Bitcoin Forum
December 04, 2016, 10:31:20 PM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: How does the klamm.us scammer spammer get out of newbie gaol?  (Read 2222 times)
organofcorti
Donator
Legendary
*
Offline Offline

Activity: 1946


Poor impulse control.


View Profile WWW
May 09, 2012, 12:21:14 PM
 #1

This guy has been spamming bitcointalk all day, and under current username has only four posts. How's he able to spam outside of the newbie section?

https://bitcointalk.org/index.php?topic=80366.0
https://bitcointalk.org/index.php?topic=80364.0
https://bitcointalk.org/index.php?topic=80365.0
https://bitcointalk.org/index.php?topic=80368.0
https://bitcointalk.org/index.php?topic=80366.0

just for starters ....

In fact his last posts (six now) have all been spamming. No real posts made at all.

https://bitcointalk.org/index.php?action=profile;u=57620;sa=showPosts

Bitcoin network and pool analysis 12QxPHEuxDrs7mCyGSx1iVSozTwtquDB3r
follow @oocBlog for new post notifications
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1480890680
Hero Member
*
Offline Offline

Posts: 1480890680

View Profile Personal Message (Offline)

Ignore
1480890680
Reply with quote  #2

1480890680
Report to moderator
BadBear
v2.0
Administrator
Legendary
*
Offline Offline

Activity: 1652



View Profile WWW
May 09, 2012, 12:28:32 PM
 #2

I'm on it  Wink

And newbies are allowed to post in the local language subforums, unless that area has it's own newbie section (only one or two do I think).

Persistent, I'll give him that.


1Kz25jm6pjNTaz8bFezEYUeBYfEtpjuKRG | PGP: B5797C4F

Tired of annoying signature ads? Ad block for signatures
organofcorti
Donator
Legendary
*
Offline Offline

Activity: 1946


Poor impulse control.


View Profile WWW
May 09, 2012, 12:41:41 PM
 #3

Great work! I just tried accessing those posts and they're already deleted.

Just so you know, the German subforum has it's own newbie section, and he's mostly posting in the German speaking forums:

https://bitcointalk.org/index.php?board=62.0

is what I'm assuming is German for newbie ('Beginners and help')

Bitcoin network and pool analysis 12QxPHEuxDrs7mCyGSx1iVSozTwtquDB3r
follow @oocBlog for new post notifications
Maged
Legendary
*
Offline Offline

Activity: 1260


View Profile
May 09, 2012, 04:40:48 PM
 #4

Well, just keep reporting these posts. We'll get to them as fast as we can.

That being said, if one of us is online, a PM may result in a faster response. This is true of at least me (I only check for reported posts about every 10 minutes when I'm online, but I get PMs instantly), but maybe not all of the moderators.

Raoul Duke
aka psy
Legendary
*
Offline Offline

Activity: 1442



View Profile
May 09, 2012, 04:54:46 PM
 #5

Just filter his fuckin' domain. Doesn't SMF have a word filter or something?

theymos
Administrator
Legendary
*
Offline Offline

Activity: 2492


View Profile
May 09, 2012, 05:30:44 PM
 #6

Just filter his fuckin' domain. Doesn't SMF have a word filter or something?

It is filtered. Now he's obfuscating it, though.

SMF doesn't support automatically banning people when they post certain things, unfortunately. (This is part of the specification for the new forum.)

Just so you know, the German subforum has it's own newbie section, and he's mostly posting in the German speaking forums:

https://bitcointalk.org/index.php?board=62.0

is what I'm assuming is German for newbie ('Beginners and help')

The German section doesn't have newbie restrictions enabled. IIRC only the Russian section does, though I could easily enable it on any of the other sections if the mods there would like me to.

1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
Matthew N. Wright
Untrustworthy
Hero Member
*****
Offline Offline

Activity: 588


Hero VIP ultra official trusted super staff puppet


View Profile
May 10, 2012, 05:27:42 AM
 #7

Relevant: https://bitcointalk.org/index.php?topic=80608.msg891670#msg891670

theymos
Administrator
Legendary
*
Offline Offline

Activity: 2492


View Profile
May 11, 2012, 03:18:57 AM
 #8

I've improved the moderation system, so this kind of spamming should be much easier to handle from now on.

