[SAC] more spammer accounts

[Sandro Santilli]

On Sun, May 15, 2016 at 12:08:54PM +0200, Sandro Santilli wrote:
> On Sun, May 15, 2016 at 11:05:33AM +0200, Markus Neteler wrote:
> 
> > http://stopforumspam.com/ipcheck/45.65.14.10

> Please don't rush into removing those 22 accounts before checking
> if they sent any content. I'm concerned about removing legit users
> (I usually put the names in tracsvn:/osgeo/tools/trac/emergency_clean.sql
> and run that script against all trac instances to get a feeling about
> what they wrote in there, and also to keep a list of spammer users).

I've done that step, found no content in trac instances.
Here's the complete UIDs list, with creation timestamps.
Interesting, all accounts where created in April 30 2016
between 19:33 and 19:55.

  kamalmenuse: 20160430194509Z
  kanmsune: 20160430194333Z
  karam4788: 20160430194609Z
  maansninmeee002: 20160430195956Z
  mani0035: 20160430194202Z
  manishkasyamo: 20160430195147Z
  manojkareeems: 20160430194725Z
  manrefeee002: 20160430195647Z
  manregdmeeee: 20160430195923Z
  mansihiee: 20160430195514Z
  menujse: 20160430195236Z
  menujsese: 20160430195435Z
  monsikeeee1: 20160430195852Z
  mskkeijiwww: 20160430194432Z
  rramjankei: 20160430195726Z
  rramjankeisw: 20160430195802Z
  sjiemkskeee: 20160430195614Z
  sjmkeme: 20160430195022Z
  sonamkalre: 20160430195826Z
  sonamkappooe: 20160430195113Z
  sonamkarm5: 20160430194051Z
  sonamkpoor: 20160430194537Z

The "mani0035" one was found holding authenticated sessions.
I guess the "user deletion" script should be improved to provide
a messa in a non-interactive way (-m, to resemble git commit ?)

--strk;