Archive through January 22, 2021

Star Fleet Universe Discussion Board: Company-Conventions-Stores-Ideas: About the Company: Dear Jean: Webmom: Spambot Report Folder CL#55: Archive through January 22, 2021
By Mike West (Mjwest) on Sunday, January 17, 2021 - 10:49 am: Edit

IP Information
IP address for this post
1.186.123.59 [ 1 Post ] [ Look up IP address ]
Users posting from this IP address
NashLena [ 1 Post ] Search
WalkerLena [ 1 Post ]

When it couldn't edit the original, they posted a reply with the hidden link. Deleted the offending replies, and these are confirmed.

By Jean Sexton Beddow (Jsexton) on Sunday, January 17, 2021 - 11:58 am: Edit

Mike, I blocked the range. With the change, at least it is easier for you to find them, and you don't have to keep checking the old messages for bad stuff.

By Mike West (Mjwest) on Sunday, January 17, 2021 - 03:55 pm: Edit

Oh, yes! This is much easier. Just sad we had to do it.

By Mike West (Mjwest) on Sunday, January 17, 2021 - 07:00 pm: Edit

Two more confirmed:

IP address for this post
13.212.253.214 [ 1 Post ] [ Look up IP address ]
Users posting from this IP address
christesr75 [ 1 Post ]

IP address for this post
3.26.3.134 [ 1 Post ] [ Look up IP address ]
Users posting from this IP address
jeflsdean84 [ 1 Post ]

Offending posts deleted.

By MarkSHoyle (Bolo) on Monday, January 18, 2021 - 12:14 pm: Edit

Two more: is anyone still playing StarFleet Battles?
One in Miniatures and one in Star Fleet Battles...
Exact same text....

By Mike West (Mjwest) on Monday, January 18, 2021 - 02:20 pm: Edit

Well, technically, there is nothing wrong with the posts (other than being duplicates). So, I have deleted one (from Miniatures) and left the other until they try the reply in 3 days or so.

No one needs to respond or anything. I just think it's probably better to not get into a "shoot first" mode, even though it's 100% that this is a spammer.

By MarkSHoyle (Bolo) on Monday, January 18, 2021 - 04:56 pm: Edit

What got me, was, the supposed "Found 35 Miniature packages"....
Might not know where I put things at times, do know I have them...

By Mike West (Mjwest) on Monday, January 18, 2021 - 07:07 pm: Edit

Again, the whole thing is a big collection of red flags. It will turn. But I till have to be measured even though I'd lay money on them being bad.

By Steve Cole (Stevecole) on Monday, January 18, 2021 - 09:50 pm: Edit

Just don’t go accusing everyone who shows up.

By Mike West (Mjwest) on Tuesday, January 19, 2021 - 01:51 pm: Edit

The two below finally made their repeat visit with spammed replies. They stick the links into the quoted material and then make a "problem solved" response. Usually spelled incorrectly, too.

Of note, however, is that their return trips were done on wildly different IP addresses. This likely means banning IPs isn't really going to help much. :(

43.243.82.12 [ 1 Post ] [ Look up IP address ]
Users posting from this IP address
emilykiny62 [ 1 Post ] Search
Other IP addresses this user has posted from
86.96.62.248 [ 1 Post ]

IP address for this post
84.16.238.76 [ 1 Post ] [ Look up IP address ]
Users posting from this IP address
RileyDylan [ 1 Post ] Search
Other IP addresses this user has posted from
18.197.160.85 [ 1 Post ] [ Look up IP address ]

As a follow-up, out of all of the "users" in Garth's list, all of the ones identified as having a pattern have spammed.

By Mike West (Mjwest) on Wednesday, January 20, 2021 - 08:54 am: Edit

This one went bad, too.

IP address for this post
3.106.128.217 [ 1 Post ] [ Look up IP address ]
Users posting from this IP address
escoutdril54 [ 1 Post ] Search
Other IP addresses this user has posted from
176.204.16.99 [ 1 Post ]

Killed the whole thing.

By Garth L. Getgen (Sgt_G) on Wednesday, January 20, 2021 - 01:28 pm: Edit

Mike, Another one went bad: "ryanhurst39" in the topic "is anyone still playing StarFleet Battles?"


