Author Topic: Pm Spam  (Read 5689 times)

Offline debio

  • Newbie
  • *
  • Posts: 6
Pm Spam
« on: January 13, 2010, 09:25:11 PM »
I've gotten two spam PM messages today from separate accounts. I'm not sure what the administration can do about it if email verification is already enabled, but it's quite irritating.

Offline Galahad

  • Newbie
  • *
  • Posts: 2
Pm Spam
« Reply #1 on: January 13, 2010, 10:37:25 PM »
:: nod ::  I've also received two spams...  They each have a link and I am assuming that they lead to some sort of virus :: shrug ::  In case the admins check this post here are the two screen names I received the PM's from:     shaiina980     llenner637
also I still have the original messages in my inbox :: shrug ::  sorry for hijacking your post debio

~ Galahad

Offline debio

  • Newbie
  • *
  • Posts: 6
Pm Spam
« Reply #2 on: January 13, 2010, 10:56:16 PM »
Quote
:: nod ::  I've also received two spams...  They each have a link and I am assuming that they lead to some sort of virus :: shrug ::  In case the admins check this post here are the two screen names I received the PM's from:     shaiina980     llenner637
also I still have the original messages in my inbox :: shrug ::  sorry for hijacking your post debio

~ Galahad
Those are the two users that spammed me as well, so I guess this isn't a huge phenomenon. Still, it seems like the spammers either have a lot of spare time or a bot that pms (probably) all of the forum users.

Offline Kalshion

  • Jr. Member
  • **
  • Posts: 73
Pm Spam
« Reply #3 on: January 13, 2010, 11:35:09 PM »
Got it at as well; though I only received one though.  

Offline CK9

  • Administrator
  • Hero Member
  • *****
  • Posts: 6226
    • http://www.outpost2.net/~ck9
Pm Spam
« Reply #4 on: January 13, 2010, 11:52:56 PM »
the problem is that we have 1 active admin and about a million bots trying to get through.  We should find out if there's any legal recorse we can use to our advantage...
CK9 in outpost
Iamck in runescape (yes, I still play...sometimes...)
srentiln in minecraft (I like legos, and I like computer games...it was only a matter of time...) and youtube...
xdarkinsidex on deviantart

yup, I have too many screen names

Offline Hooman

  • Administrator
  • Hero Member
  • *****
  • Posts: 4954
Pm Spam
« Reply #5 on: January 13, 2010, 11:54:13 PM »
Thank you for the reports. The offending accounts have been deleted. As they were comming from the same IP, and using an email account from the same host (with a spammy name), I've also banned their IP, and their email host. That should block future attempts from that location.


Edit: We should get that conversation going with Galactic again about upgrading the forum software.
 
« Last Edit: January 13, 2010, 11:54:46 PM by Hooman »

Offline CK9

  • Administrator
  • Hero Member
  • *****
  • Posts: 6226
    • http://www.outpost2.net/~ck9
Pm Spam
« Reply #6 on: January 14, 2010, 01:35:48 AM »
I sent him a message a while ago because spam bots were getting through the letters
CK9 in outpost
Iamck in runescape (yes, I still play...sometimes...)
srentiln in minecraft (I like legos, and I like computer games...it was only a matter of time...) and youtube...
xdarkinsidex on deviantart

yup, I have too many screen names

Offline Racquerr

  • Newbie
  • *
  • Posts: 7
Pm Spam
« Reply #7 on: January 14, 2010, 06:54:04 PM »
Heres the message I got:

From: UlfStein Date: Jan 13 2010, 05:49 PM
   
Group: Validating
Posts: 0
Joined: 14-January 10
   

Hello friend, i found you at: <LINK DISABLED>

---------------------------------------------------------
Still in my in box if any of the mods needs to see it.
« Last Edit: January 14, 2010, 06:57:05 PM by Racquerr »

Offline CK9

  • Administrator
  • Hero Member
  • *****
  • Posts: 6226
    • http://www.outpost2.net/~ck9
Pm Spam
« Reply #8 on: January 14, 2010, 11:35:29 PM »
validating shouldn't have any form of posting rights, including PM...
CK9 in outpost
Iamck in runescape (yes, I still play...sometimes...)
srentiln in minecraft (I like legos, and I like computer games...it was only a matter of time...) and youtube...
xdarkinsidex on deviantart

yup, I have too many screen names

Offline Highlander

  • Hero Member
  • *****
  • Posts: 780
  • Outpost 2 Elder
Pm Spam
« Reply #9 on: January 15, 2010, 12:30:12 AM »
The UlfSteain guy actually popped up on IRC last night.

21:50… OPUIRCUser has joined #outpost2
21:53… OPUIRCUser is now known as UlfStein
21:53…    UlfStein: hello?
21:53…    UlfStein: *knock* *knock*


Ulf and Stein are actually both Norwegian names :P
There can be Only one. Wipe Them out. All of Them.

