Announcement

Collapse
No announcement yet.

Spam overkill!

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    #16
    these were the IPs of the threads I killed in one sub-forum. Does anyone understand the correlation? Usually the numbers are all over the place but these are very similar
    119.30.32.115
    119.30.32.193
    119.30.35.8
    119.30.38.197
    119.30.39.85
    119.30.47.5
    several more threads and very similar IPs
    172.110.128.11
    173.239.197.69
    173.245.71.14
    184.75.212.4
    185.210.217.133
    185.230.127.27
    216.158.232.125
    82.102.18.3
    82.102.18.99
    Simon
    Current Cars:
    -1986 BMW 325e & 1968 Datsun Roadster 2000
    Previous Car Count : 21 ... and climbing...
    Originally posted by Melon
    Let it be known to all. Simon fucking keeps it real.

    Comment


      #17
      Any indication of geographical locations ?

      Perhaps a blanket ban is in order... ;-)
      Brake harder. Go faster. No shit.

      massivebrakes.com

      http://www.facebook.com/pages/Massiv...78417442267056





      Comment


        #18
        we need to build a wall
        Originally posted by wholepailofwater
        Q
        :devil:


        WTB: Dove Grey e36 Front Door Panels (2 door)

        Comment


          #19
          Well, the Class A section is in Bangladesh (119.30), and was in a network from 119.30.32.0 - 119.30.47.255 (so the .5 is just out of range to that network, but the same none the less.)

          Honestly, if you blocked everything in the 119. - I doubt there would be any windfall.
          1984 Alpina B6 2.8/1 #35
          1991 325i MT2 Touring (JDM bro)
          1991 Racecar (Chase Schmidt's former drift car - M30)
          2006 BMW X3
          2011 Audi A3 - wife's other German car

          Comment


            #20
            Possible Spammers That Registered So Far Today

            Take a look at the list below of some of the new members that registered on this site this morning. Does anything look unusual? It does to me.

            User Name/Join Date/Posts/Location/E30

            lendlsim Today 0 Las Vegas 2014
            isckobisn Today 0 las vegas 2011
            simmonslen Today 0 Las Vegas 2013
            altiwange Today 0 las vegas 2011
            toucnhdown Today 0 las vegas 2011
            kemarroa Today 0 Las Vegas 2012
            roachkem Today 0 Las Vegas 2013
            mistbundy Today 0 las vegas 2011
            hanieelle Today 0 las vegas 2011
            samuebadr Today 0 Las Vegas 2012
            ckielevine Today 0 las vegas 2011
            aguilerasa Today 0 las vegas 2011
            badresamu Today 0 Las Vegas 2014
            nciencharl Today 0 las vegas 2011
            theavadam Today 0 las vegas 2011
            dalestey Today 0 Las Vegas 2012
            trishnessw Today 0 las vegas 2011
            steydale Today 0 Las Vegas 2012
            businider Today 0 las vegas 2011

            Don't you find it odd that...

            1. The user names seem to fit a pattern where, for the most part, they appear to be gibberish.
            2. They all list their location as Las Vegas
            3. only a year is listed for E30
            4. No one has posted (so far)

            19 folks, all from Las Vegas, decided to register on this forum today. Most legitimate users would have a non-zero post count, and if checked, their post(s) would be legitimate too.

            I only wish I had the wherewithal on this site to look up the IP addresses when they registered. I'd bet any money that none of them are from the United States, much less Las Vegas. And if the IP address did say United States, I'd have to say the IP address was spoofed. Yes, spammers spoof IP address, just like those telemarketing scammers that spoof the caller ID to make you think the call is legitimate.

            The "life expectancy" of a spammer's membership is only as long they're able to post their spam before being banned, which in most cases is not more than a few posts. They consider their memberships "disposable" and expect to be banned. Then they simply register again under a new user name to continue their spamming.

            Comment


              #21
              185.156.175.142
              185.210.217.132
              185.183.106.28
              180.149.231.241
              180.149.231.241
              185.183.106.28
              185.183.106.28
              89.238.185.125
              37.48.65.49
              185.183.106.28
              185.212.171.210
              178.175.132.27
              84.39.112.21
              178.175.132.28
              94.126.173.125
              84.39.112.21
              180.149.231.252
              185.183.106.28
              41.185.17.106




              I think I got them in order as you have them listed
              1992 BMW 325iC
              1965 Chevrolet Corvair Monza 140hp

