Belegarth

by **Black Cat** » Fri Jan 13, 2012 4:09 pm

by **Black Cat** » Fri Jan 13, 2012 10:26 pm

Something stinks about this "member".

memberlist.php?mode=viewprofile&u=16650

This is the third time he has posted "Please Remove" and "I found the answer in Google" with a link to google.co.uk.

Edit: Looks like more spam. memberlist.php?mode=viewprofile&u=16700

by **Black Cat** » Sat Jan 14, 2012 2:52 am

M-M-M-Monster Spam Spam Spam Spam!

memberlist.php?mode=viewprofile&u=16708

by **Black Cat** » Sat Jan 14, 2012 2:43 pm

Voyeurism?

memberlist.php?mode=viewprofile&u=16731

by **Black Cat** » Sun Jan 15, 2012 3:09 am

Spampage!
memberlist.php?mode=viewprofile&u=16773

"Read about electronic cigarette reviews"
memberlist.php?mode=viewprofile&u=16758

by **Black Cat** » Sun Jan 15, 2012 6:49 pm

Black Cat wrote:Something stinks about this "member".

memberlist.php?mode=viewprofile&u=16650

This is the third time he has posted "Please Remove" and "I found the answer in Google" with a link to google.co.uk.

Looks like he's back.

memberlist.php?mode=viewprofile&u=16808

Same exact post as the last three.

In General Mayhem:

NikolasTesla wrote:I found the answer in google, remove the topic pls.

by **Zeldrine Cold** » Mon Jan 16, 2012 8:44 am

memberlist.php?mode=viewprofile&u=16836
memberlist.php?mode=viewprofile&u=16820
memberlist.php?mode=viewprofile&u=16833
memberlist.php?mode=viewprofile&u=16657
memberlist.php?mode=viewprofile&u=16841

Omg SPAM city today. I suspect an IP ban is going to be needed. There are alot out today.

Edit: 16841 seems to be a repeat offender.

by **Derian** » Mon Jan 16, 2012 10:55 am

The boards will likely be unavailable for a short while later today (tonight, likely) while I do some updates & tweaking to help reduce the spam problem.

by **Zeldrine Cold** » Mon Jan 16, 2012 2:14 pm

Yet another one to add to the list today:

memberlist.php?mode=viewprofile&u=16861

Edit: Seriously?

memberlist.php?mode=viewprofile&u=16863

by **Derian** » Mon Jan 16, 2012 6:07 pm

Update completed. Hopefully this cuts down on the amount of spam bots we get.

by **Black Cat** » Mon Jan 16, 2012 10:21 pm

Black Cat wrote:
Black Cat wrote:Something stinks about this "member".

memberlist.php?mode=viewprofile&u=16650

This is the third time he has posted "Please Remove" and "I found the answer in Google" with a link to google.co.uk.

Looks like he's back.

memberlist.php?mode=viewprofile&u=16808

Same exact post as the last three.

In General Mayhem:
NikolasTesla wrote:I found the answer in google, remove the topic pls.

"Tesla" Again. :roll:

memberlist.php?mode=viewprofile&u=16888

And, more spam:
memberlist.php?mode=viewprofile&u=16820

by **Zeldrine Cold** » Tue Jan 17, 2012 7:48 am

Here we go again:
memberlist.php?mode=viewprofile&u=16920
memberlist.php?mode=viewprofile&u=16833
memberlist.php?mode=viewprofile&u=16907
memberlist.php?mode=viewprofile&u=16909

by **Derian** » Tue Jan 17, 2012 9:14 am

The registration spam check has been updated.

by **Zeldrine Cold** » Tue Jan 17, 2012 9:38 am

Are they coming from the same IP range or is it so widespread to cause confusion?

by **Zeldrine Cold** » Tue Jan 17, 2012 10:30 am

The bots are smarter than we thought:
memberlist.php?mode=viewprofile&u=16772

by **Derian** » Tue Jan 17, 2012 11:35 am

It's random IPs from infected computers all over the world. Unfortunately it's not as easy as simply blocking a particular netblock.

