New Spam Tool: Email Domain & IP Banning at Sign-Up

[Eric Suesz]

We're no fan of spam at Ning. We know it can be an annoyance, especially for Ning Creators who choose not to moderate membership. While we can't solve for every type of spam attack, we have put in place a number of spam tools in the last two years that can make a difference. If you haven't turned all of those on yet, we encourage you to take a minute to make sure you're Preventing Spam in the best ways you can.

Today, we're releasing another spam tool that allows Ning Plus and Pro to perform both email domain and IP banning. 

IP banning is a request we've had over time from people here on Creators, so we are sure that a few folks who've wanted to see this will be happy that it's now available. The feature is fairly straightforward, and it's entirely optional. You'll see a new column in Member Management for IP addresses, and you'll see the option to block in the Sign-up/Sign-in area.

Block IP addresses at sign-up

You can prevent anyone coming from a specific IP address from signing up for your site. Just enter the IP address you want to block, and no one will be able to sign up from that IP address.

Block email domains at sign-up

Similarly, you can choose email domains that you want to block from signing up for your community. If you see spam coming from an email domain like [e-mail], you can block all sign-ups that come from the @sharklasers.com domain.

Of course, these are powerful tools, so we recommend using them carefully and thoughtfully. If you ban an IP that hundreds of thousands of people potentially use, you cut off access to thousands of potential members.

• These options are only available to the Network Creator; not admins.
• You can remove the bans you put in place at any time.
• If someone is unable to sign in because of these blocks, they will see a specific message. The specific message is located in the Language Editor and can be customized.
• If someone is unable to sign in, they can still contact you, provided you have not turned off that option. That option is located in your own personal Email Settings area (Feedback and problem reports).
• The reports you receive from members having trouble includes the email and IP address, as well as whether either is blocked.

One other thing to note about this feature is that you may see that an IP record is "unavailable" in your listings. In most cases, this will be because the member joined before we were able to capture their IP address (i.e., before this tool was turned on a few weeks ago).

Want to know where an IP is geographically located? Look it up on InfoSniper

You can read all about how to Block an Email Domain or IP Address from Signing Up in the Help Center.

[Apostle Solael]

I do not think that will work.  I believe you are in misunderstanding.  Google needs to know about those who use their google email address to spam other people with.  That is the issue.  Google needs to block them from using their email address - but then if google blocks them, then they will just go somewhere else...like yahoo.

Blessings..

[Rafe Saber]

Forgive me. We are not on the same wave length. If I hit the spam button I would be reporting Ning and not the perpetrators of the spam. I receive an email from Ning with a Subject Heading  "You have a new member to approve on xxxxx". IF I were to approve these spamers/scamers into my Network, the Ning automated approval email goes to a legitimate email address on Gmail. As mentioned earlier these Gmail email addresses are real using forged IPs. These email addresses are created by real people with the SOLE intent of scam/spam. It would be a piece of cake for Google to close down these accounts as the real IPs are recorded by Google when the account is created. You lose nothing by bringing this matter to the attention of the Google Security team. In addition these forged accounts are 100% against Gmail's T.O.S

[Apostle Solael]

May I ask how is someone able to forge an IP address?  By bypassing their user print over many countries, computers and wifi's?  IF a person uses a google account, then can Google not monitor where it is coming from and block them?  After all, everyone has a user print - a finger print per se' no matter what computer you use, as I have learned in my Cyber Security course at school.  Therefore, I do not truly see where google would 'not' be able to block certain persons from using their accounts.

If I am missing a link, please let me know, as I enjoy learning. 

[Rafe Saber]

For an explanation of forged IPs CLICK HERE.

Forging an IP is done through "header forgery". All scams such as the Nigerian scams use it making it more difficult to trace where the email originated from. Regardless of the "header forgery" they need a real email address from which they can operate their scams. This is exactly what is happening with these Gmail email accounts and dozens if not 100s of our Ning Networks are being affected.

YES. You are right Google could monitor an account but they need to be alerted by Ning so that they can take action against those crooks. I believe Ning have an obligation to do so as it is a known fact that "forged headers" could lead to a D.O.S. (Denial of Service) against one of our Networks. These attacks have a potential of being VERY serious

"Google needs to know about those who use their google email address to spam other people with.  That is the issue.  Google needs to block them from using their email address"

100% correct. Once again, I really think Ning should go the extra mile and make the Google Security Dept aware of these 100s of attempted intrusions all originating from Gmail accounts.

