Avast WEBforum

Other => General Topics => Topic started by: YoKenny on September 16, 2009, 02:15:11 PM

Title: Spammers from Afganistan
Post by: YoKenny on September 16, 2009, 02:15:11 PM
Latest member Bropyodolowaw  :o

Spammer yesvolungroup  :o
Title: Re: Spammers from Afganistan
Post by: nmb on September 16, 2009, 02:19:53 PM
I have been watching..

there are so many such profiles. out of ten profiles signed up, 7 to 8 are from Afghanistan. and all of them turn out to be spammers. most of them which i have reported to moderator are all from Afghanistan.
Title: Re: Spammers from Afganistan
Post by: igor on September 16, 2009, 02:30:49 PM
I don't think they are from Afghanistan - it's just that the country is first on the list, and many people simply don't change it.
Title: Re: Spammers from Afganistan
Post by: nmb on September 16, 2009, 02:32:07 PM
I don't think they are from Afghanistan - it's just that the country is first on the list, and many people simply don't change it.


hmmm. may be you are true.
Title: Re: Spammers from Afganistan
Post by: DavidR on September 16, 2009, 03:56:24 PM
I don't think they are from Afghanistan - it's just that the country is first on the list, and many people simply don't change it.


I too don't believe they come from Afghanistan, but it gets pretty tiresome continually reporting them and no doubt for you deleting the accounts.

What is done on the recording of IP addresses to try and get a handle on the origins of these spammers (to potentially block certain IPs) ?

I guess it could just be a very few spammers rather than some bot getting round the registration process.
Title: Re: Spammers from Afganistan
Post by: nmb on September 16, 2009, 04:13:41 PM
I guess it could just be a very few spammers rather than some bot getting round the registration process.

+1
Title: Re: Spammers from Afganistan
Post by: Lisandro on September 16, 2009, 11:34:06 PM
I don't think they are from Afghanistan - it's just that the country is first on the list, and many people simply don't change it.
Maybe the default should be empty? ???
Title: Re: Spammers from Afganistan
Post by: greyshade on September 17, 2009, 08:03:45 AM
I don't think they are from Afghanistan - it's just that the country is first on the list, and many people simply don't change it.
Maybe the default should be empty? ???

No... the default should be Spamland  :P
Title: Re: Spammers from Afganistan
Post by: scythe944 on September 17, 2009, 08:31:37 AM
Just for the admins...

I've been using a tool that's proved pretty helpful to me so far.

Of course, if there is a new user that is posting a bunch of crap, you don't really need to do a background check.

http://www.stopforumspam.com

You either use their username or email address, and it checks to see if they've spammed in the past or not.  It's a good first step to see if they're legit or not.
Title: Re: Spammers from Afganistan
Post by: YoKenny on September 17, 2009, 11:21:43 AM
I don't think they are from Afghanistan - it's just that the country is first on the list, and many people simply don't change it.

What is done on the recording of IP addresses to try and get a handle on the origins of these spammers (to potentially block certain IPs) ?

+1

The latest paid Malwarebytes Anti-Malware (MBAM) 1.41 detects malware hosting IP addresses so why can't avast! track these IP addresses and start a block list of banned IP addresses?

hpHosts supplies many of these blocked IP addresses:
http://hosts-file.net/?s=173.1.45.242
Title: Re: Spammers from Afganistan
Post by: Lisandro on September 17, 2009, 01:56:18 PM
I think they would be more interested on block 14 million pirated copies of avast professional that are running nowadays...
Title: Re: Spammers from Afganistan
Post by: spg SCOTT on September 17, 2009, 09:21:03 PM
Just for the admins...

I've been using a tool that's proved pretty helpful to me so far.

Of course, if there is a new user that is posting a bunch of crap, you don't really need to do a background check.

http://www.stopforumspam.com

You either use their username or email address, and it checks to see if they've spammed in the past or not.  It's a good first step to see if they're legit or not.

Good site, just used it to report one to the mods here :)

-Scott-



EDIT: Make that 2
Title: Re: Spammers from Afganistan
Post by: Mr.Agent on September 17, 2009, 10:27:40 PM
Its easy to stop spammer. The guy can just register only 1 time by his location that what my friend Web Master did do for prevent of the spammer. ;)

Mr.Agent
Title: Re: Spammers from Afganistan
Post by: DavidR on September 17, 2009, 11:08:20 PM
Not easy or it would have been stopped by now. If I try to register an IP, email address and user name is recorded.

If I reconnect to the Internet (dial-up) the IP is dynamically assigned, meaning it is different, so if I register again and use a different email address and user name, no problem all are different.

We have to make it harder to block the spammers but not to the detriment of legitimate users needing to register, so it isn't as easy as you say. Dynamically assigned IP get used again by other users on that ISP, if they happened to try and register using an IP already blocked, an innocent user gets tarred by the same brush as the previous spammer.
Title: Re: Spammers from Afganistan
Post by: MikeBCda on September 18, 2009, 09:25:43 PM
We have to make it harder to block the spammers but not to the detriment of legitimate users needing to register, so it isn't as easy as you say. Dynamically assigned IP get used again by other users on that ISP, if they happened to try and register using an IP already blocked, an innocent user gets tarred by the same brush as the previous spammer.
Actually many boards do reserve the right to block large IP ranges because of the dynamic-IP "loophole", which can result in many or even all of an ISP's customers being cut off from that board.

