Bitcoin Forum
September 18, 2018, 04:50:58 PM *
News: Latest stable version of Bitcoin Core: 0.16.2  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 [2]  All
  Print  
Author Topic: Spambots (backlink spam and whatnot) - ie Zombie Accounts TM  (Read 1853 times)
Timelord2067
Legendary
*
Offline Offline

Activity: 1596
Merit: 1088


https://www.timelord2067.com/forums/index.php


View Profile WWW
October 26, 2016, 07:28:55 AM
 #21

Sorry about the teething problems.  If it says they were previously nuked, they were previously nuked.

I've still got to move the ones from your thread "Farmed accounts... allowed?" and tidy up which ones have been nuked since I posted over there.

I'll do it all tomorrow I hope.

Quote
Were KNC_areThief already nuked before today?
Are they nuked now.

Yes. (I wasn't aware they had been, thus I changed the details)
Yes. (that's why it was changed)

Science Fiction Fantasy and Horror (and Conventions) Forum #SFFHCF is now live after reset https://www.timelord2067.com/forums/index.php see also Twitter Post - READY FOR A TREE CHANGE? Only $179,000 (AU$) for a 13.06 hectare (32 acres) fully timbered, secluded block in South-East Qld. Various house sites, predominantly north facing, halfway between Gympie & Tin Can Bay, 10 mins drive to local primary school https://www.facebook.com/nevkanerealestate/posts/1583146505116067 --- Known Alts of any-one - A User Generated List Mk III | SEXCoin Forum | Broadcast Your RAW Transaction | Get Paid in BitCoin | (NetHack 3.6.0 Hearse V 1.0.6e) | Twitter: @Timelord2067 Retweet ≠ endorsement | Other Forums: #BritishFolk #SFFHCF | Vanity Wallet Generation | Wallet Verified | ? BTC SXC | (USA) Donate Blood today at One Blood dot ORG | £ $ ₹ € ¥ ¢ ? ÷ BTC I am not an escrow service... | My proof quickseller is an Alt of master-P has been deleted by BitCoinTalk - read archived version here:
1537289458
Hero Member
*
Offline Offline

Posts: 1537289458

View Profile Personal Message (Offline)

Ignore
1537289458
Reply with quote  #2

1537289458
Report to moderator
Make a difference with your Ether.
Donate Ether for the greater good.
SPRING.WETRUST.IO
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
Timelord2067
Legendary
*
Offline Offline

Activity: 1596
Merit: 1088


https://www.timelord2067.com/forums/index.php


View Profile WWW
October 27, 2016, 03:36:16 AM
 #22

Ported from the Account farming. Allowed? pages...

News in their "website" - nets 58 pages  » NOT TACKLED 1,740 UID's (95+%) 1,650 are Brand New / Newbies with *news* in their "website", so again, they haven't been Nuked.

ii in their "website" - nets just 31 UID's  » NOT TACKLED of 31 UID's 28 are Brand New / Newbies with *ii* in their "website", so again, they haven't been Nuked.

ii in their "messenger nickname" - nets just 58 UID's  » NOT TACKLED of 58 UID's 56 are Brand New / Newbies with *ii* in their "messenger nickname", so again, they haven't been Nuked.

ii in their "email" - nets 27 pages  » NOT TACKLED 810 UID's (95+%) 770 are Brand New / Newbies with *ii* in their "email", so again, they haven't been Nuked.

ii in their "search by name" - nets 97 pages  » NOT TACKLED 2,910 UID's (95+%) 2,765 are Brand New / Newbies with *ii* in their "search by name", however, this one is a little tricky as not all have other information, such as website or email etc.  But have clear creation dates that suggest bulk creations.

nor9 - nets Just 45 UID » NOT TACKLED 38/45 UID's (84.44+%) 38



KXK - Just three not nuked...  Undecided

Science Fiction Fantasy and Horror (and Conventions) Forum #SFFHCF is now live after reset https://www.timelord2067.com/forums/index.php see also Twitter Post - READY FOR A TREE CHANGE? Only $179,000 (AU$) for a 13.06 hectare (32 acres) fully timbered, secluded block in South-East Qld. Various house sites, predominantly north facing, halfway between Gympie & Tin Can Bay, 10 mins drive to local primary school https://www.facebook.com/nevkanerealestate/posts/1583146505116067 --- Known Alts of any-one - A User Generated List Mk III | SEXCoin Forum | Broadcast Your RAW Transaction | Get Paid in BitCoin | (NetHack 3.6.0 Hearse V 1.0.6e) | Twitter: @Timelord2067 Retweet ≠ endorsement | Other Forums: #BritishFolk #SFFHCF | Vanity Wallet Generation | Wallet Verified | ? BTC SXC | (USA) Donate Blood today at One Blood dot ORG | £ $ ₹ € ¥ ¢ ? ÷ BTC I am not an escrow service... | My proof quickseller is an Alt of master-P has been deleted by BitCoinTalk - read archived version here:
Timelord2067
Legendary
*
Offline Offline

