Announcement

Collapse
No announcement yet.

Weird New Member?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • DWdrum
    replied
    Here are more that I have added. There might be a couple duplicates. I started goingt through them but my eyes started going wacky.

    I also started some IP blocking. See below


    Domains
    @web.de
    @inbox.ru
    @onlymail2007.com
    @yourgamesfree.info
    @tek.com
    @vip2fatal.info
    @xxx-search.info
    @cashette.com
    @mail333.com
    @manii-velichia.com
    @bazehost.info
    @fin-fin.biz
    @ua.fm
    @fatal-job.org
    @freehardcorevideo.org
    @agolubi.org
    @gawab.com
    @gurvitsnojew.org
    @0gift.org
    @mail.zp.ua
    @powertek.info
    @online-search-casino.org
    @i.ua
    @finance-here.biz
    @atefrog.org
    @fromru.com
    @all-rnb.com
    @dialogchat.com
    @mail.com
    @rap-site.com
    @homesexvideo.org
    @ajiex.info
    @onlinehealthclub.org
    @mail.ru
    @o2.pl
    @megabox.ru
    @allwebdrugs.info
    @iscw.org
    @best-finance.biz
    @putoncondoms.com
    @super-mail.info
    @mega-mail.info
    @medandpharm.info
    @mega-mail.info
    @terra-mail.info
    @medandpharm.info
    @mega-mail.info
    @medandpharm.info



    IP's
    72.36.245*
    217.9.235*
    195.2.114*
    84.42.63*
    24.2.196*
    87.118.102*
    217.195.87*
    72.36.245*
    217.9.235*

    Leave a comment:


  • Joe Page
    replied
    Pesky spammers

    Leave a comment:


  • cyburbia
    replied
    From August 2000 to now, I never had a user register with a 1 January 1980 birthdate. Since the start of the month, I had eight new members with a 1-1-1980 birthday - a common trait of spammer profiles. All are from European or Asian IPs. Yes, I'm running vB 3.6.2, I do have captchas enabled, and I'm also using a number of custom fonts in the captcha itself. Here's an example:



    I googled one of the 1-1-1980 user names, and found a post on an IPB-based site with the following signature:

    This message posted by Forum Poster V2 15-days trial version, Please visit http: // fp . icon tool . com for more information.
    (I broke the URL so they don't benefit from vB Community Forum-referred traffic.)

    The 1-1-1980 usernames include:

    antiterrorist911
    easyqfu
    privatonly
    realcouples
    Reefer
    Runescape
    selvam_cbe
    spbrent

    Either they're verifying captchas manually, or they've cracked the vB 3.6 captcha. Considering that I use custom fonts, I doubt the captcha is cracked.
    Last edited by cyburbia; Mon 16 Oct '06, 5:13am.

    Leave a comment:


  • cwest
    replied
    I don't know if this will help anyone however here is a list of the email addresses I have banned to date. I have also set all new registrations to moderated something I did not want to do but some of the crap is a major pain. I do not think this is going to go away anytime soon.

    @gawab.com
    @sriaus.com
    @mail.ru
    @ukr.net
    @sibmail.com
    @cashette.com
    @thecannabishunter.com
    @sanaa.com
    @megabox.ru
    @freefreemail.info
    @casino-poker-web.com
    @yandex.ru
    @nakedworldcelebrities.com
    @kisenfad.com
    @5crafts.com
    @bazehost.info
    @osfind.info
    @gala.net
    @paymailpro.org
    @yourmedserv.info
    @medicinese.info
    @xxxfamoustoonshentai.com
    @sculpturecreations.com
    @bigfreemail.info
    @annamail.info
    @usatodays.us
    @paymailpro.org
    @gala.net
    @bestbgfarm.info
    @osfind.info
    @inbox.ru

    Leave a comment:


  • PC101
    replied
    Originally posted by Helen View Post
    I forgot to mention, the spammer registered 4 times with the same email addy. How on earth has he managed to do that?
    cooper23 AT 301drush.info
    See this thread...

    http://www.vbulletin.com/forum/showthread.php?t=199401

    Leave a comment:


  • JakeS
    replied
    This "guy" Sounds more like an Advatiseing Bot to me

    Leave a comment:


  • Helen
    replied
    I forgot to mention, the spammer registered 4 times with the same email addy. How on earth has he managed to do that?

    cooper23 AT 301drush.info

    Leave a comment:


  • Helen
    replied
    It's been happening to me too within the past month or so. Previous to that, I would get a spammer once in a blue moon, now there are dozens of them. What's changed for them to suddenly appear en masse?

    Leave a comment:


  • jacks316
    replied
    Ah...thanks for that

    The spamming seems to have stopped for now. Not had any for about 5 days now. Fingers crossed they've given up!

    Leave a comment:


  • cyburbia
    replied
    vBuletion Options -> User Banning Options -> Allow User to Keep Banned Email Addresses -> select "Yes"

    Leave a comment:


  • jacks316
    replied
    Hmmm...but how do I get round the members I already have who have Yahoo email addresses? Or is it ok now they are on the site, have validated their accounts and are posting?

    Leave a comment:


  • cyburbia
    replied
    Originally posted by jacks316 View Post
    Crafty! They are now using yahoo accounts, knowing that you cant ban them, or you'll end up banning half your members! Wondered how long it would take them to work that out!
    That's probably why spam has been very light on my board; I've blocked Yahoo registrations for the past year. If it wasn't a spammer, there were problems with validation emails ending up in junk mail boxes, full mailboxes, inactive accounts, and other things causing bounces and general mayhem.

    Most of my users have access to alternative email addresses -- their work or ISP address -- so they have options. Blocking Yahoo didn't hurt membership; the rate of new members remained about the same both pre-ban and post-ban.

    Leave a comment:


  • jacks316
    replied
    Dont worry...just found out. He is another spammer. Did some searching on unrelated websites to mine, and he's on there a number of times too.

    Crafty! They are now using yahoo accounts, knowing that you cant ban them, or you'll end up banning half your members! Wondered how long it would take them to work that out!

    Leave a comment:


  • jacks316
    replied
    I have another new member today, going by the name of Jimcolone. However, because I have banned all the email addresses these idiots have been using, they have decided to use a yahoo address instead. However, the date of birth is the same. Not sure about this one....anyone else got him?

    Leave a comment:


  • e-motion
    replied
    More

    Niki8ones 69.61.78.252
    Atlas33 203.113.13.12
    EarnMoney 85.21.86.199
    Pochtalyon 81.222.178.30
    DrunkMans 195.225.128.61
    comtra01 69.182.106.31
    2Grossman 217.147.30.65

    Leave a comment:

widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Working...
X