The better-run ones, when that happens, usually have some provision for permitting you to contact a board admin who can, if appropriate, grant you access individually.  That in turn is probably based on your user-name and password, so you'd almost certainly be unable to get in (or at least post) without logging in, i.e., as a guest or visitor.
Title: Re: Spammers from Afganistan
Post by: DavidR on September 18, 2009, 09:33:08 PM
Exactly what I meant by making it harder on the spammers but not to the detriment of legit users.
Title: Re: Spammers from Afganistan
Post by: Mr.Agent on September 18, 2009, 09:37:10 PM
Well my friend got a lot way to block and ban,kick..... So also he got a anti hacker and ddos + exploit. He is about secured in all ways. ;)

But for sure im wondering if free hoster could be more secure for now a day... But well its not a good thread to start talk about this...

So im sorry.

Mr.Agent
Title: Re: Spammers from Afganistan
Post by: spg SCOTT on September 19, 2009, 12:23:46 PM
Maybe ALWIL could implement something that we could use to report new users as spammers (based on the site scythe944's site or others)

I have reported two already, and they are still active, though no posts yet...::)

And there are two more today...
Title: Re: Spammers from Afganistan
Post by: Mr.Agent on September 19, 2009, 03:28:56 PM
Maybe a email activation ?
Title: Re: Spammers from Afganistan
Post by: Lisandro on September 19, 2009, 05:43:10 PM
Maybe a email activation ?
+1
Will help...
Title: Re: Spammers from Afganistan
Post by: spg SCOTT on September 19, 2009, 05:45:09 PM
Don't you have to do that anyway ???


Quote
You are now registered with an account at avast!WEBforum, spg SCOTT!

Your account's username is spg SCOTT and its password is xxxxxxxx (which can be changed later.)

Before you can login, you first need to activate your account. To do so, please follow this link:

http ://forum.avast.com/index.php?action=activate;u=55044;code=xxxxxxxxxxx

Should you have any problems with activation, please use the code "xxxxxxxxxxxx".

Regards,
The avast!WEBforum Team.
Title: Re: Spammers from Afganistan
Post by: Mr.Agent on September 19, 2009, 05:55:17 PM
Also people will say for safety and security they will say i dont wanna give my real email. Then i got a good idea for them. Its to make a second email for only forum. Then keep the another one for personal,game,etc. This is a good way no ? ;)
Title: Re: Spammers from Afganistan
Post by: Lisandro on September 19, 2009, 06:01:34 PM
Thanks Scott. I've forgotten that (too much time since my registering ;D).
Title: Re: Spammers from Afganistan
Post by: spg SCOTT on September 19, 2009, 06:02:38 PM
Also people will say for safety and security they will say i dont wanna give my real email. Then i got a good idea for them. Its to make a second email for forum. Then keep the another one for personal and game. This is a good way no ? ;)

Yes, I have 3

Thanks Scott. I've forgotten that (too much time since my registering ;D).

Thought so :P
Title: Re: Spammers from Afganistan
Post by: Mr.Agent on September 19, 2009, 06:13:11 PM
Nice Scott i know also some people that he use his second for game like his real email. He do like varies but do not share personal information for his second email.

This is a great thing to do i can say.

Mr.Agent
Title: Re: Spammers from Afganistan
Post by: YoKenny on September 21, 2009, 10:01:56 AM
Newest one from Argentina:
http://forum.avast.com/index.php?action=profile;u=90279
http://forum.avast.com/index.php?action=profile;u=90279;sa=showPosts
Title: Re: Spammers from Afganistan
Post by: nmb on September 21, 2009, 10:27:13 AM
Newest one from Argentina:
http://forum.avast.com/index.php?action=profile;u=90279
http://forum.avast.com/index.php?action=profile;u=90279;sa=showPosts

i think now its removed. of course, i know you have reported.
Title: Re: Spammers from Afganistan
Post by: YoKenny on September 21, 2009, 10:31:31 AM
Newest one from Argentina:
http://forum.avast.com/index.php?action=profile;u=90279
http://forum.avast.com/index.php?action=profile;u=90279;sa=showPosts

i think now its removed. of course, i know you have reported.

Somebody is awake and had their morning coffee already.  :)
Title: Re: Spammers from Afganistan
Post by: DavidR on September 21, 2009, 03:55:09 PM
No difference as the origin, pick a country at the start of the list rather than where you are is immaterial. A spammer, is a spammer, is a spammer, no matter where they say they are from when they register. They are hardly likely to be telling the truth, just keep hitting the report to moderator link when you see a spammer posting, origin is immaterial.
Title: Re: Spammers from Afganistan
Post by: scythe944 on September 21, 2009, 08:22:08 PM
I think I did try to tell Alwil's web admins to use re-captcha a while back.  It works great on my site.

http://recaptcha.net/

http://custom.simplemachines.org/mods/index.php?mod=1044
Title: Re: Spammers from Afganistan
Post by: DavidR on September 21, 2009, 09:00:59 PM
Whilst that may be great for trying to beat bots registering it would do little about manual registration and that as far as I can tell is the problem here.
Title: Re: Spammers from Afganistan
Post by: scythe944 on September 23, 2009, 07:13:28 PM
True... totally missed that point.

I guess we need some sort of system to check a spammer database, like the one at stopforumspam.com before allowing the user to register.  I know that won't thwart everyone, as they can just use a different IP address, or username, but it would be a start.

I wonder if they have a plugin for SMF to do something like that... I'll check around.
Title: Re: Spammers from Afganistan
Post by: DavidR on September 23, 2009, 07:21:01 PM
The biggest problem is when a legit user needs help that they are able to get it without it becoming the Spanish Inquisition (no offence intended to the Spanish) to be able to get that help promptly.

We already have measures in place which impede on new legit members because of spammers, not being able to modify their profile or use the PM function (really not an issue as help should be through the forums no PM). These measures however, don't impede their ability to post and get help.
Title: Re: Spammers from Afganistan
Post by: YoKenny on September 23, 2009, 08:00:25 PM
No one expects the Spanish Inquisition:
http://www.youtube.com/watch?v=nHGOl-jfUK0