1NXYoJ5xU91Jp83XfVMHwwTUyZFK64BoAD
BadBear
v2.0
Administrator
Legendary
*
Offline Offline

Activity: 1652



View Profile WWW
May 11, 2012, 06:13:33 AM
 #9


1Kz25jm6pjNTaz8bFezEYUeBYfEtpjuKRG | PGP: B5797C4F

Tired of annoying signature ads? Ad block for signatures
terrytibbs
Hero Member
*****
Offline Offline

Activity: 560



View Profile
May 11, 2012, 07:50:07 AM
 #10

Do you have reason to believe the spam is automated?
Maged
Legendary
*
Offline Offline

Activity: 1260


View Profile
May 11, 2012, 05:03:42 PM
 #11

Do you have reason to believe the spam is automated?
Absolutely.

Raoul Duke
aka psy
Legendary
*
Offline Offline

Activity: 1442



View Profile
May 11, 2012, 05:12:16 PM
 #12

Do you have reason to believe the spam is automated?
Absolutely.

Can you give me some info? Do they always use the same User Agent, or does it change for each wave of postings?
Just trying to narrow down which sofware they use. If I find it I may be able to help you block it Smiley
Also, is the automation only on the posting or the account registration is also automated??

BadBear
v2.0
Administrator
Legendary
*
Offline Offline

Activity: 1652



View Profile WWW
May 11, 2012, 08:41:48 PM
 #13

Well here is a sample of the names from the ban list:
aiujiugioewg
aiuhshuewi
fdsafjiodjgew
HAIUUHGEWUI
fhiuwhgiuewhg
FDJSAJGOEW

And I'm guessing it's entirely automated cause it responded to bans regularly, not too fast not too slow. We have much more efficient ways to deal with it now, and it seems to have ceased so should be a lot better here on out.

1Kz25jm6pjNTaz8bFezEYUeBYfEtpjuKRG | PGP: B5797C4F

Tired of annoying signature ads? Ad block for signatures
Raoul Duke
aka psy
Legendary
*
Offline Offline

Activity: 1442



View Profile
May 11, 2012, 10:00:45 PM
 #14

Well here is a sample of the names from the ban list:
aiujiugioewg
aiuhshuewi
fdsafjiodjgew
HAIUUHGEWUI
fhiuwhgiuewhg
FDJSAJGOEW

And I'm guessing it's entirely automated cause it responded to bans regularly, not too fast not too slow. We have much more efficient ways to deal with it now, and it seems to have ceased so should be a lot better here on out.

Those look to be human made. A bot random string generator would not use letters found on close keys. The fd sa ui hu ew etc.

EDIT: oops, forgot the "not" after "would". Glad you guys got it lol

rjk
Sr. Member
****
Offline Offline

Activity: 420


1ngldh


View Profile
May 11, 2012, 10:51:42 PM
 #15

Well here is a sample of the names from the ban list:
aiujiugioewg
aiuhshuewi
fdsafjiodjgew
HAIUUHGEWUI
fhiuwhgiuewhg
FDJSAJGOEW

And I'm guessing it's entirely automated cause it responded to bans regularly, not too fast not too slow. We have much more efficient ways to deal with it now, and it seems to have ceased so should be a lot better here on out.

Those look to be human made. A bot random string generator would use letters found on close keys. The fd sa ui hu ew etc.
Yeah when I saw that I thought that they looked exactly like someone banging their fists on a keyboard.

Mining Rig Extraordinaire - the Trenton BPX6806 18-slot PCIe backplane [PICS] Dead project is dead, all hail the coming of the mighty ASIC!
BadBear
v2.0
Administrator
Legendary
*
Offline Offline

Activity: 1652



View Profile WWW
May 11, 2012, 10:58:23 PM
 #16

Maybe, it would explain why it seemed to stop after banning two of them in a row earlier after only making one or two posts. I'd like to think I pissed someone off.

1Kz25jm6pjNTaz8bFezEYUeBYfEtpjuKRG | PGP: B5797C4F

Tired of annoying signature ads? Ad block for signatures
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!