[Apostle Solael]

Ahhhh...yes, those hair style ones...have you seen the Christmas ones yet or the UPsDriver one? 

	Name	Email	IP Address	Note	Suspended
		Layered Sew In Weave Hairstyles	[e-mail]	61.139.87.55		Nov 10, 2012
		Ancient Chinese Hairstyles Men W	[e-mail]	178.234.40.46		Nov 10, 2012
		Hairstyles For Long Fine Hair Wi	[e-mail]	59.53.92.7		Nov 10, 2012
		Easy Natural Hairstyles Black Wo	[e-mail]	119.73.55.21		Nov 10, 2012
		Bailley Wahnda	[e-mail]	61.182.216.30		Nov 10, 2012
		Trudia Callan	[e-mail]	219.94.232.243		Nov 10, 2012
		Now Thats Call Christmas 2011 Ra	[e-mail]	177.20.212.89		Nov 10, 2012
		Black Christmas 1974 Filming Loc	[e-mail]	173.245.56.220		Nov 10, 2012
		Foetus Ghilchrist	[e-mail]	61.152.176.48		Nov 10, 2012
		Museum Christmas Florida	[e-mail]	141.101.99.180		Nov 10, 2012
		Dumb \u0026 Dumber 1994 Lloyd Ch	[e-mail]	173.245.56.225		Nov 10, 2012
		Free Christmas Clipart For Addre	[e-mail]	173.245.56.206		Nov 9, 2012
		Promisee Bertille	[e-mail]	120.4.41.166

[Rafe Saber]

With all my respects to Ning. Ning do have the ability to put a stop to this type of crap spam. Remember ALL those email addresses are REAL. Only the IP is forged. Ning would simply have to contact the Google Security Department (not available to us poor mortals) and that would end the abuse. But I suppose that would be too much to ask from the Ning Team.

[Eric Suesz]

Rafe, I know that this is a frustration, and I do wish spammers weren't able to create spam accounts on services like Google, but by some estimations, a large majority of all email traffic is spam. That's mind-boggling! I wish it were as easy as picking up the phone and calling someone at Google and asking them to stop letting spammers create bogus email accounts. If I am able to reach someone at the "Google Security Department" what should I ask them to do to stop spammers from targeting Ning Networks? 

[ismail shah]

If google Put Restriction in [e-mail] LIKE Email may be these spammers stopped.using so much DOTs in their all emails :x

Any way its very old fight of Spammers with us. They create new ways to disturb our network. we have to take proper measures to save our own networks.

Currently i believe in Signup Q/A . 

[Debbie]

The sign-Up Q/A works for me. :)  Since my site doesn't accept membership, I couldn't help but to laugh when spammers tried to join.  After posting my Sign-Up Q/A, it stopped spammers at the door.  One spammer took the time to send a message via my contact form..lol!  He/She joked a little but was impressed. :)

[Rafe Saber]

Eric. What I'm asking you to do is provide the Google Security Department with the actual Gmail addresses in this thread. Believe me Google will shut down HUNDREDS of these accounts because they will all point to just 3 or 4 real IP addresses who created them.

In the last 10 minutes I have found the answer. I suggest you send an email to all Ning Networks to report these abuses so that we can all breathe a little easier. If you do I guarantee you they will eventually stop.

How to Report a Spam, Scams and Abusive Use of Email Accounts.

For spams and scams that are coming from a Yahoo, Hotmail, AIM, Excite, Gmail or other public or free email account, you can report it to the provider to have them shut that account down.  Here are the addresses -just forward the email to the appropriate address with the subject "Abusive use of account".

• AOL - For AOL members only to report spam: tosspam
• GMail - [e-mail] 
• Hotmail - [e-mail] 
• MSN -  [e-mail]
• Yahoo.com email accounts: [e-mail];
• Yahoo.co.uk email accounts: [e-mail]

Regards

[Eugene Kim]

Hi Eric! This is the cool feature! Thank you!

[Rajaji]

Fabulous, I am thrilled to see this feature. This is going to be the most powerful of all spam tools.

I was wondering that many of these spammers use various computers in an internet cafe, So will it be possible to ban IP address around a certain geographical area?

But great move. Thank you for this.