Hello. And Bye.

[Gnobxstiks]

Hello. And Bye.

[clickhea]

what the

[Ken Layton]

Must be a spammer.

[DaveMMR]

Must be a spammer.

Well I'm sold.  Best spam ever!   

[BORIStheBLADE]

Thats the most thoughtful spammer I know.

[BASS!]

At least it was to the point which is more than I can say for many, myself included

[SirPeale]

Must be a spammer.

But there's no Spam!

[crzywolf]

I googled the user name and this person seems too be posting "Hello. And Bye." and "http:// test .ru" in alot of forums.

[Ken Layton]

Then it must be a spammer who's testing the waters getting ready to send a blast of spam. I say delete that user NOW.

Edit:

I just checked also on Google and it is a SPAMBOT. That user name has posted the same message on 1,430 forums over the past three days!

It must have found a back way into the forums. It lists a Russian domain so it could be a Russian hacker. Delete the user name.

[saint]

Banned

I'm getting hit with a ton of .ru accounts (that I just deny), but his wasn't .ru so they're getting smarter.... I've denied around 100 accounts in the last 3 days.

[SirPeale]

My forums have also seen a metric ton of  Spam users in the last week.    Not like my forums get a lot of traffic (read: near zero) but I can do without the crap.

[Namco]

I ran the forum and website of an online racing league and I got so many spam users that I ended up just banning anything with .ru or .dk as a domain, or anything from a free email service. I also turned on admin approval for all new accounts. It's the only way to keep the spammers out. Even after turning captchas on, they keep coming in.

[Teebor]

I don't know if it is relevant but the last couple of weeks has seen a big rise in .ru hosted sites posing as banks, ebay, paypal, etc

Just in case something does get posted

[patrickl]

I run several webservers too and indeed I've been having a lot of spam attacks lately. One idiot made it that bad that he was posting messages to every thread ever posted and thus actually dragging down the server. Almost like a DOS attack.

That was through an anonymous IP address though.

[youki]

Hi,

My forums had a tentive of hacking last month too.

Hackers target SMF Forums 1.1.4 that are in fact very easy to hack.

In my case the IP of the Hacker was from  Arabian Emirate.

Fortunaly i was online when he tried to hack. He managed to promote his account to administrator and started to change the Forum's theme.

Since, i have modified my forum code to limit risk and check all member IP.

[Visitor Q]

Some how I feel crushed. 

[Dazz]

Heh, I just limited my site to US IP addresses and 403 the rest of the world.  My site is location specific, so there really isn't a reason for anyone outside my local area to visit the site in the first place.

[loess]

haha...

[youki]

Heh, I just limited my site to US IP addresses and 403 the rest of the world.  My site is location specific, so there really isn't a reason for anyone outside my local area to visit the site in the first place.

It is what i did for my French forums,  if the IP is not a french speaking country i ask the guy by mail in french if he is able to speak french.

In addition, i have modified the structure of the forums and filenames.

[Ummon]

I ran the forum and website of an online racing league and I got so many spam users that I ended up just banning anything with .ru or .dk as a domain, or anything from a free email service.

I don't get this one. Don't a majority of people mostly use free email?

[saint]

The majority of people with web access have access to personal email accounts via their ISP that are presumably more trackable than the fairly anonymous generic gmail/hotmail/etc free email accounts. I'd guess about 50% or so of the users on the forum here signed up with free email accounts, and about 95% of the spammers who sign up here are using free email accounts. If I required a non-free-email account I suspect I might lose about 5-10% of my potential users who don't have a "real" email account available to them, but I'd lose about 95% of the spammers. It's tempting sometimes....

[Ummon]

Hm. Yeah, I can see that one. I just have never used my ISP-provided email. I'd have to research to find out my username and password for it.

[Necro]

I generally use a spam catching e-mail for all forum sign-ups.  It's just too easy to completely decimate an e-mail account by signing up for a forum to do otherwise.

[Mauzy]

The majority of people with web access have access to personal email accounts via their ISP that are presumably more trackable than the fairly anonymous generic gmail/hotmail/etc free email accounts. I'd guess about 50% or so of the users on the forum here signed up with free email accounts, and about 95% of the spammers who sign up here are using free email accounts. If I required a non-free-email account I suspect I might lose about 5-10% of my potential users who don't have a "real" email account available to them, but I'd lose about 95% of the spammers. It's tempting sometimes....

If you were to do this, would everyone with a Free-mail account be grandfathered in? I really have no access to a non free-mail account...

[saint]

Yes, it's only a signup issue, and I'm not planning to do it anyway   Just idle speculation.

[BASS!]

Why not do that and have byoac have a members only e-mail account as well.

[RayB]

One very EASY way to avoid some hackers and spam-bots is to do what Saint has neglected to do: Change the footer notice that says "Powered by SMF blah blah blah"

You're basically flagging the site to the hackers and spam bots. I've read forum software terms, and most ask that you please credit them, but most still allow removal/change of that notice if you so choose to. So do it!

[u_rebelscum]

Hm. Yeah, I can see that one. I just have never used my ISP-provided email. I'd have to research to find out my username and password for it.

Ditto.