That most recent one actually registered two days ago. I'm hopeful that the new anti-spam question will stop new registrations.

by **Mint** » Wed Jan 18, 2012 3:55 pm

Yikes.
memberlist.php?mode=viewprofile&u=16741

by **Zeldrine Cold** » Thu Jan 19, 2012 7:56 am

From their profile numbers I am assuming that these are lurkers from before the lock down:

memberlist.php?mode=viewprofile&u=16689
memberlist.php?mode=viewprofile&u=16802

by **Derian** » Thu Jan 19, 2012 11:56 am

by **Black Cat** » Tue Jan 24, 2012 7:13 am

Is this a bot or a strange troll?

memberlist.php?mode=viewprofile&u=16937

by **Zeldrine Cold** » Tue Jan 24, 2012 10:04 am

memberlist.php?mode=viewprofile&u=16934

by **Zeldrine Cold** » Wed Feb 01, 2012 7:21 am

memberlist.php?mode=viewprofile&u=16627

by **Zeldrine Cold** » Wed May 09, 2012 8:40 am

memberlist.php?mode=viewprofile&u=16793

Wow this one hung around for awhile.

by **Rasheab** » Wed Jun 27, 2012 10:09 pm

Loce1934

viewtopic.php?f=4&t=40509

by **Sir Thurat** » Wed Jul 18, 2012 12:40 pm

http://geddon.org/Good_options_to_produ ... s_internet
http://geddon.org/ReidHoller622
http://geddon.org/PelfreyNissen897
http://geddon.org/SorensenMarco131
http://geddon.org/Michael_Owen_with_som ... ddy_tho_58
http://geddon.org/User:Bao239dling

Don't know if there is a specific thread for Geddon spam, so I'll just leave this here.

EDIT: found more links to add

by **Galya** » Wed Jul 18, 2012 2:17 pm

Took care of all the ones you listed. Must've missed some during the days when we were getting like 500 bots a day. You can list the ones you've found and I'll delete them. And how are you finding them anyway?

by **Zeldrine Cold** » Fri Jul 20, 2012 8:30 am

memberlist.php?mode=viewprofile&u=17169

seems really fishy to me.

by **Akbar the Foul** » Mon Jul 30, 2012 1:02 am

we've got Ivans in GenMay

by **Embara Cayosin** » Sat Aug 11, 2012 7:15 am

memberlist.php?mode=viewprofile&u=17204
memberlist.php?mode=viewprofile&u=17202

looks like a manual set up for bots. plus they joined back to back almost

by **Tails** » Thu Sep 06, 2012 11:28 am

memberlist.php?mode=viewprofile&u=17230

is there a way to create a rule that bans anyone claiming to have started fighting JUN, 15, 1985?

by **Derian** » Thu Sep 06, 2012 1:21 pm

Not practically, no.

by **Zeldrine Cold** » Wed Sep 12, 2012 1:05 pm

memberlist.php?mode=viewprofile&u=17240

Whomever this is setting these up is annoying.

by **Zeldrine Cold** » Wed Oct 03, 2012 4:51 pm

memberlist.php?mode=viewprofile&u=17261

Obviously just trying to drum up business.

by **Rasheab** » Sat Jan 05, 2013 3:40 am

viewtopic.php?f=85&t=40991

by **Sir Thurat** » Wed Feb 13, 2013 7:33 pm

memberlist.php?mode=viewprofile&u=17340

Do not know if spam....

These things are getting smarter.

by **Capito** » Thu Feb 14, 2013 1:14 am

It's probably a spammer. You can tell by the nonsensical realm and the URL in the signature.... but it's pretty tricky, I agree.

If you search for the username online, you will find that the same user has posted on various boards under different interests, usually three posts with the first post having a link to a weapons shop in their signature.

These spammers don't expect to have people buy their products from their signature link. Their purpose is to get a higher search result on Google by linking to their site from other sites with their signature: