12/01/2010

redbeanforum under spamming attacks!

redbeanforum is under heavy spamming attacks these few days. Today is the most serious with a few hundred posts splashed across every topic in the forum. What it shows is that the forum is getting its message across and some parties are getting very irritated and are going all out to make postings here tiresome. I will tell the saboteurs that it is in vain. The forum will go on posting what it knows best. We know who the saboteurs are. Anyway, thanks for the interest and confirmation that it is hurting at the right place. PS, the innocent of the spamming is as innocent as WikiLeaks. Redbean

26 comments:

  1. Obviously you are doing such a great job some people don't like you. That's what happened to the old YPAP forum and my site as well.

    I used to get porn links almost every night from spammers because some people don't like me posting against America and Israel.

    ReplyDelete
  2. Hi solo bear,

    It used to be hit by porns as well, and tonnes of them every morning. Then one kind bulikyre came to my help and got rid of them. The porns have stopped but now they have disguised themselves as advertisers for all kinds of products.

    I hope bulikyre is reading and find the time to render me some help again.

    bulikyre, you reading?

    Oh, mysingaporenews is also attacked by a lot of porns and vulgarities daily. Fortunately the system has a built in defence to filter them out and not appearing.

    ReplyDelete
  3. You know, I think whoever is doing it to you may be the same guy who is doing it to me.

    The porn has stopped but the advertisements keep coming like yours.

    I have had complaints that who ever makes a post at my site, or whoever I make a post on their site, has this problem, whenever we agree that America and/or Israel are the not so good guys.

    I am not saying this is an American/Israeli mole. Just someone who I know who is an American/Zionist sympathizer. Btw, he is a Singaporean and you may well know who he is too.

    ReplyDelete
  4. I used to have a guy posting in redbeanforum who claimed to be a Singaporean but my assessment is that he is likely to be a Zionist or a westerner. And he posted many vicious and malicious anti China articles.

    From his articles you know where he was coming from and what was his objective.

    ReplyDelete
  5. I disagree with your assessment. I fully believe he is a Singaporean.

    This same guy, who goes round spamming, is well read and well resourced. He knows about every issue in the world.

    For me, he knows I am a Palestinian sympathizer and hence, he posts anti-Palestinian and/or anti-Muslim posts.

    He knows you are a China sympathizer and hence, his malice against China.

    This guy goes round posting anti-anything the admin of the blog posts.

    ReplyDelete
  6. I have exchanged mails with the guy. I think he is not the same guy solo bear is referring to. This guy posted a lot in China Daily and several other sites.

    My view is that he is paid to do the job, full time.

    ReplyDelete
  7. Matilah, go to redbeanforum and look at all the threads and tell me if it is not intentional and done by a mindless machine.

    ReplyDelete
  8. redbean:
    >>I have exchanged mails with the guy. I think he is not the same guy solo bear is referring to. This guy posted a lot in China Daily and several other sites.

    My view is that he is paid to do the job, full time.
    >>

    Me:
    Well, we hold different opinions if he is the same guy. But from your description, he fits the spammer on my site (and my readers' site) like a glove. Yes, that includes him having one to one exchange with the admins of the sites he spams.

    As for posting a lot at China Daily and many sites, that too fits the spammer on my site!

    Same goes for the idea that he is paid to do it.

    Well, I see it as a "compliment" when people do this to your site. It means that your site is attracting enough attention for "professionals" to take you down.

    Keep up your good work. I hope to keep blogging in spite of the spams on my site too.

    ReplyDelete
  9. Hmmm, it seems that there are a lot of similarities in the said spammers. Possible to be the same one.

    I have banned him from my site after exposing his malicious intent and he has not been posting there since.

    ReplyDelete
  10. redbeanforum: Ugg boots? Seriously dude...

    What kind of sick fuck is this person?
    =======

    Hey cyber vandal, you must have terrible internal torment to do what you do. It must be eating you up from inside.

    Those "demons" must be playing with your head, causing you intolerable suffering.

    You know what? The thought of you writhing in agony makes me happy. I hope you continue to scream like a girl and that it gets worse.

    Don't die yet. I want you to experience more pain ;-)

    ReplyDelete
  11. This is the IP of the sicko. 92-48-93-243.static.as29550.net. He hit the forum with more than 300 repeat posts this morning.

    Anyone know where it comes from and how to get it back at him?

    ReplyDelete
  12. He could have spoofed the header. However here's the whois search:
    ----------
    http://tools.whois.net/ipaddress/

    You Are Searching For 'as29550.net':

    'as29550.net' has an ip address of:
    Address: 128.242.54.18#53 Whois on 128.242.54.18#53
    --------------
    @ 128.242.54.18#53:

    network:Org-Name:Verio Web Hosting (SME)
    network:Street-Address:5050 Blue Lake Drive
    network:City:Boca Raton
    network:State:FL
    network:Postal-Code:33431
    network:Country-Code:US
    network:Tech-Contact;I:WA576-VRIO.127.0.0.1/32
    -------


    'as29550.net' has an ip address of:
    Address: 217.112.89.50
    Whois on 217.112.89.50
    ------
    @ 217.112.89.50

    descr: PoundHost Internet Services
    descr: Maidenhead - PoundHost Datacentre
    country: GB
    address: BlueConnex Ltd
    address: BlueSquare House
    address: Priors Way
    address: Maidenhead
    address: Berkshire
    address: SL62HP
    remarks: For abuse please contact abuse@as29550.net
    phone: +44 (0)1628 673131
    admin-c: PETE3-RIPE
    admin-c: BJR
    admin-c: JOSH
    abuse-mailbox: abuse@as29550.net

    ReplyDelete
  13. Note: Perp is using BB code "[ ]" fro his tags instead of html "< >"

    On purpose or is he an idiot?

