[Bubba]

Jim, here's an example of the problem - one of the IPs that you were using last night was 82.132.211.164

When I look at that IP on Project Honeypot I get this:

Example Messages Sent From 82.132.211.164
From: uijyho6687@360-2e07bf1.idsbi.com
Subject: For clarita_wiatrek
From: "We sell USViagra" <panioho4973@1800gotjunk.com.au
Subject: Hi djfredricksen. Get here for 60% off. of Macoumb
From: "We sell USViagra" <odauvi2401@1stloveonline.com>
Subject: Hi marline_crysler. Get here for 60% off. likely
From: "We sell USViagra" <uvoko2136@2350.uni-beispielsta
Subject: Hi janean_w_chiverton. Get here for 60% off. Civil
From: "Best from Pfizer" <seyxo2947@4parkers.com>
Subject: Hi debbiesdandoy, Black Friday Sale. born the as
From: "Bluemeds from Pfizer" <lefikugiha8228@35d-10d9eff
Subject: Hi mtfuell2, SALE ends Monday. the monitored
From: "Sale Reminder" <dawigomure5828@4kids.ee>
Subject: Hi supranationaltrade. airport onto Sunday become
From: "Carolyn Moses" <0-2tin@renault.com>
Subject: candystripedbartow
From: На��гуль Эд��ардо��на
Subject: Платья от 1333р.! Скидка 40%
From: "Eloise Audrey" <eaudreyaz@jhbryant.com>
Subject: All the best herbal sex pills for hard erections

So what's probably happening is that somebody has spammed from that IP address in the past, but you've been allocated it automatically via your phone company.

[slackline]

Or perhaps there is some of that software from "the usual places" installed on your phone that is doing nefarious things. 

[GCW]

You must get through a lot of sildenafil Jim.

[wiain]

I've been completely unable to log in at work for a few days. No error message, it just stalls after several minutes of nothing doing. Seems fine at home. Is the same problem?

[Bubba]

Do you know what your work IP address is?

[tomtom]

Hi Bubba,
Its been occasionally throwing me off a few times yesterday and tomorrow - on both phone and computer.
(Karoo, Hull...)
T

[Bubba]

Yeah, there was still >200 users logged out overnight. Don't all tell me when this happens please!

The problem I have is until the same spammer IP offends twice with different usernames I can't really ban them as it could just be somebody forgetting their password.

But, please do tell me if you can no longer get on at all where you would have done a few days ago as that means you may be incorrectly being identified as a spammer by the automatic system.

[slackline]

People can see for themselves a indication of how much spam activity is occurring thanks to the new plugins which put at the bottom of all pages...

Bad Behavior has blocked 412 access attempts in the last 7 days.

[Bubba]

That's only one of 4 angles of attack but yeah, it does give you some idea - you can add another 1000 to that figure (and that's not including IPs that are firewalled at the host level) if you include the other blocks but it gives an idea of how many bots/spammers/etc are constantly bombarding a medium sized forum such as this.

[SA Chris]

I wish I knew what the fuck you guys were talking about. But thanks for fighting the good fight as always.

[butters]

Slackers will be along in a while to explain Chris - you still won't understand it though. 

[andy_e]

I think it's something along the lines of people trying to get in to your front door with the wrong keys and leaving the key in the door so that you can't get your key in. What Bubba is doing is essentially leaving guard dogs and bouncers around the front door that check the keys before you can try your key in the door. 

[Bubba]

Good analogy Andi 

I've also got a squadron of pitbulls stationed just inside the door so that whoever attempts to stuff junk-mail through the letterbox gets their hand gnawed off

[andy_e]

I might get one of those in real life, I'm sick of being reminded how many take-aways there are in the area.

[wiain]

Do you know what your work IP address is?

Not offhand. I'll try to remember to write it down when I'm at work. I still definately couldn't log on today and neither could colleagues that I asked to try.

[Jim]

any chance of an exception on my current phone ip address or a way to get a different one? ta

[Bubba]

Jim - since you're a trusted user, I've added you to a new usergroup of "Trusted Users" which should allow you to bypass being checked by the system that's causing you grief.

I have no way of testing this however so please let me know whether it works ok - i.e. you don't get the "are you human" checks but you can still do everything that you used to be able to do on the forums.

[slackline]

Do you know what your work IP address is?

Not offhand. I'll try to remember to write it down when I'm at work. I still definately couldn't log on today and neither could colleagues that I asked to try.

http://www.whatismyipaddress.com will sort that out (would you like an egg with a straw as a side-dish?)

[wiain]

http://www.whatismyipaddress.com will sort that out (would you like an egg with a straw as a side-dish?)

Indeed, but presumably only if used at the place in question. Where I can't get to UKB to see this thread and be reminded that I need to find my IP address. Hence my need to remember to look it up when I'm there, not here.

[Jim]

cheers Bubba.
actually i've fooled you, i am a robot
beeb beeb beeb......
01100100111010110100001
error

[wiain]

Bubba, my work IP is 81.153.135.125 any chance you can call off the pitbulls?

[Bubba]

That was one of the IPs that I requested our hosts to firewall which would explain the behaviour at your end. I would only have done this if there were failed login attempts for more than one userid coming from that IP. Do you have more than one ukb user at work?

Anyway, I've asked them to remove the entry so hopefully it'll be sorted by the time you're back in work.

[wiain]

Do you have more than one ukb user at work?

I reckon so. We provide free wireless for The Foundry 

[Bubba]

Ah! That explains a lot

Apologies for firewalling the Foundry!

[philo]

I believe i was a victim of this.  Got an error each time I tried to log in until one day bubba banned me      it seems to have sorted itself out now though.