Forum spammers

Post by **kman** » Wed Mar 14, 2007 9:39 am

Spam just isn't for email anymore. A number of spammers also try to sign up for forums like these. Once they get signed up, they try a couple of things. First, they'll post spam messages - buy my viagra, buy my cellphones, download MS software here, etc. - all that crap.

They also setup their forum accounts with a web site address in their profile that leads back to a site that tries to sell you all that stuff - you know, those same sites they send you in email. But just having the site listed there is bad enough because Google indexes these posts and once that spam link gets indexed off this site, it rises up in Google's pagerankings. Sneaky bastards.

So any of you who have signed up for accounts here lately might have noticed that after you sign up, you get a personal email from me asking you to verify that you're human. Once you reply, I activate the account and you're all set. Since I've started doing this, I've only had one jackass actually reply that he was human and then still used his forum account to post spam.

One of the other things I do to verify that new accounts aren't from spammers is to Google their username and/or email address. A lot of these spammers are really spambots (non-humans) who are trolling the internet automatically looking for forums. Once they find one, they try to register an account. Fortunately, a lot of spambots use the same username/email address for multiple forums. A quick google search can show you where a new user has also registered for a bunch of other forums and even posted spam messages. This is great because I can then delete their account with even bothering with an email confirmation.

So...in order to help anyone else out there running forums, I'm going to start posting the usernames and email addresses of any spam accounts that try to register here. This way, if anyone else is searching for the same names, they should pick up this post.

