Mods please delete user nigehkang

pkhoury

That guy with the goats
Joined
Nov 30, 2010
Location
Medina, TX
TDI
2013 JSW, 2 x 2002 Golf, 1995 F450 7.3L
Workaround I figured out until the mods could get the spammer mass-deleted was to click on that spambot's username, then click IGNORE - then you don't see any threads started by them.
I remember that feature came in real handy during the dieselgate thread that was several hundred pages long.
 

2004LB7

Veteran Member
Joined
Jun 2, 2013
Location
California
TDI
2006 Jetta
I'm an admin on another forum and we had a similar issue with spammers getting through. Site admin tried many different things to keep them out. What seemed to work best was the question control at the registration. Basically a question that people who are familiar with the vehicle would know. In our case it is, what transmission is used with the Duramax. "Allison" being the answer. Multiple spellings and even the manual transmission name was added to the correct answers.

I don't think a single spam bot got through the registration since this was implemented in February
 

2004LB7

Veteran Member
Joined
Jun 2, 2013
Location
California
TDI
2006 Jetta
Another interesting thing I noticed is many of these spam bots seem to be using IPs that point to a server in Los Angeles. And I see that most are T mobile service providers. I think T Mobile has an Internet server in Los Angeles and it must be unsecure or have lac standards as many seems to be using it for spamming

This is an example of one
 

P2B

Top Post Dawg
Joined
Jan 11, 2006
Location
Toronto & Muskoka, Canada
TDI
2002 Jetta, 2003 Jetta, 2003 Jetta Wagon
Another interesting thing I noticed is many of these spam bots seem to be using IPs that point to a server in Los Angeles. And I see that most are T mobile service providers. I think T Mobile has an Internet server in Los Angeles and it must be unsecure or have lac standards as many seems to be using it for spamming

This is an example of one
The spammers are using a botnet consisting of compromised Windoze boxes, some of which happen to belong to T Mobile customers.
 

2004LB7

Veteran Member
Joined
Jun 2, 2013
Location
California
TDI
2006 Jetta
The spammers are using a botnet consisting of compromised Windoze boxes, some of which happen to belong to T Mobile customers.
Any explanation as to why so many seem to be located that address in Los Angeles? I've blocked dozens of spammers/bots on another forum and a large percentage seem to have addresses from this location and using T mobile. Makes me think there is a particular Internet server/service provider run by T Mobile that is easy to hack or doesn't care that a bunch of their users are abusing it for spamming
 

P2B

Top Post Dawg
Joined
Jan 11, 2006
Location
Toronto & Muskoka, Canada
TDI
2002 Jetta, 2003 Jetta, 2003 Jetta Wagon
Any explanation as to why so many seem to be located that address in Los Angeles?
Probably because that's the administrative address T Mobile provided to ARIN for the IP address ranges in question. It does not necessarily represent the location of the T Mobile customer currently using that address.
 

vwxyzero

Veteran Member
Joined
Jul 12, 2004
Location
Los Angeles, CA
TDI
'96 TDI Passat Sedan, '96 TDI Passat Wagon, & Jetta Sedan, '83 Turbodiesel (IDI)
I'm an admin on another forum and we had a similar issue with spammers getting through. Site admin tried many different things to keep them out. What seemed to work best was the question control at the registration. Basically a question that people who are familiar with the vehicle would know. In our case it is, what transmission is used with the Duramax. "Allison" being the answer. Multiple spellings and even the manual transmission name was added to the correct answers.

I don't think a single spam bot got through the registration since this was implemented in February
How about during registration using a 'reCAPTCHA'? Obviously TDI related. And confirm by asking who owns the trademark TDI, and define what it means.
 

2004LB7

Veteran Member
Joined
Jun 2, 2013
Location
California
TDI
2006 Jetta
How about during registration using a 'reCAPTCHA'? Obviously TDI related. And confirm by asking who owns the trademark TDI, and define what it means.
Apparently reCAPTCHA is no longer capable of stopping bots. But just using the question "what does TDI stand for" would be a good start at blocking the majority
 

LordZedd

Active member
Joined
May 9, 2025
Location
Denver
TDI
2013 Passat
@Spawn and @oklmxonsent suspicious PM's about my WTB list giving "+1" phone number wanting to move the conversation to texting.
 
Top