| View previous topic :: View next topic |
| Author |
Message |
sardisson
Town Crier
Joined: Feb 01, 2004
Posts: 4588
|
 Posted: Sat Jan 14, 2006 6:06 pm Post subject: Our first? registered spammer |
|
Ed, please delete/ban/kick the crap out of Kai-TakSid; this thing registered and proceeded to post spam on the new Trinity news story, and that spam is something only you can delete and someone only you can ban, AFAICT.
Smokey
_________________
"[...] whether the duck drinks hot chocolate or coffee is irrelevant." -- ovvldc and sardisson in the NeoWiki |
|
| Back to top |
|
 |
OPENSTEP
The One
Joined: May 25, 2003
Posts: 4752
Location: Santa Barbara, CA
|
| Posted: Sat Jan 14, 2006 7:21 pm Post subject: |
|
Found that, deleted the comment spam.
You can actually have fun with his IP 216.195.47.197 or have fun sending spam to his own e-mail at Kai-TakSid@4nrop.com
It wouldn't surprise me if this is the first of a next gen of spambots that actually create valid mail accounts...or if it's a pay-per-click asshat in China. Beware the red chinese.
ed |
|
| Back to top |
|
|
OPENSTEP
The One
Joined: May 25, 2003
Posts: 4752
Location: Santa Barbara, CA
|
| Posted: Sat Jan 14, 2006 7:23 pm Post subject: |
|
Note: If it is a mail-registering spambot, I'll spend the time to add in the challenge-response required for registration (e.g. type in the numbers in the following blurred image). Up until now it hasn't been an issue so I've tried to keep it as simple as possible.
ed |
|
| Back to top |
|
|
OPENSTEP
The One
Joined: May 25, 2003
Posts: 4752
Location: Santa Barbara, CA
|
| Posted: Sat Jan 14, 2006 7:56 pm Post subject: |
|
Deleted all the article spam I could find, killed the user account, banned the IP. If it reappears I'll just ban all traffic from that subnet. While I feel bad as banning whole subnets hurts potential real users, in the short run that's the best defense against bost DDOS attacks as well as comment spam.
ed |
|
| Back to top |
|
|
jjmckenzie51
The Anomaly
Joined: Apr 01, 2005
Posts: 1055
Location: Southeastern Arizona
|
| Posted: Sat Jan 14, 2006 8:10 pm Post subject: |
|
| OPENSTEP wrote: | | Deleted all the article spam I could find, killed the user account, banned the IP. If it reappears I'll just ban all traffic from that subnet. While I feel bad as banning whole subnets hurts potential real users, in the short run that's the best defense against bost DDOS attacks as well as comment spam. |
It is very interesting to send a nicely worded message to the originator. If they fail to respond, block the entire IP range. I cannot go any further into this. Just run the IP against the APIC whois.
James |
|
| Back to top |
|
|
OPENSTEP
The One
Joined: May 25, 2003
Posts: 4752
Location: Santa Barbara, CA
|
| Posted: Sat Jan 14, 2006 8:34 pm Post subject: |
|
Takes too much time to be polite 
I just blocked the entire subnet.
ed |
|
| Back to top |
|
|
jjmckenzie51
The Anomaly
Joined: Apr 01, 2005
Posts: 1055
Location: Southeastern Arizona
|
| Posted: Sat Jan 14, 2006 9:04 pm Post subject: |
|
| OPENSTEP wrote: | Takes too much time to be polite
I just blocked the entire subnet. |
Thanks.
James |
|
| Back to top |
|
|
OPENSTEP
The One
Joined: May 25, 2003
Posts: 4752
Location: Santa Barbara, CA
|
| Posted: Sat Jan 14, 2006 9:50 pm Post subject: |
|
My pleasure 
ed |
|
| Back to top |
|
|
sardisson
Town Crier
Joined: Feb 01, 2004
Posts: 4588
|
| Posted: Sat Jan 14, 2006 10:52 pm Post subject: |
|
Thanks Ed!
Smokey
_________________
"[...] whether the duck drinks hot chocolate or coffee is irrelevant." -- ovvldc and sardisson in the NeoWiki |
|
| Back to top |
|
|
|