Spam Accounts

Code: Select all

Username     Email     Email Name     Email Domain
--------------------------------------------------
TeenSex-ahne	SPAM ACCOUNT	teenwebcams@hotpop.com	teenwebcams	hotpop.com
hhynmtrxcp	SPAM ACCOUNT	tokbsdqa@pelotka.info	tokbsdqa	pelotka.info
mikefertynnz	SPAM ACCOUNT	mike@aberdeenwashingtonways.com	mike	aberdeenwashingtonways.com
Kartridzhej	SPAM ACCOUNT	thebaton@rambler.ru	thebaton	rambler.ru
GodBoyL	SPAM ACCOUNT	phr7@mail.bg	phr7	mail.bg
Aldous Huxley	SPAM ACCOUNT	soma@mozhno.net	soma	mozhno.net
paulsonrevelation	SPAM ACCOUNT	paulsonrevelation6915@yahoo.com	paulsonrevelation6915	yahoo.com
Jokesffrsd	SPAM ACCOUNT	aa@topsearchnet.info	aa	topsearchnet.info
vanseoling	SPAM ACCOUNT	vanseoling@zxc1.org	vanseoling	zxc1.org
ghimlybob	SPAM ACCOUNT	ghimlybob@marlboro-ez-cigarettes.com	ghimlybob	marlboro-ez-cigarettes.com
Beth Haynes	SPAM ACCOUNT	ktbau@hzvf.com	ktbau	hzvf.com
picturbikpi	SPAM ACCOUNT	piter@znahov.org	piter	znahov.org
FreePersonalads	SPAM ACCOUNT	instantservice888@yahoo.co.uk	instantservice888	yahoo.co.uk
Andreassen	SPAM ACCOUNT	bjorn.andreassen@ofirl.dk	bjorn.andreassen	ofirl.dk
Murtazin	SPAM ACCOUNT	loom12@gala.net	loom12	gala.net
kristoph	SPAM ACCOUNT	qwert@getmp3online.info	qwert	getmp3online.info
carlpoetovich	SPAM ACCOUNT	datingfree@ukr.net	datingfree	ukr.net
Money$c	SPAM ACCOUNT	vipinvest@inbox.lv	vipinvest	inbox.lv
BritneySpearsFun@@@	SPAM ACCOUNT	britney_spears_fun2007@krovatka.su	britney_spears_fun2007	krovatka.su
Monster	SPAM ACCOUNT	Monster@gj432jg-rrg.org	Monster	gj432jg-rrg.org
sweetieonetwo	SPAM ACCOUNT	sitkov_zenihan_7@inbox.ru	sitkov_zenihan_7	inbox.ru
cigarettesforall	SPAM ACCOUNT	cigarettes@buy-24h.net.ru	cigarettes	buy-24h.net.ru
animilius	SPAM ACCOUNT	animilius@tut.by	animilius	tut.by
Percocetti	SPAM ACCOUNT	flexx@emails.ru	flexx	emails.ru
siodzuki	SPAM ACCOUNT	siodzuki@i.ua	siodzuki	i.ua
somesaypon	SPAM ACCOUNT	somesaypon@me.by	somesaypon	me.by
weluvjessicaalba	SPAM ACCOUNT	jessicaalba@hotpop.com	jessicaalba	hotpop.com
TheBaton	SPAM ACCOUNT	thebaton@rambler.ru	thebaton	rambler.ru
buswzvxsio	SPAM ACCOUNT	mark@aberdeenwashingtonways.com	mark	aberdeenwashingtonways.com
paulsonrevelation	SPAM ACCOUNT	paulsonrevelation6915@yahoo.com	paulsonrevelation6915	yahoo.com
Derek Stuart	SPAM ACCOUNT	rnoeytl@bvhx.com	rnoeytl	bvhx.com
paulsonrevelation	SPAM ACCOUNT	paulsonrevelation6915@yahoo.com	paulsonrevelation6915	yahoo.com
ServisPaks	SPAM ACCOUNT	servispaks@websearchline.com	servispaks	websearchline.com
Leslie Wiley	SPAM ACCOUNT	clrlwpd@jgkx.com	clrlwpd	jgkx.com
briimmer	SPAM ACCOUNT	briimmer@lifefreestuff.com	briimmer	lifefreestuff.com
artloveroiuy	SPAM ACCOUNT	pher@bestessay.net	pher	bestessay.net
Tonyenjoyingnewlife	SPAM ACCOUNT	pitee@2talkabout.info	pitee	2talkabout.info
Abdo3	SPAM ACCOUNT	Abdo3@please-email-me.info	Abdo3	please-email-me.info
XRumer149	SPAM ACCOUNT	abraham761@domain626.com	abraham761	domain626.com
IrinaSH	SPAM ACCOUNT	irina_sh@gogophoto.com	irina_sh	gogophoto.com
xanax-buy-online.com	SPAM ACCOUNT	webmaster@xanax-buy-online.com	webmaster	xanax-buy-online.com
fereuet	SPAM ACCOUNT	aduer@list.ru	aduer	list.ru
Ipatiplakat	SPAM ACCOUNT	advert2005@tut.by	advert2005	tut.by
mishabdiyd	SPAM ACCOUNT	sagis@runbox.com	sagis	runbox.com
jeniaanddia	SPAM ACCOUNT	jeniaanddia1@bluebottle.com	jeniaanddia1	bluebottle.com
localsearchengine	SPAM ACCOUNT	localsearchengine@daixler.com	localsearchengine	daixler.com
mr.homamaker	SPAM ACCOUNT	workathome@takoe.com	workathome	takoe.com