    Hey idiot, learn html lah!

    ReplyDelete
  14. Forget the witchhunt, redbean. He's a master of many disguises and is able to tap different IP addresses using proxies.

    You'll end up at your computer 24/7 if you want to hunt him down. That's what he wants you to do.

    Just delete his posts. That's what I did at my sites.

    ====

    Matilah,

    He got his [ ] and < > wrong?

    Same case for my sites when he spammed too! Blogger comments use < > while cbox and pphBB use [ ].

    He spams so many sites so many times, it appears that sometimes he forgets which is which!

    That shows he spams manually, rather than using a machine, btw.

    ReplyDelete
  15. I also got link to all kind of products and services that I dun need whenever I visit this site lately.It would not be so bad if they link me to those porn site as I do not know where to find one.I now have to send my PC to the 'computer docter' .Dun know whether is this related.
    See you 1 week later as the computer docter say my PC need to take a week MC.

    ReplyDelete
  16. redbean,

    You should definitely emai AND call the SysAdmins of those 2 addresses.

    Assuming the IP is not spoofed, i.e. it's real:

    The "static" in the ip address could mean that he is on a LAN, meaning his company is one of the (probably) business customers of those ISPs.

    Also when you posted the ip address there were dashes in between the numbers "-" instead of the decimal-dot notation e.g. "127.35.10.10"

    I find that quite odd.

    solo is right: you can end up spending far too much time at your machine. Just delete his posts.

    It might be worth learning how to use a shell script (command line) to delete multiple spam on your php-based forum.

    ---
    agongkia: I hope your PC gets well soon :-)

    ReplyDelete
  17. >>The "static" in the ip address could mean that he is on a LAN, meaning his company is one of the (probably) business customers of those ISPs.
    >>

    The spammer I caught is a moderator of a professionally run forum/site based outside Singapore. Being the moderator, he has the luxury of whipping up a whole list of proxies and/or IP addresses at his will, using the site's facilities.

    ReplyDelete
  18. You can use anti-spam legislation depending on where the spam attack originates.

    In countries like the US and Aust it is criminal action - very serious one with heavy fines/ jail. Singapore (surprisingly) is a bit more "liberal" in the sense that it is a civil case and only subject to "damages".

    Today a hapless spammer got a heafty AUD 2 million FINE for SMS/ text message spamming.

    If you have 100% proof of the identity of the perp, and his domain (the forum), consider 'outing' the guy. I see no reason to keep quiet and protect a douch-bag spammer's identity who spoils everyone's fun.

    BTW, if the IP address leads back to a proxy provider, simply complain to the proxy admin. Those guys usually hate spammers because it gives them, the proxy service, a bad name.

    You can spoof headers and IP on posts, and email, but if you have a forum the ip address is unique and permanent. No escape from that -- including lodging a "real world" police report.

    Most police forces are gung-ho these days -- they can't wait to bust yet-another "cybercriminal" to boost their law enforcement image.

    In this game you can only go by verifying the "positive" evidence - i.e. assume that ip addresses are "real", trace back to source, talk to the human-in-charge...and so on.

    ReplyDelete
  19. Thanks guys, for the leads. No spamming last night. If he stays clear, I will let matter rest. Otherwise I will follow up with Matilah's suggestions.

    Maybe a report to the police or interpol will still be on my card.

    My suspicion came true, that it must be from the US. And hey, the Americans are concern with my forum and getting excited over it: )

    ReplyDelete
  20. Good job there. It does fit the profile of the spammer on my site.

    He "takes a break" from spamming whenever the "heat is on". You see, I have linked your article to my site and my readers, who are familiar with his trolling ways, have been keeping a close watch on him too.

    One of them has made a police report because he linked an adult site to my reader's site, which has a target audience made up of children under the age of 13!

    As for the American site, don't be deceived. He is working from Singapore and gets his access to those servers from here.

    Be on your toes, because if you are not, he will come back spamming again.

    ReplyDelete
  21. I hope he is reading this and know that the next step is a police report. And of course, complaining to his service provider as well.

    It will be better if he is local. Want to take a look at who he really is and splash his face across cyberspace, in all my blogs and forum.

    ReplyDelete
  22. Oh, I will leave most of the current spams in tact as evidence in case I need to pursue the matter later.

    ReplyDelete
  23. This comment has been removed by the author.

    ReplyDelete
  24. Thanks to gmail's generous space on their email accounts, I have a load of this guys spam.

    When you subscribe to a discussion, you get all the posts. The implicit understanding is that you do not get unsolicited advertising material.

    So legally, I and those who've subscribed to discussions are entitled not to be spammed, and thus if we are we have at the very least, a tort.

    redbean may be a bit "forgiving", but I am not. If I find out who this person is or persons are, I will be making plenty of trouble for him/ them, including but not limited to a date with the FBI.

    since he likes porn so much, I will even suggest to the feds that I suspect this guy has child porn and do whatever is necessary to have his/ their computers seized for forensic analysis, and he better not have any "hot" software either ;-)

    Even if he "escapes" his name/ their names will be on the FBI database -- as a possible "criminal".

    ReplyDelete
  25. This comment has been removed by the author.

    ReplyDelete
  26. Hi,

    I am looking for a VPS solutions. Who is the best provider in your eyes of VPS hosting?

    -Rick

    ReplyDelete