Activity: 1596
Merit: 1088


https://www.timelord2067.com/forums/index.php


View Profile WWW
November 05, 2016, 12:29:27 AM
 #23

emails:

gmail.com in their "email" - nets 336 pages  » NOT TACKLED 10,080 UID's

A large number of random pages were 100% Brand New / Newbies, while some other pages dropped to 90% 80% Even if we said as little as 50+% this works out to be 5,000 are Brand New / Newbies with *gmail.com* in their "email", so again, they haven't been Nuked. ( 0.54% of all UID's on BCT ) (at 90% this means 1% of BCT UID's are Brand New / Newbies with *gmail.com* in their email.

yahoo.com in their "email" - nets 54 pages  » NOT TACKLED 1,600 UID's (90+%) ~1,450 are Brand New / Newbies with *yahoo.com* in their "email", so again, they haven't been Nuked.

hotmail.com in their "email" - nets 52 pages  » NOT TACKLED 1540 UID's (90+%) ~1,400 are Brand New / Newbies with *hotmail.com* in their "email", so again, they haven't been Nuked.

mail.ru in their "email" - nets 15 pages  » NOT TACKLED 450 UID's (95+%) ~425 are Brand New / Newbies with *mail.ru* in their "email", so again, they haven't been Nuked.

rocketmail.com in their "email" - nets *just* 24 users  » NOT TACKLED just four are not Brand New / Newbies with *rocketmail.com* in their "email", so again, they haven't been Nuked.

.edu in their "email" - nets *just* 48 users  » NOT TACKLED just three are not Brand New / Newbies with *.edu* in their "email", so again, they haven't been Nuked.

Science Fiction Fantasy and Horror (and Conventions) Forum #SFFHCF is now live after reset https://www.timelord2067.com/forums/index.php see also Twitter Post - READY FOR A TREE CHANGE? Only $179,000 (AU$) for a 13.06 hectare (32 acres) fully timbered, secluded block in South-East Qld. Various house sites, predominantly north facing, halfway between Gympie & Tin Can Bay, 10 mins drive to local primary school https://www.facebook.com/nevkanerealestate/posts/1583146505116067 --- Known Alts of any-one - A User Generated List Mk III | SEXCoin Forum | Broadcast Your RAW Transaction | Get Paid in BitCoin | (NetHack 3.6.0 Hearse V 1.0.6e) | Twitter: @Timelord2067 Retweet ≠ endorsement | Other Forums: #BritishFolk #SFFHCF | Vanity Wallet Generation | Wallet Verified | ? BTC SXC | (USA) Donate Blood today at One Blood dot ORG | £ $ ₹ € ¥ ¢ ? ÷ BTC I am not an escrow service... | My proof quickseller is an Alt of master-P has been deleted by BitCoinTalk - read archived version here:
rizzlarolla
Hero Member
*****
Offline Offline

Activity: 798
Merit: 1001


View Profile
November 10, 2016, 07:30:57 PM
 #24

I have been spotting these "- letters - numbers - letters - @163.com
As you can see, some are very recently active, many others inactive.
These consecutive accounts listed here are all chinese.
This list is followed by a full scale chinese account farming attack over the next few hundreds of account registrations on this day, June 4 2016.
(most of those active accounts having a different style of name and a much higher activity)

Code:
853728 zd6402763xie@163.com             21 September 09 2016 07:25:28 PM
853729 Illuminatinglywtyx                       0 June 04 2016 05:30:59 AM
853730 jt4979328qia@163.com             20 September 09 2016 07:24:40 PM
853731 BklbteRoplmi                               0 June 04 2016 05:37:15 AM
853732 ssp5296226fanyi@163.com         0 June 16 2016 09:24:32 AM
853733 c51923648yipushi6@163.com     20 September 09 2016 07:12:59 PM
853734 ubw5727316xian@163.com               0 June 16 2016 09:26:05 AM
853735 hc90753337shayan1@163.com       1 June 04 2016 11:19:22 AM
853736 jua0920175zi@163.com               0 June 14 2016 01:05:54 PM
853737 vfiy99025476shi@163.com               1 June 04 2016 11:18:13 AM
853738 odm0692709tuimao5@163.com       1 June 04 2016 11:17:49 AM
853739 erm4424810mei@163.com               1 June 04 2016 11:15:08 AM
853740 xh91149956qindu90@163.com     21 October 24 2016 12:46:51 PM
853741 y92172320liaoz@163.com               0 June 04 2016 05:39:38 AM

Could you find out how many of these "...@ 163.com" accounts have registered?
LoyceV
Legendary
*
Offline Offline

Activity: 1246
Merit: 1916


Let's make Bitcointalk great again!


View Profile WWW
November 10, 2016, 08:10:35 PM
 #25

I have been spotting these "- letters - numbers - letters - @163.com
Isn't this just a Chinese webmail provider? I can't read the site.
Then again, it doesn't make sense to use the email address as a username.

rizzlarolla
Hero Member
*****
Offline Offline

Activity: 798
Merit: 1001


View Profile
November 10, 2016, 08:26:34 PM
 #26

I have been spotting these "- letters - numbers - letters - @163.com
Isn't this just a Chinese webmail provider? I can't read the site.
Then again, it doesn't make sense to use the email address as a username.

"Then again, it doesn't make sense to use the email address as a username."  again and again over consecutive accounts and over days/weeks.
They look like other spam account attacks that have/will be nuked.

BTW, when i typed "...@ 163.com" (without the gap) on the above post, it showed as a live link to my email when posted.
I edited, placing a gap between @ and 163, problem solved.
Is that normal?
Timelord2067
Legendary
*
Offline Offline

Activity: 1596
Merit: 1088


https://www.timelord2067.com/forums/index.php


View Profile WWW
November 11, 2016, 07:32:12 AM
 #27

If you click "members" then "search for members" then enter

Code:
163.com

with Search by email address and Search by name ticked, you get 26 pages of results, most of which look to be "Brand New" or "Newbies"

It looks like 90% + are farmed - same / next day creation or similar name patterns.

So, some 700 UID's that are most likely farmed with 163.com in their email / name.

*edit*

Some random UIDs

Quote
m6±ÕÔÂÐß»¨
15337219280@163.COM                      Brand new    2015-10-17    0    
13867368187@163.com                      Brand new    2015-10-17    0    
(xuxin19950809@163.com
13504508583@163.com

qetbnjki    Email                   Brand new    2014-07-31    0    
ehfjsknj    Email                   Brand new    2014-08-01    0    
kedjcsdk    Email                   Brand new    2014-08-03    0    
tedhskib    Email                   Brand new    2014-08-05    0    
ejnheucb

and yes, that open bracket is part of the user name...

Science Fiction Fantasy and Horror (and Conventions) Forum #SFFHCF is now live after reset https://www.timelord2067.com/forums/index.php see also Twitter Post - READY FOR A TREE CHANGE? Only $179,000 (AU$) for a 13.06 hectare (32 acres) fully timbered, secluded block in South-East Qld. Various house sites, predominantly north facing, halfway between Gympie & Tin Can Bay, 10 mins drive to local primary school https://www.facebook.com/nevkanerealestate/posts/1583146505116067 --- Known Alts of any-one - A User Generated List Mk III | SEXCoin Forum | Broadcast Your RAW Transaction | Get Paid in BitCoin | (NetHack 3.6.0 Hearse V 1.0.6e) | Twitter: @Timelord2067 Retweet ≠ endorsement | Other Forums: #BritishFolk #SFFHCF | Vanity Wallet Generation | Wallet Verified | ? BTC SXC | (USA) Donate Blood today at One Blood dot ORG | £ $ ₹ € ¥ ¢ ? ÷ BTC I am not an escrow service... | My proof quickseller is an Alt of master-P has been deleted by BitCoinTalk - read archived version here:
Timelord2067
Legendary
*
Offline Offline

Activity: 1596
Merit: 1088


https://www.timelord2067.com/forums/index.php


View Profile WWW
December 10, 2017, 09:50:48 AM
 #28

Is anyone able to determine whether or not the 20 UID's with the expression

Code:
qazwsx

have been Nuked or not?  (About half have URL's, so maybe not)

or the 16 UID's with the expression

Code:
keelingef

which are activity zero, but have URL's in their profiles...

Science Fiction Fantasy and Horror (and Conventions) Forum #SFFHCF is now live after reset https://www.timelord2067.com/forums/index.php see also Twitter Post - READY FOR A TREE CHANGE? Only $179,000 (AU$) for a 13.06 hectare (32 acres) fully timbered, secluded block in South-East Qld. Various house sites, predominantly north facing, halfway between Gympie & Tin Can Bay, 10 mins drive to local primary school https://www.facebook.com/nevkanerealestate/posts/1583146505116067 --- Known Alts of any-one - A User Generated List Mk III | SEXCoin Forum | Broadcast Your RAW Transaction | Get Paid in BitCoin | (NetHack 3.6.0 Hearse V 1.0.6e) | Twitter: @Timelord2067 Retweet ≠ endorsement | Other Forums: #BritishFolk #SFFHCF | Vanity Wallet Generation | Wallet Verified | ? BTC SXC | (USA) Donate Blood today at One Blood dot ORG | £ $ ₹ € ¥ ¢ ? ÷ BTC I am not an escrow service... | My proof quickseller is an Alt of master-P has been deleted by BitCoinTalk - read archived version here:
Pages: « 1 [2]  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!