DenterSeasl	SPAM ACCOUNT	dos12@10pharm.com	dos12	10pharm.com
VapDenterSea	SPAM ACCOUNT	dos1@10pharm.com	dos1	10pharm.com
Aleta Shepard	SPAM ACCOUNT	mucfy@iufz.com	mucfy	iufz.com
mohdbfbdd	SPAM ACCOUNT	dermo@hip-h0p.ru	dermo	hip-h0p.ru
huntbytnkbel	SPAM ACCOUNT	huntby@tut.by	huntby	tut.by
zeeerhooo	SPAM ACCOUNT	zeeerhooo@yandex.ru	zeeerhooo	yandex.ru
AdmiralUS	SPAM ACCOUNT	buysig@gmail.com	buysig	gmail.com
Kylasweetladyred	SPAM ACCOUNT	kyla@digitalhubs.info	kyla	digitalhubs.info
balagurin	SPAM ACCOUNT	gendolf@runbox.com	gendolf	runbox.com
BlogBusters	SPAM ACCOUNT	adsense@greatmoneynow.org	adsense	greatmoneynow.org
qtygvbxdllk	SPAM ACCOUNT	dave@aberdeenwashingtonways.com	dave	aberdeenwashingtonways.com
cell001	SPAM ACCOUNT	cellvilla001@hotmail.com	cellvilla001	hotmail.com
mikecar	SPAM ACCOUNT	autocar2007@ukr.net	autocar2007	ukr.net
cheesypeetyz	SPAM ACCOUNT	cheese@bestnewsfeeds.com	cheese	bestnewsfeeds.com
vinorin	SPAM ACCOUNT	gerantex@a.ua	gerantex	a.ua
Rachek	SPAM ACCOUNT	Rachek@phpbbspam.org	Rachek	phpbbspam.org
PaulRyansew	SPAM ACCOUNT	paulr@digitalhubs.info	paulr	digitalhubs.info
luffyplayaz	SPAM ACCOUNT	insure@alphaspace.org	insure	alphaspace.org
John-Cruse	SPAM ACCOUNT	service500@inbox.ru	service500	inbox.ru
shtechi	SPAM ACCOUNT	shtechi@lifefreestuff.com	shtechi	lifefreestuff.com
pizdukpr	SPAM ACCOUNT	promo@webology.ru	promo	webology.ru
cheggnafix	SPAM ACCOUNT	deliruiusee232@fateback.com	deliruiusee232	fateback.com
carbudty	SPAM ACCOUNT	carbudty@car-code.info	carbudty	car-code.info
dfghhdsfg	SPAM ACCOUNT	dfkgjdklf@2youn.info	dfkgjdklf	2youn.info
tramlll	SPAM ACCOUNT	verysorry@buytramadol.net	verysorry	buytramadol.net
anotherman	SPAM ACCOUNT	botsnapper@a.ua	botsnapper	a.ua
fyvkvkk	SPAM ACCOUNT	mastur2007@km.ru	mastur2007	km.ru
kikiopera	SPAM ACCOUNT	desa@fioe.info	desa	fioe.info
Raymond Rowe	SPAM ACCOUNT	jaxwav@nryk.com	jaxwav	nryk.com
Sigstores	SPAM ACCOUNT	hi@buy-24h.net.ru	hi	buy-24h.net.ru
teedino	SPAM ACCOUNT	teedin@zeos.net	teedin	zeos.net
Furnycrewer	SPAM ACCOUNT	furnmaster@yandex.ru	furnmaster	yandex.ru
DenterSeasj	SPAM ACCOUNT	dos13@10pharm.com	dos13	10pharm.com
Seomastak	SPAM ACCOUNT	seomastak@zeos.net	seomastak	zeos.net
AutoInsure	SPAM ACCOUNT	flexx@emails.ru	flexx	emails.ru
shmadowone	SPAM ACCOUNT	shmadowone@marlboro-ez-cigarettes.com	shmadowone	marlboro-ez-cigarettes.com
IrinaSH	SPAM ACCOUNT	irina_sh@gogophoto.com	irina_sh	gogophoto.com
prisanstor	SPAM ACCOUNT	prisanstor@inmail24.com	prisanstor	inmail24.com
dianndg	SPAM ACCOUNT	ddd@car-code.info	ddd	car-code.info
GRIENlord	SPAM ACCOUNT	grin@itua.info	grin	itua.info
medication	SPAM ACCOUNT	sositehuy@1net.gr	sositehuy	1net.gr
sweetyir	SPAM ACCOUNT	net6@thefoxemail.com	net6	thefoxemail.com
feroiodpiop	SPAM ACCOUNT	derop@fioe.info	derop	fioe.info
Trakitroki	SPAM ACCOUNT	trakitroki@o2.pl	trakitroki	o2.pl
dserbokim	SPAM ACCOUNT	day6@nm.ru	day6	nm.ru
Uksvets	SPAM ACCOUNT	sshmidt@protonet.ru	sshmidt	protonet.ru
Tarakana	SPAM ACCOUNT	tarakana@bigmir.net	tarakana	bigmir.net
Tyjuesopi	SPAM ACCOUNT	pxkxmrxw@myloginmail.info	pxkxmrxw	myloginmail.info
Patdread	SPAM ACCOUNT	patdread@bestwindriver.org	patdread	bestwindriver.org
loiqwe_tira	SPAM ACCOUNT	odsfzrvf@myloginmail.info	odsfzrvf	myloginmail.info
medicatus	SPAM ACCOUNT	drugspreview@mymail-in.net	drugspreview	mymail-in.net
GRIENlord	SPAM ACCOUNT	grin@itua.info	grin	itua.info
DenVerttTc	SPAM ACCOUNT	1123@1net.gr	1123	1net.gr
fgrioeprf	SPAM ACCOUNT	desa@fioe.info	desa	fioe.info
ringtone4fun	SPAM ACCOUNT	ringtone4fun@gmail.com	ringtone4fun	gmail.com

