Could be nothing...
Results 1 to 9 of 9

Thread: Could be nothing...

  1. #1
    Junior Member Raelz's Avatar
    Join Date
    Feb 2003
    Posts
    22

    Could be nothing...

    So I run a small website forum for a gaming clan/guild/group, and said website is utilizing phpBB. I don't have too much trouble with getting rid of the occasional idiot who wants to sell me viagra and porn(oh how clever!), but I stumbled upon something very strange today, and I just thought I'd share.

    I had a new regsitered user, johnkthegreat.

    I do not know John, nor do I know why he is so great. I instantly thought it was a fake user, so I deleted it. In my haste, I neglected to copy down the IP address used to register, so in my slightly angry-at-myself but curious state, I googled johnkthegreat.

    http://www.google.com/search?q=johnkthegreat

    What I found, was fairly remarkable. This user has signed up for a couple THOUSAND phpBB forums on the net. Almost all, if not all(I didn't step through 30,000 pages of results) of the results are links to his profile page on a forum. Each of the ones I clicked was the exact same account as was created on my forum. He had registered, and placed his website:

    http://members.lycos.co.uk/johnkthegreat/index.php

    In that section of the profile page. This website, oddly enough, links to a tripod page that is not yet created. It's almost as if, whoever this is, they are signing up for tons of sites prematurely, or testing some spamming functionality. Hmm...

    I'm not really sure where to go with this yet, but I figured I'd toss it out to the Antionline community, and see what you all thought.

  2. #2
    Gonzo District BOFH westin's Avatar
    Join Date
    Jan 2006
    Location
    SW MO
    Posts
    1,188
    Doesn't look like he has registered with AO yet... definitely sounds suspicious... did he post anything after registering? Did you note the time lapse between account creation and deletion?

    If you run a google search with
    johnkthegreat -profile
    you still get about 18,000 results. I have yet to find a single post by the actual user... here is a post apparently about him though...
    ამჟამად აქ 8 მომხმარებელია :: 2 რეგისტრირებული, არცერთი უჩინარი და 6 სტუმარი [ ადმინისტრატორი ] [ მოდერატორი ]
    ყველაზე მეტი,80 მომხმარებლის ერთდროული შემოსვლის დროა ორშ ივლ 16, 2007 12:38 pm
    რეგისტრირებული მომხმარებლები: johnkthegreat, Naia

    მე და კარვის მისტიური მომხმარებელი ...
    anyone speak/read whatever that is? some kind of Arabic? That is weird though... too bad you didn't log the IP...
    \"Those of us that had been up all night were in no mood for coffee and donuts, we wanted strong drink.\"

    -HST

  3. #3
    Junior Member Raelz's Avatar
    Join Date
    Feb 2003
    Posts
    22
    He never posted a thing, and never really did anything on the site. I really screwed up by deleting him, but perhaps he will create the account at some point. In any case, he was not a member of any group that could post on the forum, which may have lead to him not being able to post.

    I'm wondering if it's just a generated user name, done by a bot, for purpose of spamming.

    That text is definately Arabic, too bad my ex and I don't speak or I'd get her to translate it.

  4. #4
    Senior Member
    Join Date
    Oct 2007
    Location
    do a whois search on my ip...
    Posts
    268
    Quote Originally Posted by Raelz
    That text is definately Arabic, too bad my ex and I don't speak or I'd get her to translate it.
    you cant translate what it means in sign language? =)

    does your site have a image string generator that you have to input to register?

  5. #5
    Junior Member Raelz's Avatar
    Join Date
    Feb 2003
    Posts
    22
    Quote Originally Posted by ArPaNET
    you cant translate what it means in sign language? =)

    does your site have a image string generator that you have to input to register?
    Indeed, the site uses Captcha technology, but most of them can be broken fairly easily. I've got a site showing you how to do so, and showcasing the ease.

    It's not the registering that's bothering me, as it's not really happening in more than 2-3 fraudulent sign-ups a month, but the strange ability to google this username, and find him signed up for 30,000 forums like mine.

  6. #6
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    Hmmmm,

    I have just spoken with my cat (Mystic Mog), and she knows the gentleman (she thinks)................

    He speaks fluent Albanian, and lives in the Marshall Islands (GMT -12)

    phpBB will have version 3 out in the New Year.......... it is a lot better.......... feel free to ask about it. Might I suggest that you use the private messaging system............. no point in warning the scumbags and pondlife huh?

    Oh yeah................ that is a bot you are dealing with.
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  7. #7
    Senior Member isildur's Avatar
    Join Date
    Feb 2003
    Posts
    166
    An Albanian bot living in the Marshall Islands... interesting... from the above post, I had guessed something completely different... damn.
    Only trust Pipe-smoking Penguins.

  8. #8
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    Actually it is rather strange. There is a table of site languages and another one for timezones.

    All the phpBB bots I have seen take the first entries. I would have expected them to use the site defaults?
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  9. #9
    Senior Member
    Join Date
    Oct 2007
    Location
    do a whois search on my ip...
    Posts
    268
    maybe it isn't a bot! Maybe it is a lonely guy just busting away at his computer all night lol...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides