Posted by Michael on 12/06/07 04:35

Onideus Mad Hatter wrote:
> On Thu, 06 Dec 2007 12:39:37 +1030, Michael
> <michael_j@pythontech.net.au> wrote:
>
>> Chilly8 wrote:
>>> "Jerry Stuckle" <jstucklex@attglobal.net> wrote in message
>>> news:Ze6dnUvZ38qZgMvanZ2dnUVZ_uninZ2d@comcast.com...
>>>> Chilly8 wrote:
>>>>> "Jerry Stuckle" <jstucklex@attglobal.net> wrote in message
>>>>> news:0v2dnWmDBPFamsvanZ2dnUVZ_j-dnZ2d@comcast.com...
>>>>>
>>>>>
>>>>>>> It appears that by simply blocking incoming traffic from the networks
>>>>>>> of three data centers around the world has stopped it. I have only see
>>>>>>> one "phony" registration all day, coming from China. Blocking all
>>>>>>> traffic from inHoster in Ukraine, Keymachine in Germany, and
>>>>>>> FDC servers in Chicago has pretty much stopped the porn bots.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> For now. But how many legitimate users might you be blocking, also?
>>>>>>
>>>>>> Blocking an entire range of addresses is almost never the right answer.
>>>>>> Just the expedient one.
>>>>> I doubt I would be blocking any legitimate users, as those sites I
>>>>> mentioned
>>>>> are all server colocation facilities. It appears that somoene has
>>>>> compromised
>>>>> all the machines at least two of those server farms. It might be possible
>>>>> that
>>>>> some users, trying to use a proxy from work to acoid detection by the
>>>>> boss, might be affected by blocking FDC servers, since a couple of
>>>>> popular anonymity services use FDC for their server needs, but
>>>>> beyond that, I don't think many legitimate users will be affected, but
>>>>> there really is no other answer to the problem.
>>>>>
>>>>>
>>>>>
>>>> There are lots of other answers to the problem. Some have been listed
>>>> right here. And none of them involve blocking a whole range of IP
>>>> addresses.
>>> Well, these are all just server farms, where people place web servers, so
>>> the only humans using the machines, other than people browsing the web
>>> sites, would be the individual web site admins, so other than maybe
>>> somoene trying to use a Web proxy from work to hide what they are
>>> doing from the boss, I don't think I would be impacting that many users.
>>>
>>> Like I said, blocking all traffic from those three data centers has cut
>>> the problem of people posting porn links down to almost nothing. I
>>> get maybe a handful a day, but not the dozens a day I was getting.
>>> I don't think I will see anymore from folks like SuperXXXPorn
>>> or BestinWeb. I got them stopped dead in their tracks.
>>>
>>> If you are running any servers hosted at the datacenters of Inhoster,
>>> Keymachine, or FDC servers, you better check and see that
>>> your servers have not been compromised by these people that
>>> are doing this. 99.9 percent of the traffic that was posting porn
>>> links were coming from compromised machines at these data
>>> centers. And there is no POSSIBLE way I could have
>>> discovered this without using a main page translated to HTML
>>> and having all the traffic logged with StatCounter.
>>>
>>>
>>>
>> Apache logs much?
>>
>> There are plenty of good utilities to view these logs: analog, awstats
>> and webalizer just to name a few.
>>
>> There is hundreds of other ways you could have determined where 'this
>> bad traffic' is coming from. As they say, knowledge is dangerous, and so
>> is ignorance.
>>
>>
>> Like I said in another post:
>>
>> "This is where your spam is coming from RIGHT NOW, it wont be in a few
>> weeks time. But thats okay, you will just block those IPs as well! When
>> you have thousands of blocked IP ranges, are you going to periodically
>> check them, to see if they have been re-allocated to some poor ISP?"
>
> You know another "solution" to his problem, other than using catcha
> images, is to rely on forum participants in the way that sites like
> MySpace and YouTube work. Basically set up a rating system and if
> enough users "mark as spam" the post will be removed.

This alone would not stop the problem. You would still need to use it
with other methods of spam prevention like 'CAPTCHA' or email address
verification.

Given he has difficulties with CAPTCHA, and tracking where his users are
coming from, I'd say a social voting system is perhaps a bit out of his
league ;).

>
> --
>
> Onideus Mad Hatter
> mhm ¹ x ¹
> http://www.backwater-productions.net
> http://www.backwater-productions.net/hatter-blog
>
>
> Hatter Quotes
> -------------
> "You're only one of the best if you're striving to become one of the
> best."
>
> "I didn't make reality, Sunshine, I just verbally bitch slapped you
> with it."
>
> "I'm not a professional, I'm an artist."
>
> "Your Usenet blinders are my best friend."
>
> "Usenet Filters - Learn to shut yourself the fuck up!"
>
> "Drugs killed Jesus you know...oh wait, no, that was the Jews, my
> bad."
>
> "There are clingy things in the grass...burrs 'n such...mmmm..."
>
> "The more I learn the more I'm killing my idols."
>
> "Is it wrong to incur and then use the hate ridden, vengeful stupidity
> of complete strangers in random Usenet froups to further my art?"
>
> "Freedom is only a concept, like race it's merely a social construct
> that doesn't really exist outside of your ability to convince others
> of its relevancy."
>
> "Next time slow up a lil, then maybe you won't jump the gun and start
> creamin yer panties before it's time to pop the champagne proper."
>
> "Reality is directly proportionate to how creative you are."
>
> "People are pretty fucking high on themselves if they think that
> they're just born with a soul. *snicker*...yeah, like they're just
> givin em out for free."
>
> "Quible, quible said the Hare. Quite a lot of quibling...everywhere.
> So the Hare took a long stare and decided at best, to leave the rest,
> to their merry little mess."
>
> "There's a difference between 'bad' and 'so earth shatteringly
> horrible it makes the angels scream in terror as they violently rip
> their heads off, their blood spraying into the faces of a thousand
> sweet innocent horrified children, who will forever have the terrible
> images burned into their tiny little minds'."
>
> "How sad that you're such a poor judge of style that you can't even
> properly gauge the artistic worth of your own efforts."
>
> "Those who record history are those who control history."
>
> "I am the living embodiment of hell itself in all its tormentive rage,
> endless suffering, unfathomable pain and unending horror...but you
> don't get sent to me...I come for you."
>
> "Ideally in a fight I'd want a BGM-109A with a W80 250 kiloton
> tactical thermonuclear fusion based war head."
>
> "Tell me, would you describe yourself more as a process or a
> function?"
>
> "Apparently this group has got the market cornered on stupid.
> Intelligence is down 137 points across the board and the forecast
> indicates an increase in Webtv users."
>
> "Is my .sig delimiter broken? Really? You're sure? Awww,
> gee...that's too bad...for YOU!" `, )

[Back to original message]