Members & Staff Managing Members and Staff - Building Community Spirit.

Reply
 
Thread Tools

  #61  
Old 06-29-2006, 02:02 PM
Wile E Wile E is offline
TAZ Rookie
 
Join Date: Jun 2006
Admin Experience: Beginner
Posts: 15
Wile E is on a distinguished road
Default
I am a very new admin, promoted from moderator.

I noticed an influx of the alphabet names, .ru addresses and link spammers since around April 13th. I don't know if they just discovered us then or they discovered a way around the image validation around that date. It seems like everyone has been seeing an influx of these "members" in the past couple months.

Another admin who just handles the coding and server issues is looking into other means of preventing these spammers, in the meantime I got the go ahead from the site owner to delete all these members and ban a few of the most common addresses. But I noticed another type of spammer that I haven't seen mentioned here. Their email is always alex@somethingorother. Often the @address is the site they are promoting but it's always different (one was obviously referring to porn). I can't seem to ban alex@*, is there some other way to do it? I use phpBB. I am leery of wildcard banning "alex" because a legitimate member could have that in their user name/email. They usually don't post, perhaps because the email is phony and they can't validate, so for now I am just deleting them.

Thanks for any input. This site has been a big help to me.
Reply With Quote
  #62  
Old 07-01-2006, 08:43 AM
Sampanviking Sampanviking is offline
TAZ Rookie
 
Join Date: Jun 2006
Admin Experience: Beginner
Location: Bristol UK
Age: 49
Posts: 5
Sampanviking is on a distinguished road
Default @mail.ru
It seems everybody has the same story. I was hit by load of these before my IPB Board was Hacked twice in May. I think the Spam Bots are trying to open accounts to exploit HTML and other Upload/Browser weaknesses in order to Hijack and Infect the Site.

I have performed numerous upgrades and tightened security. Now they seem unable to verify and I just check daily and remove them (Cashette too, but I have no idea who they are??)
Reply With Quote
  #63  
Old 07-17-2006, 11:04 AM
Cyburbia's Avatar
Cyburbia Cyburbia is offline
Tazmanian
 
Real Name: Dan
Join Date: Jan 2004
Admin Experience: Advanced
Location: Upstate New York
Age: 48
Posts: 352
Cyburbia is just really niceCyburbia is just really nice
Default
Quote:
Originally Posted by harishankar
Why not just *.ru? None of the .ru addresses have been genuine members so far. I got that splitcam member also.
You run the risk of blocking registration from everyone at a public university in New Jersey; they have addresses in the form of [name]@[college].rutgers.edu. It's better to block the individual .ru domains (mail.ru, rambler.ru, etc.).
Reply With Quote
  #64  
Old 07-17-2006, 11:23 AM
Adrian's Avatar
Adrian Adrian is offline
TAZ Rookie
 
Join Date: Jul 2006
Admin Experience: Intermediate
Location: South Yorkshire.
Posts: 27
Adrian is on a distinguished road
Default
I seem to have a few signups from .ru and @cashette.com email addresses.

I think all of those accounts are still waiting email validation, maybe they are spam accounts?

Adrian
__________________
Development Chat - The Webmaster Forum
Reply With Quote
  #65  
Old 07-17-2006, 01:14 PM
martinwebdev's Avatar
martinwebdev martinwebdev is offline
TAZ Regular
 
Join Date: Jul 2006
Admin Experience: Guru
Location: NH, USA
Posts: 36
martinwebdev is on a distinguished road
Default
Unfortunately, I've had too much experience with these ".ru" registrations. While some of them are valid, the majority of them are not.

Chris
Reply With Quote
  #66  
Old 07-18-2006, 12:52 AM
jcerious jcerious is offline
TAZ Regular
 
Join Date: Feb 2006
Posts: 39
jcerious is on a distinguished road
Default
Quote:
Originally Posted by Cyburbia
You run the risk of blocking registration from everyone at a public university in New Jersey; they have addresses in the form of [name]@[college].rutgers.edu. It's better to block the individual .ru domains (mail.ru, rambler.ru, etc.).
No, no that's not right. If you block *.ru - that means it has to end in .ru. And yours ends in .edu. Yes, I see what you're saying that there is also a ".ru" in ".rutgers", but it also has "tgers" at the end of it.

You would have to have an additional wildcard for "rutgers" to be included. For that to happen you'd have to type it like this: *.ru* - that's the only way "rutgers" could be included.

If you type just *.ru - that means anything before the dot, but ONLY "ru" after it. No "rutgers" no "rutgers.edu" no nothing... just "ru".

ru getting this!?