              Comment


                #22
                Here are the locations according to Whois. You can look these IP addresses up yourself at: http://cqcounter.com/whois/

                lendlsim Today 0 Las Vegas 2014, 185.156.175.142, CH, Switzerland
                isckobisn Today 0 las vegas 2011, 85.210.217.132, BE, Belgium
                simmonslen Today 0 Las Vegas 2013, 185.183.106.28, ES, Spain
                altiwange Today 0 las vegas 2011, 180.149.231.241, NZ, New Zealand
                toucnhdown Today 0 las vegas 2011, 180.149.231.241, NZ, New Zealand
                kemarroa Today 0 Las Vegas 2012, 185.183.106.28, ES, Spain
                roachkem Today 0 Las Vegas 2013, 185.183.106.28, ES, Spain
                mistbundy Today 0 las vegas 2011, 89.238.185.125, NL, Netherlands
                hanieelle Today 0 las vegas 2011, 37.48.65.49, NL, Netherlands
                samuebadr Today 0 Las Vegas 2012, 185.183.106.28, ES, Spain
                ckielevine Today 0 las vegas 2011, 185.212.171.210, NL, Netherlands
                aguilerasa Today 0 las vegas 2011, 178.175.132.27, MD, Moldova, Republic of
                badresamu Today 0 Las Vegas 2014, 84.39.112.21, CH, Switzerland
                nciencharl Today 0 las vegas 2011, 178.175.132.28, MD, Moldova, Republic of
                theavadam Today 0 las vegas 2011, 94.126.173.125, PT, Portugal
                dalestey Today 0 Las Vegas 2012, 84.39.112.21, CH, Switzerland
                trishnessw Today 0 las vegas 2011, 180.149.231.252, NZ, New Zealand
                steydale Today 0 Las Vegas 2012, 185.183.106.28, ES, Spain
                businider Today 0 las vegas 2011, 41.185.17.106, ZA, South Africa

                Correct me if I'm wrong, but I don't think any of these countries have a city called Las Vegas.

                Comment


                  #23
                  Um yeah. Spammers never put their correct location, thought this was common knowledge.
                  1992 BMW 325iC
                  1965 Chevrolet Corvair Monza 140hp

                  Comment


                    #24
                    Originally posted by JasonC View Post
                    Um yeah. Spammers never put their correct location, thought this was common knowledge.
                    my kid uses a vpn when squirrling on the DW. it changes his isp location every time he moves about.... no tracks... genious.
                    i don't have a hard time nailing him down to the dinner table though thankfully...
                    ~~~~~~~~~~~~~~~~~
                    '90 325i sedan daily driven
                    '85 325e coupe also a daily

                    Comment


                      #25
                      Just got a few PM's from new user fredd1 who is an obvious scammer perusing the Wanted forum. FYI.

                      Comment


                        #26
                        Originally posted by deansbimmer View Post
                        Just got a few PM's from new user fredd1 who is an obvious scammer perusing the Wanted forum. FYI.
                        Yep, he's been reported and will be dealt with accordingly. Thanks!
                        Originally posted by kronus
                        would be in depending on tip slant and tube size

                        Comment


                          #27
                          I thought this was weird.

                          Spammer had two posts and when I went to ban and delete, it showed that he was using two different IPs...

                          138.197.26.186
                          138.197.31.58
                          Simon
                          Current Cars:
                          -1986 BMW 325e & 1968 Datsun Roadster 2000
                          Previous Car Count : 21 ... and climbing...
                          Originally posted by Melon
                          Let it be known to all. Simon fucking keeps it real.

                          Comment


                            #28
                            138.197.26.186, US, United States, Clifton, NJ 07014
                            138.197.31.58, US, United States, Clifton, NJ 07014

                            The organization name for both servers show DuPont. If it's the DuPont I'm familiar with, They're large enough to have servers coming out the wazoo. Just looking at the IP's without any other knowledge, they could be legit. Most of the spammers I've banned spoof one or both (Registration and Post) IP addresses and when I do a Whois on them, they often show them being in two completely different countries. Some of the "smarter" ones will spoof the IP of a US server when they register to make you think they're legit and then use their actual (usually foreign) IP when they post. Remember, a spammer's life on a forum is only as long as his spam is permitted to be seen by his audience. They know they're going to be banned once they're discovered, so it's not important to spoof the IP.

                            Comment


                              #29
                              It almost seems like itíd be easier to wait for approval of new user accounts, and making them answer actual E30 related questions.

                              Far easier to Whitelist new approved user, than blacklisting up address.

                              But thatís just my thoughts.


                              Sent from my iPhone using Tapatalk
                              1984 Alpina B6 2.8/1 #35
                              1991 325i MT2 Touring (JDM bro)
                              1991 Racecar (Chase Schmidt's former drift car - M30)
                              2006 BMW X3
                              2011 Audi A3 - wife's other German car

                              Comment


                                #30
                                I'd honestly be up for approving new members. I've been checking new members for the past 2 months everyday. Since some spammers will register but not post right away. I can't be on here 24/7 And don't expect the rest of the staff to be either. But with a approval of registration, one can check once or twice a day and just boot the spammers that way.
                                1992 BMW 325iC
                                1965 Chevrolet Corvair Monza 140hp

                                Comment

                                Working...
                                X