12/01/2010
redbeanforum under spamming attacks!
redbeanforum is under heavy spamming attacks these few days. Today is the most serious with a few hundred posts splashed across every topic in the forum. What it shows is that the forum is getting its message across and some parties are getting very irritated and are going all out to make postings here tiresome.
I will tell the saboteurs that it is in vain. The forum will go on posting what it knows best. We know who the saboteurs are.
Anyway, thanks for the interest and confirmation that it is hurting at the right place.
PS, the innocent of the spamming is as innocent as WikiLeaks.
Redbean
Subscribe to:
Post Comments (Atom)
26 comments:
Obviously you are doing such a great job some people don't like you. That's what happened to the old YPAP forum and my site as well.
I used to get porn links almost every night from spammers because some people don't like me posting against America and Israel.
Hi solo bear,
It used to be hit by porns as well, and tonnes of them every morning. Then one kind bulikyre came to my help and got rid of them. The porns have stopped but now they have disguised themselves as advertisers for all kinds of products.
I hope bulikyre is reading and find the time to render me some help again.
bulikyre, you reading?
Oh, mysingaporenews is also attacked by a lot of porns and vulgarities daily. Fortunately the system has a built in defence to filter them out and not appearing.
You know, I think whoever is doing it to you may be the same guy who is doing it to me.
The porn has stopped but the advertisements keep coming like yours.
I have had complaints that who ever makes a post at my site, or whoever I make a post on their site, has this problem, whenever we agree that America and/or Israel are the not so good guys.
I am not saying this is an American/Israeli mole. Just someone who I know who is an American/Zionist sympathizer. Btw, he is a Singaporean and you may well know who he is too.
I used to have a guy posting in redbeanforum who claimed to be a Singaporean but my assessment is that he is likely to be a Zionist or a westerner. And he posted many vicious and malicious anti China articles.
From his articles you know where he was coming from and what was his objective.
I disagree with your assessment. I fully believe he is a Singaporean.
This same guy, who goes round spamming, is well read and well resourced. He knows about every issue in the world.
For me, he knows I am a Palestinian sympathizer and hence, he posts anti-Palestinian and/or anti-Muslim posts.
He knows you are a China sympathizer and hence, his malice against China.
This guy goes round posting anti-anything the admin of the blog posts.
I have exchanged mails with the guy. I think he is not the same guy solo bear is referring to. This guy posted a lot in China Daily and several other sites.
My view is that he is paid to do the job, full time.
Matilah, go to redbeanforum and look at all the threads and tell me if it is not intentional and done by a mindless machine.
redbean:
>>I have exchanged mails with the guy. I think he is not the same guy solo bear is referring to. This guy posted a lot in China Daily and several other sites.
My view is that he is paid to do the job, full time.
>>
Me:
Well, we hold different opinions if he is the same guy. But from your description, he fits the spammer on my site (and my readers' site) like a glove. Yes, that includes him having one to one exchange with the admins of the sites he spams.
As for posting a lot at China Daily and many sites, that too fits the spammer on my site!
Same goes for the idea that he is paid to do it.
Well, I see it as a "compliment" when people do this to your site. It means that your site is attracting enough attention for "professionals" to take you down.
Keep up your good work. I hope to keep blogging in spite of the spams on my site too.
Hmmm, it seems that there are a lot of similarities in the said spammers. Possible to be the same one.
I have banned him from my site after exposing his malicious intent and he has not been posting there since.
redbeanforum: Ugg boots? Seriously dude...
What kind of sick fuck is this person?
=======
Hey cyber vandal, you must have terrible internal torment to do what you do. It must be eating you up from inside.
Those "demons" must be playing with your head, causing you intolerable suffering.
You know what? The thought of you writhing in agony makes me happy. I hope you continue to scream like a girl and that it gets worse.
Don't die yet. I want you to experience more pain ;-)
This is the IP of the sicko. 92-48-93-243.static.as29550.net. He hit the forum with more than 300 repeat posts this morning.
Anyone know where it comes from and how to get it back at him?
He could have spoofed the header. However here's the whois search:
----------
http://tools.whois.net/ipaddress/
You Are Searching For 'as29550.net':
'as29550.net' has an ip address of:
Address: 128.242.54.18#53 Whois on 128.242.54.18#53
--------------
@ 128.242.54.18#53:
network:Org-Name:Verio Web Hosting (SME)
network:Street-Address:5050 Blue Lake Drive
network:City:Boca Raton
network:State:FL
network:Postal-Code:33431
network:Country-Code:US
network:Tech-Contact;I:WA576-VRIO.127.0.0.1/32
-------
'as29550.net' has an ip address of:
Address: 217.112.89.50
Whois on 217.112.89.50
------
@ 217.112.89.50
descr: PoundHost Internet Services
descr: Maidenhead - PoundHost Datacentre
country: GB
address: BlueConnex Ltd
address: BlueSquare House
address: Priors Way
address: Maidenhead
address: Berkshire
address: SL62HP
remarks: For abuse please contact abuse@as29550.net
phone: +44 (0)1628 673131
admin-c: PETE3-RIPE
admin-c: BJR
admin-c: JOSH
abuse-mailbox: abuse@as29550.net
Note: Perp is using BB code "[ ]" fro his tags instead of html "< >"
On purpose or is he an idiot?