Plus, there is an infinite number of .ru domains just like there is an infinite number of .com names. You'd never be able to block them all.
Reply With Quote
  #67  
Old 08-23-2006, 11:57 AM
Cyburbia's Avatar
Cyburbia Cyburbia is offline
Tazmanian
 
Real Name: Dan
Join Date: Jan 2004
Admin Experience: Advanced
Location: Upstate New York
Age: 48
Posts: 352
Cyburbia is just really niceCyburbia is just really nice
Default
Quote:
Originally Posted by jcerious
ru getting this!?
No. If you use vBulletin and enable "aggressive email banning," anyone with the string ".ru" in their address won't be able to register, including those from .rutgers.edu. From the vBulletin control panel:

Quote:
Note that partial email addresses are matched from the end of the address unless you enable "Aggressive Email Banning" below. Therefore if you ban @example.com you will ban user@example.com, but if you ban @example that user will not be banned. If you enable "Aggressive Email Banning", user@example.com would be banned by @example.
If aggressive banning isn't enabled, .ru will block .ru. If you have aggressive banning turned on - a must if you're using keywords in your banned email address list -- .ru will block .rutgers.edu as well.
Reply With Quote
  #68  
Old 08-23-2006, 01:21 PM
KarlH's Avatar
KarlH KarlH is offline
Phew
 
Real Name: Karl
Join Date: Apr 2006
Admin Experience: Intermediate
Location: UK
Age: 23
Posts: 169
KarlH will become famous soon enough
Default
Just completely ban them and delete the accounts, they do all sorts of damage to your forum.
Reply With Quote
  #69  
Old 08-23-2006, 02:27 PM
Hangman Hangman is offline
Tazmanian
 
Real Name: Hangy
Join Date: Dec 2005
Admin Experience: Advanced
Location: UK
Posts: 1,862
Hangman is just really niceHangman is just really nice
Default
Yerp, Karl and I have wildcarded them.
Reply With Quote
  #70  
Old 08-24-2006, 07:11 AM
arnie's Avatar
arnie arnie is offline
Lost in Cyber-Space
 
Real Name: Alan Palmer
Join Date: Aug 2006
Admin Experience: Intermediate
Location: London, UK
Posts: 194
arnie has a spectacular aura about
Default
I often to forget to check the list of members awaiting validation of email addresses and haven't looked for a couple of months. Inspired by this thread I looked and found that 50% had given a "@mail.ru" address so I deleted them all. Thanks, guys!
__________________
Come on you raver, you seer of visions,
Come on you painter, you piper, you prisoner, and shine!

http://wordcraft.infopop.cc/eve
Reply With Quote
  #71  
Old 12-19-2006, 11:42 PM
pmja pmja is offline
TAZ Rookie
 
Real Name: Jane
Join Date: Dec 2006
Posts: 1
pmja is on a distinguished road
Default
Hi,

I've just been reading the posts here, and I wanted to share what it is I do to keep spammers off my site. I simply copy and paste their username into Google. If it comes back with pages of forums they've signed up for, I delete them. No one has that much time to be registered to pages of forums! Sometimes their name doesn't show up for a day or two, but no one has complained about having to wait a day or two before they're activated on the site. So far, this has worked well for me.

Jane
Reply With Quote
  #72  
Old 12-20-2006, 12:14 PM
East Hill East Hill is offline
Tazmanian
 
Real Name: Margaret
Join Date: Dec 2006
Admin Experience: Intermediate
Location: Kent, Washington state
Posts: 193
East Hill will become famous soon enough
Default
pmja's post made me laugh--it's how I got to this site in the first place. I can't remember what name I was searching, but it led me to a thread at the AdminZone. Nowadays I perform a Google search on the suspect, and if I see 8 or 9 pages all with the same name, saying 'view profile', I know it's a spammer.

Just for fun, I performed a Google search on "East Hill". I've used this name on two other boards. I got bored after going through 17 pages without seeing myself pop up. It's comforting to know that I am not yet in the ranks of the spammers .

East Hill
Reply With Quote
Reply

  Admin Zone Forums > The Community Zone > Managing an Online Community > Members & Staff





Currently Active Users Viewing this Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
hotpop.com email addresses? mobilebadboy Members & Staff 1 03-07-2006 04:21 PM


 

All times are GMT -4. The time now is 09:01 AM.


Powered by: vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Page generated in 0.08652806 seconds with 15 queries
The Admin Zone copyright 2003-2014 All Rights Reserved. Content published on The Admin Zone requires permission for reprint.