View previous topic :: View next topic |
Author |
Message |
sardisson Town Crier
Joined: Feb 01, 2004 Posts: 4588
|
Posted: Sat Jan 14, 2006 6:06 pm Post subject: Our first? registered spammer |
|
Ed, please delete/ban/kick the crap out of Kai-TakSid; this thing registered and proceeded to post spam on the new Trinity news story, and that spam is something only you can delete and someone only you can ban, AFAICT.
Smokey _________________ "[...] whether the duck drinks hot chocolate or coffee is irrelevant." -- ovvldc and sardisson in the NeoWiki |
|
Back to top |
|
|
OPENSTEP The One
Joined: May 25, 2003 Posts: 4752 Location: Santa Barbara, CA
|
Posted: Sat Jan 14, 2006 7:21 pm Post subject: |
|
Found that, deleted the comment spam.
You can actually have fun with his IP 216.195.47.197 or have fun sending spam to his own e-mail at Kai-TakSid@4nrop.com
It wouldn't surprise me if this is the first of a next gen of spambots that actually create valid mail accounts...or if it's a pay-per-click asshat in China. Beware the red chinese.
ed |
|
Back to top |
|
|
OPENSTEP The One
Joined: May 25, 2003 Posts: 4752 Location: Santa Barbara, CA
|
Posted: Sat Jan 14, 2006 7:23 pm Post subject: |
|
Note: If it is a mail-registering spambot, I'll spend the time to add in the challenge-response required for registration (e.g. type in the numbers in the following blurred image). Up until now it hasn't been an issue so I've tried to keep it as simple as possible.
ed |
|
Back to top |
|
|
OPENSTEP The One
Joined: May 25, 2003 Posts: 4752 Location: Santa Barbara, CA
|
Posted: Sat Jan 14, 2006 7:56 pm Post subject: |
|
Deleted all the article spam I could find, killed the user account, banned the IP. If it reappears I'll just ban all traffic from that subnet. While I feel bad as banning whole subnets hurts potential real users, in the short run that's the best defense against bost DDOS attacks as well as comment spam.
ed |
|
Back to top |
|
|
jjmckenzie51 The Anomaly
Joined: Apr 01, 2005 Posts: 1055 Location: Southeastern Arizona
|
Posted: Sat Jan 14, 2006 8:10 pm Post subject: |
|
OPENSTEP wrote: | Deleted all the article spam I could find, killed the user account, banned the IP. If it reappears I'll just ban all traffic from that subnet. While I feel bad as banning whole subnets hurts potential real users, in the short run that's the best defense against bost DDOS attacks as well as comment spam. |
It is very interesting to send a nicely worded message to the originator. If they fail to respond, block the entire IP range. I cannot go any further into this. Just run the IP against the APIC whois.
James |
|
Back to top |
|
|
OPENSTEP The One
Joined: May 25, 2003 Posts: 4752 Location: Santa Barbara, CA
|
Posted: Sat Jan 14, 2006 8:34 pm Post subject: |
|
Takes too much time to be polite
I just blocked the entire subnet.
ed |
|
Back to top |
|
|
jjmckenzie51 The Anomaly
Joined: Apr 01, 2005 Posts: 1055 Location: Southeastern Arizona
|
Posted: Sat Jan 14, 2006 9:04 pm Post subject: |
|
OPENSTEP wrote: | Takes too much time to be polite
I just blocked the entire subnet. |
Thanks.
James |
|
Back to top |
|
|
OPENSTEP The One
Joined: May 25, 2003 Posts: 4752 Location: Santa Barbara, CA
|
Posted: Sat Jan 14, 2006 9:50 pm Post subject: |
|
My pleasure
ed |
|
Back to top |
|
|
sardisson Town Crier
Joined: Feb 01, 2004 Posts: 4588
|
Posted: Sat Jan 14, 2006 10:52 pm Post subject: |
|
Thanks Ed!
Smokey _________________ "[...] whether the duck drinks hot chocolate or coffee is irrelevant." -- ovvldc and sardisson in the NeoWiki |
|
Back to top |
|
|
|