Looks like we got hacked

[DuckRyder]

Does anyone moderate our .net site ?
Thats almost all spam.

Only Keith and he's been MIA for a while. He never gave us keys to keep that kingdom functioning.

And we only kinda have keys to this one...

I got some more this morning...

[flyboy2610]

Had 9 posts this morning from some spammer trying to sell.... male pills. I tracked down and reported the posts I could find.
I think we need to go to a system whereby registrations must be approved by a moderator before posting is permitted. I don't know how much it would cut down on spam, but I'm sure it would help.

[DuckRyder]

That's the third round this morning...

Thanks for reporting them... Makes them easier to find...

[DuckRyder]

Keep reporting them folks, and thanks for those of you that have reported them!

[Ranchero50]

Methinks we need an IP ban for Russia and possibly northern Europe.

I was hoping the first of the month spam would drop off by now.

[DuckRyder]

Yeah, did they sell bumps in Russia? I could also go for some software that would ban the user, ip and delete all the post at the same time....

[Jacksdad]

There are some members in Northern Europe that post relevant stuff - the UK and Germany spring to mind.
One of the forums I moderate on has spam cleaner software installed. All I do is go to the offending profile and it allows me to suspend them and delete all their posts in one fell swoop. I notice that the initial spam attack was carried out by about ten individuals. That would be a five minute clean up if the site had spam cleaner software available to the mods. Just a thought if it's available, and the spam continues.

[Ranchero50]

Welp, I for one don't need anymore notifications. I click the 'new posts' icon on the quick links and the spam is pretty obvious.

[DuckRyder]

Well I still need them because your method doesn't work for me... Particularly when the software keeps logging me out, and since I'm about all the help you're likely to get, I would think you would want to be a little more supportive about something I've repeatedly asked folks to do...

[DuckRyder]

...
... All I do is go to the offending profile and it allows me to suspend them and delete all their posts in one fell swoop. I notice that the initial spam attack was carried out by about ten individuals. That would be a five minute clean up if the site had spam cleaner software available to the mods. Just a thought if it's available, and the spam continues.

You have no idea how awesome that would be for these occasions... I spent the better part of my too short lunch deleting a bunch of garbage from like 2 people...

I actually think this software will do that in the administration control panel as well as remove the user entirely (and thus the garbage links they put in their signatures) but it doesn't work for me, I can get in there and see that it is available but I can't do it.

As it is for me (and I assume Jamie) it is a manual process of going to pretty much every post and I do try to be careful to not delete a legitimate post...

Anyway...

[Jacksdad]

As it is for me (and I assume Jamie) it is a manual process of going to pretty much every post and I do try to be careful to not delete a legitimate post...

I feel for you guys. That sucks - especially with as many spam posts as the site got hit with.

[Ranchero50]

Well I still need them because your method doesn't work for me... Particularly when the software keeps logging me out, and since I'm about all the help you're likely to get, I would think you would want to be a little more supportive about something I've repeatedly asked folks to do...

Welp, that sucks. I'll always support your needs

[Ranchero50]

Yep, another twenty minutes of my life I'll not get back... 50+ posts and at least 6 new users no longer with us.

Honestly need to get Keith to put an admin approval for new posters.

[DuckRyder]

Lord,

I could totally get behind turning on moderation for the first post(s).

I wonder how many legitimate new users we have a day but from another forum (actually a yahoo group) I moderate inis sometimes difficult to tell if they are for real or not. Might be easier if we let them register and show their spots, then we can just delete them and all the unapproved post before the forum is actually subjected to it...

I will send a message to Keith.

[Ranchero50]

I spent another half hour or so going through the new members, selecting them and running an IP search on their IP (under the IP ban) here.

http://whatismyipaddress.com/ip/62.85.3.70

So far, 2, 31, 37, 46, 62, 89, 91, 95, 96, 172, 178, and 213 can all get blanket banned. I don't know of too many bumps that are in the former USSR. Even if there are some they should be able to get enough info from the site to keep their stuff going.

Heck, some of them are even throwing African countries in their location. The other day when I whacked 1200 new posts I didn't ban the posters and have been going back and killing them along with the IP ban.

Oh yeah, almost through the first page of new members and so far around 10 are legit. Lovely.

Moderation on first post with the IP pre scanned would be a huge time saver. I'm off for a while thanks to a bum back so this has been my down time killer waiting on the pills to kick in. Good times.