Omnimaga

Omnimaga => Site Feedback and Questions => Topic started by: DJ Omnimaga on November 03, 2011, 06:12:27 pm

Title: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: DJ Omnimaga on November 03, 2011, 06:12:27 pm

Hmm, when installing mods, I wonder if you broke the Stop Forum Spam mod or the Questions one, because there is an unusually high amount of new registrations since the last 3 days.

Otherwise the only other clue I have is that when Juju purged the old spambot bans to remove potential legit members matches   (most bots will use an IP only once), he removed the wrong ones, such as ubiquity.net, BTI.NET.PH and other hostname-wide bans that were instated on Phillipines/India hosts used for spam. When purging old spambot bans, I usually checked how many hits the ban triggers had and didn't remove the ones that had like 40-50 hits.

Just look at the attachment below: We had 204 new registrations in one day O.O (almost an entire month worth of registrations)

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: parserp on November 03, 2011, 06:14:04 pm

O.O that's many new members, 204 in 3 days
that's a smart spambot

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: Eeems on November 03, 2011, 06:30:00 pm

I'm pretty sure it is still working, I've been havibg to reject a couple hundred registrations in the past three days due to flagged ip's and/or emails.

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: Juju on November 03, 2011, 06:33:09 pm

I didn't removed any ban that had more than 3 triggers or were labelled as a group one. Weird.

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: DJ Omnimaga on November 03, 2011, 09:06:53 pm

Could it be that bots found their way through a new hostmask? You guys should check if there are many registrations from the same place and ban that host.

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: mrmprog on November 03, 2011, 10:58:38 pm

Well, considering that in the 2 hours I have been on we have had 3 post, we have a problem.

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: parserp on November 03, 2011, 10:59:22 pm

spambots post the weirdest posts...

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: aeTIos on November 04, 2011, 07:12:48 am

true
I consider it funny to read them.

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: Stefan Bauwens on November 04, 2011, 07:38:04 am

I was just making sure I would have enough other accounts in case of a ban. :P
No, j/k. Maybe an Nspire Invasion?

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: Builderboy on November 05, 2011, 03:00:35 am

We just got another spam post, so there definitely seems to be something that happened that suddenly is increasing spam o.O

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: Eeems on November 05, 2011, 03:02:53 am

Yeah, not quite sure what it is though since it seems that the stop forum spam is still catching spambots for us. Maybe something linked to us and there are a ton of new ones attacking our site?

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: DJ Omnimaga on January 16, 2012, 10:34:28 pm

They are back. D:

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: Juju on January 16, 2012, 10:36:11 pm

I guess it's counting the users caught in the Stop Forum Spam filter. I had like 125 members waiting to be approved at one point.

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: DJ Omnimaga on January 16, 2012, 10:38:20 pm

Yeah it does. There's probably one IP in particular (or a set of IPs) that constantly spams the registration form, though.

Title: Re: Super Ultimate Mega spambot invasion of the hyper doom?
Post by: Stefan Bauwens on January 24, 2012, 05:46:45 am

They are back? From where did they hear this news?