• We are now running on a new, and hopefully much-improved, server. In addition we are also on new forum software. Any move entails a lot of technical details and I suspect we will encounter a few issues as the new server goes live. Please be patient with us. It will be worth it! :) Please help by posting all issues here.
  • The forum will be down for about an hour this weekend for maintenance. I apologize for the inconvenience.
  • If you are having trouble seeing the forum then you may need to clear your browser's DNS cache. Click here for instructions on how to do that
  • Please review the Forum Rules frequently as we are constantly trying to improve the forum for our members and visitors.

Forum Spammers

BobCav

Founder's Club Member
Joined
Feb 7, 2007
Messages
2,798
Location
No longer in Alexandria, Egypt
imported post

Hey folks. We had another spammer postingads on the forum today and thanks to some of you being on the ball,I was able to delete the threads.

If and when we do get a spammer, notify John, Mike, Longwatch and Me and whichever gets on here first will delete the thread. PLEASEdon't reply to them on the forum and espectially do NOT e-mail them! Today's spammer's IP resolved to NIGERIA. I can assure you, nobody in Nigeria is going to sell you top name HDTV's, electronics and cell phones, they are simply phishing for your e-mail address. Once you reply, they sell your address to other spammers and odds are you'll probably start getting those e-mails for the Nigerian 401 money scam.

Here's the IP of our first contestant!

Date Name IP Address IP Location
10 Mar 08 sales001 83.229.90.9 Nigeria
18 Mar 08melvin5 41.219.196.50 Lagos, Nigeria
 

BobCav

Founder's Club Member
Joined
Feb 7, 2007
Messages
2,798
Location
No longer in Alexandria, Egypt
imported post

Exactly what Doug said, it wasn't a spam-bot. I think that this software version doesn't directly support CAPTCHA, but perhaps it's coming soon. This has been a problem on many WoWBB forums.
 

vermonter

Regular Member
Joined
Oct 5, 2006
Messages
340
Location
, ,
imported post

Is this what we are doing now, posting IP addresses? If someone has a different opin from the moderators are you going to post their IP or remove their account?
 

AbNo

Regular Member
Joined
Jun 8, 2007
Messages
3,805
Location
Shenandoah Valley, Virginia
imported post

*ignores blatant trolling*

BobCav wrote:
Exactly what Doug said, it wasn't a spam-bot.  I think that this software version doesn't directly support CAPTCHA, but perhaps it's coming soon.  This has been a problem on many WoWBB forums.

Well, didn't find anything on CAPTCHA for WoWBB, but I did find this.

http://www.livedatesearch.com/scammers_blacklist.html

Looks like most 83.229.* IP addresses are Nigera, Zimbabwe, and the like.

Lovely.

Does WowBB support prohibition of posting links before X number of posts?
 

BobCav

Founder's Club Member
Joined
Feb 7, 2007
Messages
2,798
Location
No longer in Alexandria, Egypt
imported post

Another SPAMMER today: melvin5. IP 41.219.196.50

These bogus e-mails promising purchases of hi-end items at discount prices is just another way of harvesting your e-mail addresses because they can't legally purchase e-mail lists for their illegal activities!

http://www.scamorama.com/
 

squarepeg

Regular Member
Joined
Jan 28, 2008
Messages
96
Location
Indiana, ,
imported post

I understand what a spammer is,I think I understand a phisher scam too. While yes you have the IP address, and you might be able to use it to block the user, what good is posting the IP in the public domain? What am I or maybe a more technically advanced user going to do with an IP address. I am not saying it is right or wrong to post the IP, just what does it do for us? Pardon my lack or knowledge on the internet stuff.
 

Doug Huffman

Banned
Joined
Jun 9, 2006
Messages
9,180
Location
Washington Island, across Death's Door, Wisconsin,
imported post

To start with, a 'traceroute' to learn the upstream provider to whom to complain about the abuse of their Terms of Service. If that provider is not responsive then the next upstream. If nothing like that works then there are a number of 'blackhole lists' that can redirect the spammers IP to dev.null.
 

BobCav

Founder's Club Member
Joined
Feb 7, 2007
Messages
2,798
Location
No longer in Alexandria, Egypt
imported post

squarepeg wrote:
I understand what a spammer is,I think I understand a phisher scam too. While yes you have the IP address, and you might be able to use it to block the user, what good is posting the IP in the public domain? What am I or maybe a more technically advanced user going to do with an IP address. I am not saying it is right or wrong to post the IP, just what does it do for us? Pardon my lack or knowledge on the internet stuff.
No problem at all! Well, the fact that we can recognize and eliminate this kind of scamshouldput you at ease that those of us that are internet savvy are watching out for the members of the forum.

As to blocking IP's, only John can do that and they way these guys change IP's, he would be at it all day. Posting their IP's does nothing for you, but itputs these foolson notice that we're wise to their crap.
 

rabbit994

Regular Member
Joined
Jun 23, 2006
Messages
242
Location
Virginia, ,
imported post

IP Address aren't extremely identifying. Some people IP don't change and others constantly change. It's even less then telephone number.
 

John Pierce

Administrator
Staff member
Joined
May 5, 2006
Messages
1,777
imported post

squarepeg wrote:
I understand what a spammer is,I think I understand a phisher scam too. While yes you have the IP address, and you might be able to use it to block the user, what good is posting the IP in the public domain? What am I or maybe a more technically advanced user going to do with an IP address. I am not saying it is right or wrong to post the IP, just what does it do for us? Pardon my lack or knowledge on the internet stuff.
Well ... the most obvious use is that I (the forum administrator) can ban that IP range from signing up new accounts.
 

PT111

Regular Member
Joined
Jul 31, 2007
Messages
2,243
Location
, South Carolina, USA
imported post

It gets quite technical but IP addresses no longer mean a great deal for the average user even if you know it. If you have an IP address you can usually tell if the sender is from the US or a foreign country but not always. With todays use of NAT, PAT and relays IP addresses change constantly and unless you are tracing a server such as an email server you can't depend on it.

Right now I am using two different spam detection boxes for the school and about 10 different detection routines. On average I block 94% of all mail sent here. That 94% never even reaches the mail server. Another 2% gets flagged as possible spam and another 2% is usually jokes or similar. Only about 1% of all email received by the college is actual useful email related to our services.
 

Pointman

Regular Member
Joined
Feb 18, 2008
Messages
1,422
Location
, ,
imported post

Part of the problem is that some ads on news sites (especially MSNBC) are either bad from the start or hijacked. The JAVA ad is crafted to place information on the clipboard, and a Paste command will place it unintentionally. The rogue information isn't overwritten in subsequent cut/copy/paste operations, and a machine restart is needed (at minimum). Users have started reporting this scheme on a more frequent basis over the last few weeks.

It seems to have stemmed from Microsoft's use of this exploit on Hotmail images so they could open a new Microsoft specific ad window, and hackers discovered and corrupted the method for their own use.
 
Top