Hey idiot, learn html lah!
Forget the witchhunt, redbean. He's a master of many disguises and is able to tap different IP addresses using proxies.
You'll end up at your computer 24/7 if you want to hunt him down. That's what he wants you to do.
Just delete his posts. That's what I did at my sites.
====
Matilah,
He got his [ ] and < > wrong?
Same case for my sites when he spammed too! Blogger comments use < > while cbox and pphBB use [ ].
He spams so many sites so many times, it appears that sometimes he forgets which is which!
That shows he spams manually, rather than using a machine, btw.
I also got link to all kind of products and services that I dun need whenever I visit this site lately.It would not be so bad if they link me to those porn site as I do not know where to find one.I now have to send my PC to the 'computer docter' .Dun know whether is this related.
See you 1 week later as the computer docter say my PC need to take a week MC.
redbean,
You should definitely emai AND call the SysAdmins of those 2 addresses.
Assuming the IP is not spoofed, i.e. it's real:
The "static" in the ip address could mean that he is on a LAN, meaning his company is one of the (probably) business customers of those ISPs.
Also when you posted the ip address there were dashes in between the numbers "-" instead of the decimal-dot notation e.g. "127.35.10.10"
I find that quite odd.
solo is right: you can end up spending far too much time at your machine. Just delete his posts.
It might be worth learning how to use a shell script (command line) to delete multiple spam on your php-based forum.
---
agongkia: I hope your PC gets well soon :-)
>>The "static" in the ip address could mean that he is on a LAN, meaning his company is one of the (probably) business customers of those ISPs.
>>
The spammer I caught is a moderator of a professionally run forum/site based outside Singapore. Being the moderator, he has the luxury of whipping up a whole list of proxies and/or IP addresses at his will, using the site's facilities.
You can use anti-spam legislation depending on where the spam attack originates.
In countries like the US and Aust it is criminal action - very serious one with heavy fines/ jail. Singapore (surprisingly) is a bit more "liberal" in the sense that it is a civil case and only subject to "damages".
Today a hapless spammer got a heafty AUD 2 million FINE for SMS/ text message spamming.
If you have 100% proof of the identity of the perp, and his domain (the forum), consider 'outing' the guy. I see no reason to keep quiet and protect a douch-bag spammer's identity who spoils everyone's fun.
BTW, if the IP address leads back to a proxy provider, simply complain to the proxy admin. Those guys usually hate spammers because it gives them, the proxy service, a bad name.
You can spoof headers and IP on posts, and email, but if you have a forum the ip address is unique and permanent. No escape from that -- including lodging a "real world" police report.
Most police forces are gung-ho these days -- they can't wait to bust yet-another "cybercriminal" to boost their law enforcement image.
In this game you can only go by verifying the "positive" evidence - i.e. assume that ip addresses are "real", trace back to source, talk to the human-in-charge...and so on.
Thanks guys, for the leads. No spamming last night. If he stays clear, I will let matter rest. Otherwise I will follow up with Matilah's suggestions.
Maybe a report to the police or interpol will still be on my card.
My suspicion came true, that it must be from the US. And hey, the Americans are concern with my forum and getting excited over it: )
Good job there. It does fit the profile of the spammer on my site.
He "takes a break" from spamming whenever the "heat is on". You see, I have linked your article to my site and my readers, who are familiar with his trolling ways, have been keeping a close watch on him too.
One of them has made a police report because he linked an adult site to my reader's site, which has a target audience made up of children under the age of 13!
As for the American site, don't be deceived. He is working from Singapore and gets his access to those servers from here.
Be on your toes, because if you are not, he will come back spamming again.
I hope he is reading this and know that the next step is a police report. And of course, complaining to his service provider as well.
It will be better if he is local. Want to take a look at who he really is and splash his face across cyberspace, in all my blogs and forum.
Oh, I will leave most of the current spams in tact as evidence in case I need to pursue the matter later.
Thanks to gmail's generous space on their email accounts, I have a load of this guys spam.
When you subscribe to a discussion, you get all the posts. The implicit understanding is that you do not get unsolicited advertising material.
So legally, I and those who've subscribed to discussions are entitled not to be spammed, and thus if we are we have at the very least, a tort.
redbean may be a bit "forgiving", but I am not. If I find out who this person is or persons are, I will be making plenty of trouble for him/ them, including but not limited to a date with the FBI.
since he likes porn so much, I will even suggest to the feds that I suspect this guy has child porn and do whatever is necessary to have his/ their computers seized for forensic analysis, and he better not have any "hot" software either ;-)
Even if he "escapes" his name/ their names will be on the FBI database -- as a possible "criminal".
Hi,
I am looking for a VPS solutions. Who is the best provider in your eyes of VPS hosting?
-Rick
Post a Comment