Old player still playing. Visit Spark for a game of Outpost 2

Offline CK9

  • Administrator
  • Hero Member
  • *****
  • Posts: 6226
    • http://www.outpost2.net/~ck9
Pm Spam
« Reply #10 on: January 15, 2010, 01:06:41 AM »
Stein is German for stone

Albert Einstein = Albert A Stone
CK9 in outpost
Iamck in runescape (yes, I still play...sometimes...)
srentiln in minecraft (I like legos, and I like computer games...it was only a matter of time...) and youtube...
xdarkinsidex on deviantart

yup, I have too many screen names

Offline Hidiot

  • Hero Member
  • *****
  • Posts: 1018
Pm Spam
« Reply #11 on: January 15, 2010, 02:56:14 PM »
Quote
Heres the message I got:

From: UlfStein Date: Jan 13 2010, 05:49 PM
   
Group: Validating
Posts: 0
Joined: 14-January 10
   

Hello friend, i found you at: <LINK DISABLED>

---------------------------------------------------------
Still in my in box if any of the mods needs to see it.
I looked at this again and found the following curious:

The date the message was sent is Jan 13 (during the day, even), yet the join date was 14. Is there any normal way that can happen?

Might be worthless mentioning that I had 2 new messages in my PM box yesterday. However, I only noticed that after the accounts were deleted.
"Nothing from nowhere, I'm no one at all"

Offline Mez

  • Hero Member
  • *****
  • Posts: 648
Pm Spam
« Reply #12 on: January 15, 2010, 03:20:42 PM »
Deactivated ULFstein's account, as much as I could as a GM.
Banned the account from using the shoutbox.

As this is a human spammer.  There are no filters that we could have used to block registration.  Sorry.

Will get an IP ban when an admin next comes online.
« Last Edit: January 15, 2010, 06:53:03 PM by Mez »

Offline Zardox Xheonov

  • Sr. Member
  • ****
  • Posts: 274
Pm Spam
« Reply #13 on: January 15, 2010, 04:36:38 PM »
Quote from: Hooman
I've also banned their IP, and their email host. That should block future attempts from that location.
Quote


Yeah Hooman the banisher!! yeah!

I hate bots... Thanks Hooman.

*DEATH TO THE SALAD EATERS!* "Which includes bots aswell!"

(^So says the shrub patrol^)
Hit me up on discord, if I am online, you know I'll be gaming.

(Lord Of Pain is no more, I am currently now "Zardox" and have been for awhile on other platforms.)

Offline AmIMeYet

  • Full Member
  • ***
  • Posts: 128
Pm Spam
« Reply #14 on: January 15, 2010, 05:42:44 PM »
I don't think UlfStein is a spammer actually.
Since when do spammers take the time to play a nice game of OP2?
I really think that pm is a bug, seeing as how he couldn't possibly have posted that (pm from the date before he registered, no pm rights).
« Last Edit: January 15, 2010, 05:51:08 PM by AmIMeYet »

Offline Zardox Xheonov

  • Sr. Member
  • ****
  • Posts: 274
Pm Spam
« Reply #15 on: January 15, 2010, 05:47:36 PM »
i'd have to agree, he dont spam on irc, and i dont even know what you guys think is wrong with his pm.

if you get to know him he's quite freindly.

in my opinion you guys are just trying to make him look bad;Please lift his ban and give an apology. :)

Ask meatwad or highlander, they'll tell you that hes a gamer.
« Last Edit: January 15, 2010, 05:59:06 PM by Lord Of Pain »
Hit me up on discord, if I am online, you know I'll be gaming.

(Lord Of Pain is no more, I am currently now "Zardox" and have been for awhile on other platforms.)

Offline Mez

  • Hero Member
  • *****
  • Posts: 648
Pm Spam
« Reply #16 on: January 15, 2010, 06:16:47 PM »
Quote
I don't think UlfStein is a spammer actually.
Since when do spammers take the time to play a nice game of OP2?
Well either ULFsteins account has been hijacked, or he is a spammer considering the PM I and others have received.  Giving a link to a known spam/attack site.

If his account has indeed been hijacked then ULFstein is free to make a new account and choose a more secure password or if using a kiosk to properly logout and clear all board cookies.

So AmIMeYet, I take it that you have played a game of op2 with him/her?

If he/she passes email validation and you will vouch for himthen I'll reactivate the account.

EDIT:

Talked to ULFstein on IRC, a real person.
« Last Edit: January 15, 2010, 06:20:15 PM by Mez »

Offline Highlander

  • Hero Member
  • *****
  • Posts: 780
  • Outpost 2 Elder
Pm Spam
« Reply #17 on: January 15, 2010, 06:20:18 PM »
Seems very unlikely he's a spammer.
He did bother to go to IRC more than once to get help to set up hamachi and play games.

And how could he have sent spam mails before he even signed up and without permission ?
Please reconsider blocking out our newest colonist.
There can be Only one. Wipe Them out. All of Them.

Old player still playing. Visit Spark for a game of Outpost 2

Offline Sirbomber

  • Hero Member
  • *****
  • Posts: 3237
Pm Spam
« Reply #18 on: January 15, 2010, 06:30:16 PM »
He shall explain himself, and all further posts/PMs by him shall be under moderator preview until that it deemed unnecessary.

That's my suggestion, anyways.
"As usual, colonist opinion is split between those who think the plague is a good idea, and those who are dying from it." - Outpost Evening Star

Outpost 2 Coding 101 Tutorials

Offline Mez

  • Hero Member
  • *****
  • Posts: 648
Pm Spam
« Reply #19 on: January 15, 2010, 06:40:53 PM »
Problem found.

ULFstein has a virus/malware.  Turned off his firewall / opened up file sharing at home over Christmas to share files with relatives.

Forgot to turn the protection back on.

No guesses as to what happened when he returned to university on their high speed network.

Forum account has been suspended and will be deleted.  Has been told to create a new account when ULFsteins computer has been cleaned.
No posts -> easier for ULFstein to create a new account.

ULFstein apologises for the problems caused.

Topic Closed.