West Florida

Post by SnDPhoenix » Mon Aug 15, 2011 10:22 am

Yeah, the spammer was ridiculous this time. Worst spam attack I've seen on this board yet.

In case you didn't see it, some asshole "tzuk_sandboxie" was spamming every section of the forum with his trash, the last I checked he had posted 132 individual pieces of spam within a few hours. :evil:
Some of the titles of his post were personal insults towards tzuk or other members, which makes me think he's human and not automated. It looked like this:

Image
Windows 7 SP1 x64, Sandboxie v3.70 x64 with Experimental Protection, GnuPG, OTR (Off-The-Record), Sticky Password, My Brain.

Ruhe
Posts: 803
Joined: Thu Jul 03, 2008 8:56 am
Location: Germany
Contact:

Post by Ruhe » Mon Aug 15, 2011 10:27 am

And this happend after tzuk cleared the ban list.

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest