Is it a bad behaviour from robot ?

sexy robots ^^

The ones I've seen all have "sexy" and ".ru" so I think it's porn spam.

Hier ist auch noch einer:

Atrene arlak --- www.sеху.bgwbfp.ru arlak@joindiaspora.com

Siur --- www.sеху.******.ru ausooke@joindiaspora.com
Coin Rather --- www.sеху.****.ru markwilcox@joindiaspora.com

Yeah, these aren't the interesting, subversive Russian bots. Just normal, boring porn bots.

Nedave --- www.sеху.gqfd.ru, Antonis Sam --- www.sеху.fcxx.ru

There's a "rule" somewhere that says, any sufficiently popular internet forum or communications channel will attract spammers. Zero or very low cost to spam, possibility for the spammers of non-zero return. As the mainstream channels get better at weeding out the spammers they turn to other networks that have fewer resources to block them -- a few months ago all the Strava (cycling) groups started to get spam

Thanks for the report @тoвι. I've purged most of these accounts. @Le Général Midi couldn't find 'Nedave' and 'Antonis Sam'. Do we have their usernames?

New accounts are blocked on JD. Maybe they are coming from invites?

I've also had a few of them liking my posts. It's actually a rather clever way of spamming - you can't report them directly, because they don't post or comment, and if you block them, they can still like your posts and others will see them.

New accounts are blocked on JD. Maybe they are coming from invites?

That's weird... Maybe they are hacking into accounts that have weak passwords.

No most of these are recently created accounts. Can I kindly ask you to check the profiles of those users if they are deleted and report them if they are not?

The zxydqz.ru domain and others redirect to Yoursweetdream2.com: yoursweetdream2 - traffic statistics - HypeStat
74.222.27.21 Whois Lookup - IPsnoop.com

74.222.27.21
Host: umrp.queennances.net
ISP: Perfect International, Inc, AS22439
Latitude: 34.0584
Longitude: -118.278
City: Los Angeles, 90017
Region: California, CA
Country: United States, US

They are not deleted yet, but I've reported them per email to Zauberstuhl.

This really seems to be a bigger problem at the moment...

|Tifoel Free Nuts --- www.sеху.****.ru
freenuts@joindiaspora.com|

is still active !

Well the e-mail notification spam brought me back to Diaspora* so it's not all that bad I guess ;) ... Serious though I hope it gets resolved soon.

a link to a blogpost listing sexy.****.ru

Another one: Eacost Twes --- www.sеху.lpvdx.ru zajc@joindiaspora.com

One more:
tidyeye@joindiaspora.com Vend Tidy Eye™ --- www.sеху.***.ru

• allisson@joindiaspora.com
• aespona@joindiaspora.com

cdamian@joindiaspora.com
harmattan@joindiaspora.com

Boah... das¸Blocken artet heute richtig in Arbeit aus... .

@Theodotos Andreou and @zauberstuhl, Two more just reported: sn0w75 and 84nail

Thanks!

Found two more, now I check my own JD account: audreyj and none1

Is it possible that someone has started hacking into old, inactive accounts to add spam addresses to their user names? The second of those two has two 'normal' posts from 2011, and it seems very unlikely that a spammer would enable a sleeper post 6 years before using it!

I deleted some more. Please keep reporting if you find more of these clowns.

One 'liked' me on my share ^^

And some more (liked posts from the HQ account):
– anasofia
– deafzebra
– alfamemnon

Is there a way to search users of your pod with 'www.sexy' in their names? All of these accounts seem to contain that string, and it might help you to deal with it more simply.

ps: All clowns should be deleted! [shudder]

Deleted those too. I tried searching for 'sexy' but didn't find any spam accounts. Could the -- before the URL function as a comment and excluded from the results?

I meant --

@Theodotos Andreou if they're all coming from one invite link, you can set the number of invitations (of the inviting user) to 0

Audrey J. — www.sеху.jdany.ru (audreyj@joindiaspora.com)
Rialtint — www.sеху.enqs.ru (kruemel2302@joindiaspora.com)
Fotoal Asrees --- www.sеху.xbni.ru vaiodude@joindiaspora.com

Why not confront that "user" (abuser) about spamming us?

@Theodotos Andreou

Thank you so much! :)

It seems as if they are using some unicode, so that querying for "sexy" hadn't worked. But with the following query I blocked them on my Friendica server:

update contact set blocked=true where name like "%---%.ru";

This pattern seems to work well.

So I blocked nearly 300 accounts.

@Waithamai Dragonqueen how can I find the inviting user?

Why not confront that “user” (abuser) about spamming us?

Usually they don't bother to reply. Instant delete is the cure for them.

It seems as if they are using some unicode, so that querying for “sexy” hadn’t worked. But with the following query I blocked them on my Friendica server:

update contact set blocked=true where name like "%---%.ru";
This pattern seems to work well.

So I blocked nearly 300 accounts.

@zauberstuhl ^^

@Theodotos Andreou i don't know! hmm. isn't the invited user sharing with the inviting user from the beginning? maybe you could check their contacts or something.. they usually only like posts and don't add people, so that might work..?

Here are two more:
https://joindiaspora.com/people/2166195a959d24b1
https://joindiaspora.com/people/de9e9831a47d6259

It seems as if they are using some unicode, so that querying for “sexy” hadn’t worked. But with the following query I blocked them on my Friendica server:

I closed 253 accounts. I hope I found all of them.
Also I closed invites for now.

// Lukas

I have 298 from JD here in my database. So there are more of them.

<3

There are also accounts with "%---%.website"

And some more that I found with this query:

update contact set blocked=true where name like "% --- %www.%";

Thanks @Michael Vogel I am closer to 300 now

zaidib@joindiaspora.com
tson0n0@joindiaspora.com
se@joindiaspora.com

hehe, this post was also liked by Isveoran — www.sеху.l*****a.ru tusastatamefe@joindiaspora.com

And Maximilian --- www.sеху.z***o.ru
kordek@joindiaspora.com

That's so cheeky!

By the way, it's best not to include the full spam URLs in comments, as these can get picked up by search engines, which means we end up doing the spammers' job for them.

next:
Anel Brad Lee --- www.sеху.rjdolek.ru
sainthook@joindiaspora.com

also the two I reported before are still online:
Siur — www.sеху.**.ru ausooke@joindiaspora.com
Coin Rather — www.sеху..ru markwilcox@joindiaspora.com

also the two I reported before are still online

They are closed on joindiaspora.com – that information probably has yet to federate to your pod.

@тoвι, it might be a good idea to delete comments which include the spam URLs found in these user names, once the podmins have deleted the account listed in those comments. It would help to prevent those URLs being picked up by search engines etc. What do you think?

Found one: edwardol@joindiaspora.com

a good idea to delete comments which include the spam URLs

Done.

i don't think your list is completely accurate :) there are quite a lot of accounts listed there which don't use spammy user names or spam in any other way (for example one of my own accounts).

agent462@joindiaspora.com <--- this one has the website on the bio and started following one of my accounts

www.sеху.-----.ru <<<— Find mе аnd thоusаnds оf оthеr yоung bеаutiеs yоu саn hеrе.

@Waithamai Dragonqueen Shit, you are correct. My query wasn't correct at all. That's what I get for not double checking it in the few minutes I spent on it.

Didn't think that was right. :/

Ok, fixed my query, my pod is seeing over 300 "sexy" accounts, all from joindiaspora.

CSV: https://static.jpope.org/files/sexy_accounts.csv

got followed by this stranger : srazash@joindiaspora.com
not in the list of Jeremy Pope

sleeping spammer ?

@citoyen_candide@framasphere.org From what I can see of that user, it doesn't follow the pattern of the others mentioned in this post. (i.e. no www.sexy...ru address in the username). That could very well just be someone who hasn't posted (at least publicly) yet.

thank you for investigation

@goob@pod.orkz.net
I'll take care of it once the plague is over.

@тoвι i've flagged all the comments of this post with unmasked URL.

I've deleted comments containing clear URL from my reshare

This looks like an attempt to demonize the "Russians".

There is a new kind of spam-accounts:

starts sharing with me and has a porn-link in bio.

gosh!

Yeah, I got a few of these too.

Just click on the ignore button and that's it.

😱 rly?

Just click on the ignore button and that’s it.

In this case, it's worth reporting them to the podmin, for the reasons discussed above.

@goob@pod.orkz.net, sure that too. Report and ignore.

https://joindiaspora.com/people/ff385304e509ddbb This one shared with me, they put the sexy link in their bio to get around being banned for having it in their display name.

and another one https://joindiaspora.com/u/akochneva

@Theodotos Andreou is it possible for you to do a global search-and-delete for accounts with these 'sexy' strings in their profiles instead of in their user names? That seems to be their latest ruse.

@goobgoob/goobgoobgoob I'm only a humble moderator. Let's ask @podmin@joindiaspora.com

@zauberstuhl ^^

Oh sorry, I thought you were joint podmins. My mistake.

another one jpmi1@joindiaspora.com

it's been a while, but here we go: Thodoris Messinis pissedoffgreek@joindiaspora.com

Uri Tidhar anesthesi@joindiaspora.com
Bio - www.sеху.***rqq.ru <<<— sехy hоt wоmеn соnsоnаnts in this саsе tо stаrt with yоu fоr thе mееting yоu thеn fоrеsее.

a new one !
shanmuha@joindiaspora.com (link sexu.ru in bio)

mattdecourcelle@joindiaspora.com

kirstejn@joindiaspora.com

amilaart@joindiaspora.com

huntleja@joindiaspora.com

erahhal@joindiaspora.com

@podmin@joindiaspora.com did you see this new wave?

tomvardasca(at)joindiaspora.com

@podmin@joindiaspora.com did you see this new wave?

yes, thanks

And, another one: agent462@joindiaspora.com

Pavel Morozov russedeparis@joindiaspora.com

I was contacted by www.sexy etc etc... Username: Rich Ornelas..and was warned that this was "spam" and not to copy the link.

@podmin@podmin@joindiaspora.com ?