deanopilot · Post by **deanopilot** » Thu Mar 15, 2007 1:13 pm

good job kman. I appreciate all the hard work you do keeping the forum functioning.

dermeister025 · Post by **dermeister025** » Thu Mar 15, 2007 11:56 pm

deanopilot wrote:good job kman. I appreciate all the hard work you do keeping the forum functioning.

I'll second that! Should I ever find myself in North Carolina, i shall have to buy kman a beer or 12!

Post by **kman** » Fri Mar 16, 2007 11:32 am

Thanks, guys - I appreciate all the kind words. I may keep the forums running but you guys are the ones keeping it interesting.

Demoncase · Post by **Demoncase** » Fri Mar 16, 2007 11:55 am

Good job mate...I'm admin on my own forum too and we have the same issue...

Another possibility that Kman hasn't mentioned is that some of these bots are there to allow hackers to break into the personal data held for each member and then phish with your passwords....it nearly happened on my team forum as we'd forgotten to remove the automatic member approval after a period of time: they logged on and simply waited to be approved...

warm · Post by **warm** » Mon Mar 26, 2007 10:29 am

kman,

I noticed that you have disabled the viewing of profiles unless you are logged in. Your recognition that the ultimate goal of forum spammers is exposure (more to search bots than individual users, even) is vital to nullifying their effectiveness, and ultimately, their desire to continue spamming.

I've found that simply blocking email addresses is not enough - there are a virtually unlimited number of potential spam domains, and no matter how many domains (or IP address ranges) are blocked, more will find a way to get through, or worse - legitimate users will be inadvertently blocked.

I don't know how much phpBB source hacking you're up to, but some of the things I've done (and I can post/email code if you'd like) include:
-preventing users from registering with data in the signature, webpage, and location fields; since most SPAM bots POST this information regardless of the status of the "disabled" attribute in a form field, you can detect bots by detecting non-null data from those fields
-checks to see if the referrer is from my website (bots tend to have non-standard referral patterns)
-user agent bans (spammers use programs that sometimes have fake user agents)

The spammers that get through on my website usually end up registering manually... but even when they do get through, their profiles are not viewable until I confirm legitimacy. A really determined spammer will find that he is only wasting his time when his purpose (exposure) is still not fulfilled after a successful registration.

I also have a huge list of blacklisted IP addresses... but those get tedious, and I prefer simple.

Nevertheless, I'd be happy to share those offenders as well.

DangerousDave · Post by **DangerousDave** » Sun Sep 02, 2007 10:50 pm

Who'de a thunk it? Maybe someone like Cagin angel/clara whatever it's name is. I still fail to see how spammers make money, except maybe the top 50 in the world(33 of which are in prison)

Post by **kman** » Sun Sep 02, 2007 11:04 pm

I think the thing with forum spammers is that they're just trying to get their name/website out there and indexed by google. So if for whatever reason, someone searches for "viagra" or "cigarettes", they might see the spammers site.

In case anyone was still interested, a little while after I posted this thread, I found an even better method of keeping out the robots. These days, when you sign up for an MREInfo.com forums account, you're also asked a question that hopefully only a human can answer. You know, something like "What's the fifth letter in the word 'everything'?".

Believe it or not, that's almost completely stopped all the spambots from registering here. I'm still doing the manual "human check" (send them an email asking if they're human) most of the time and so far, these new measures have done the trick.

C-rats · Post by **C-rats** » Mon Sep 03, 2007 11:52 am

There aren't any spambots portraying themselves as freeze-dried pork chops these days are there? (guess that would make them a "spamchop" wouldn't it?)

Some days, I even crack myself up!

(ok,ok....I know where the door is. I'll go now

)