Garth L. Getgen

By Steve Cole (Stevecole) on Wednesday, January 20, 2021 - 02:02 pm: Edit

Yeah, after I went to the trouble to look up a link for Ryan. Sigh. Either that is one hell of a sophisticated bot or some human being is being paid way to much to post spam links.

By Mike West (Mjwest) on Wednesday, January 20, 2021 - 02:40 pm: Edit

Here's the IP info for the user:
IP address for this post
216.244.82.50 [ 1 Post ] [ Look up IP address ]
Users posting from this IP address
ryanhurst39 [ 1 Post ]

The offending post is gone.

As an aside, any user with a username consisting of nine letters followed by two numbers is likely to be a spammer. Likewise, anyone using the form FirstLast as a username is suspect, and if there are two with the same Last in the username, it is guaranteed. While annoying, at least they are consistent to make things easier to follow.

The weirdest part (like I mentioned above and Steve mentions here) is where they are getting these questions from. They have all been very reasonable, and two were totally legit! I don't get it.

By Garth L. Getgen (Sgt_G) on Wednesday, January 20, 2021 - 04:14 pm: Edit

I went to a couple of the posts, highlighted the text, right-clicked and selected Search Google. I found two of the posts on Reddit, one from three years ago and another from six years ago. They were word-for-word copy/paste, including the topic names. That's a lot of work and research just to be able to post spam-links "on topic" in a niche forum like SFB / FedCmdr, don't you think. Weird.

www reddit com/r/boardgames/comments/5ukgwp/looking_for_help_federation_commander/
www reddit com/r/boardgames/comments/2xx8by/is_anyone_still_playing_starfleet_battles/


Garth L. Getgen

By Jean Sexton Beddow (Jsexton) on Wednesday, January 20, 2021 - 04:36 pm: Edit

I have blocked so entire groups of IPs. The last one was from Seattle, so I blocked only the specific IP.

By Mike West (Mjwest) on Wednesday, January 20, 2021 - 06:43 pm: Edit

Garth, let us know if you find where the Andro question came from.

By Mike West (Mjwest) on Thursday, January 21, 2021 - 07:57 am: Edit

Another repeat performance, but old style:

IP Information
IP address for this post
103.103.43.254 [ 1 Post ] [ Look up IP address ]
Users posting from this IP address
SaraArianna [ 1 Post ]

By Garth L. Getgen (Sgt_G) on Thursday, January 21, 2021 - 08:54 am: Edit

Mike, no joy on that. Google wants to focus on "couple" and "inspired" and comes back with a long list of sites that have nothing to do with SFB / FedCmdr. I tried to trim the search down, but then it keys in on "Feds" and gives me sites about the Federation Reserve's interest rates. Searching for any of the three questions came back empty. Sorry.


Garth L. Getgen

By Mike West (Mjwest) on Thursday, January 21, 2021 - 01:39 pm: Edit

No problem. Just curious. Thanks for trying!

By Garth L. Getgen (Sgt_G) on Thursday, January 21, 2021 - 01:42 pm: Edit

Just notice a typo in my last post. LOL. It's the Federal Reserve, not the Federation Reserve. Either this is a sing I'm getting old, or I've been playing SFB too long. Or both.


Garth L. Getgen

By Garth L. Getgen (Sgt_G) on Friday, January 22, 2021 - 08:38 am: Edit

Three new "traditional" spam posts on the FedCmdr board, all by user "SaraArianna".


Garth L. Getgen

By MarkSHoyle (Bolo) on Friday, January 22, 2021 - 08:53 am: Edit

All 3 are repeats of posts that came out several months ago....
Seeing the titles made them stick right out to me...
Metal Detector...Something Video....

By Mike West (Mjwest) on Friday, January 22, 2021 - 10:23 am: Edit

IP address for this post
103.103.43.254 [ 3 Posts ] [ Look up IP address ]
Users posting from this IP address
SaraArianna [ 3 Posts ]

All three use the above IP. It might be worth banning this particular user. They seem persistent ...

Posts deleted.

By Mike West (Mjwest) on Friday, January 22, 2021 - 03:04 pm: Edit

Another from SaraArianna deleted. Same IP as above.

Administrator's Control Panel -- Board Moderators Only
Administer Page | Delete Conversation | Close Conversation | Move Conversation