LITTLEBLACKDOG.COM

Posted: Thu May 04, 2006 2:31 am Post subject: Referrer Spam

Referrer Spam is when a member is registered and includes, in the web field of the profile, a web referral to a commercial, inappropriate or illegal site. A subtler form of referrer spam is when such referrals are made in a sig.

Site Admins will determine if a member is using the web field or sig inappropriately. In the case of an established member we will PM you if we think it is inappropriate. This has never happened, so trust us that's what we will do.

By and large, referrer spammers will either never post, or will post spam.
Spam postings will be modified or deleted. The referrals will be, too, at the discretion of the admins. Because some of these member names come back if we delete them, we may or may not delete them, but the offender will lose control of that referral nonetheless.

We aim to be a welcoming and friendly site. The use of the web field in a profile is intended for non commercial use, and we are happy for our contributing members to refer to their own, or other, non or semi commercial sites.

Comments are welcome.

Posted: Sat Aug 12, 2006 12:07 pm Post subject:

Ok

So here's a good one. You all know we get a lot of referrer spams. And I check each and every one of them out. I have a pretty good idea about which spammers are hitting us and when.

We just had a referral spammer. Except instead of some dodgy website the web link was to www.google.com. Go figure. Like I am not going to check anyway. So the profile was our good old pochta.ru (which I have mentioned before) based spam gang (Ranet.ru ring a bell?)

hint to the spammers. mail333.com is now banned too, you guys really need to stop being so bloody obvious. Your profiles have a particular scent, if you know what I mean. I'm not trying to get into a spam war again, I really just want the spammers to leave us alone. I know they won't, or can't, or don't care, so I'll just chalk this up to some kind of test run.

It didn't work. But it was cute. I liked how it used a new mail domain. You guys don't quit.

Anything which has a root with a pochta.ru nameserver is automatically banned here, I don't care who you are. If your domain leads me to pochta.ru you are banned. Complain to pochta.ru and their owners if you are upset, not me. It has one heck of a reputation. I wonder why?

And do me a favour. No more joe jobs. It only brings them here to complain and they get educated. It would be in your interest to leave us be. I won't hold my breath.

Ah well. Another one nobody saw.

Posted: Sat Aug 12, 2006 12:12 pm Post subject:

Good to know you're working hard to keep the bastards out, EdisonRex. Kudos to the Allmighty Admins!

Is all of Russia banned by now? Laughing

/Akely

Posted: Sat Aug 12, 2006 12:17 pm Post subject:

Akely wrote:

Is all of Russia banned by now?
/Akely

Hardly. Although it seems like it. There's Ukraine, Belorussia, Latvia, etc.
And I like Ukrainians, too. I know a lot of them, they rock. I just can't deal with the spammers.

Guide Dog Joined: 08 Nov 2003 Posts: 8245 Location: MN

EdisonRex wrote:
We aim to be a welcoming and friendly site. The use of the web field in a profile is intended for non commercial use, and we are happy for our contributing members to refer to their own, or other, non or semi commercial sites.

Do we want to put something to that effect in the site rules?

Posted: Sat Aug 12, 2006 1:02 pm Post subject: Re: Referrer Spam

anglachel wrote:
EdisonRex wrote:
We aim to be a welcoming and friendly site. The use of the web field in a profile is intended for non commercial use, and we are happy for our contributing members to refer to their own, or other, non or semi commercial sites.

Do we want to put something to that effect in the site rules?

Well that's something I need to talk to Fido about. But it would make sense, wouldn't it...

Posted: Sun Aug 13, 2006 12:49 pm Post subject:

EdisonRex wrote:
they get educated.

They do when the article series gets finished...

Leg Humper Joined: 01 Jun 2004 Posts: 4702 Location: Utah

Ed, I just had a great idea...

One could, without much trouble, write a script to run, say, nightly on the server that would analyze the database for "suspicious" accounts, and then e-mail said acounts to you, so you could make the final decision of whether to ban their ass, or let them be.

Posted: Tue Aug 15, 2006 11:21 am Post subject:

Doomhammer wrote:
Ed, I just had a great idea...

One could, without much trouble, write a script to run, say, nightly on the server that would analyze the database for "suspicious" accounts, and then e-mail said acounts to you, so you could make the final decision of whether to ban their ass, or let them be.

not a bad idea, but given that we only get 2, maybe 3 new accounts a day, and it might be 3-4 days without a real registration, they're easy enough to spot for now. Someday when we're pulling down 2000 posts a day, and have 2000 active members, then I'll worry about a script. Some things don't need automation.

And besides, what constitutes suspicious to me might change tomorrow. These guys try all sorts of stuff. They tried it in German yesterday, kind of funny, because it's the same spammers, the german domain went to calpop, the mail account went to some .com domain that was registered to russians, and the profile had a bogus ICQ number in it. Same exact profile except someone was being clever and using a German theme.

And then there's this joker who keeps registering with random strings, like I don't know how to cut and paste from the browser to the admin user window. Rolling Eyes

That silly moo never seems to register despite using yahoo, hotmail and gmail accounts. I don't think the accounts are real, and I bet they don't care if they register or not. I do think that you shouldn't be allowed to put in web links until you are actually verified, but they'd just use the location field next. They don't care.

Posted: Tue Aug 15, 2006 5:59 pm Post subject:

I think you should keep a running log of what they have tried and post what they've done. Would make for a good laugh.

Posted: Thu Aug 17, 2006 2:21 pm Post subject:

What they've done? I've deleted 10 spammer accounts so far today. Clearly the russians are on a roll today. Oh, they're russian and from what I know this is one of them, maybe two. It's stupid how similar (read: lazy ass mofos) their profiles are. It isn't hard work to tell the script different parameters for the same fields. It would be a lot more work to look unique.

Posted: Thu Aug 17, 2006 4:48 pm Post subject:

Out of currosity, has all of Nigeria been banned yet Question

EEps · Posted: Thu Aug 17, 2006 9:22 pm Post subject:

the taz man wrote:
Out of currosity, has all of Nigeria been banned yet

Probably not...but it's getting there... Big Smile

Posted: Tue Aug 29, 2006 9:55 am Post subject:

Sorry to bump this, but Edison, did LBD got spammed by users with Hotbox email accounts ? Because my picture blog got butt-fucked with 948 comments from some asshole with Hotbox email accounts. If so, could you send me by PM(or just post it in here) their range of IPs so i can add them to my blacklist ?

Posted: Tue Aug 29, 2006 12:06 pm Post subject:

Hotbox wasn't in today's spam runs. This bunch don't ever intend to actually confirm a registration, as they just (for the past 5 days) register complete horseshit names. Or Yahoo or Gmail.

But I'm going to start publishing what I know in a topic, members only, soon. I have to move this all to members only for what should be obvious reasons.

Not that the spammers care. They are doing what they're paid to do. I have not seen a spammer with a passion for his job yet. There are some creative ones, but mostly it is the script writers who are the creative ones.

Akely wrote:

EdisonRex wrote:

anglachel wrote:

EdisonRex wrote:

EdisonRex wrote:

Lycander wrote:

Doomhammer wrote:

the taz man wrote: