Page 1 of 1

SPAM Bots...

Posted: Mon Dec 29, 2014 10:52 pm
by jedie
Seems that here are a few SPAM Bots working...

They uses a text passage from a thread and insert them as a answer in a other thread.

e.g.:
Bot-Post: viewtopic.php?f=3&t=4793&p=12322#p12322
Origin-Post: viewtopic.php?f=3&t=4514&p=9852#p9852
Bot-User: memberlist.php?mode=viewprofile&u=7383
Test Search: search.php?keywords=I+do+remember+the+V ... me+console

Maybe there are more Bots active?

Re: SPAM Bots...

Posted: Mon Dec 29, 2014 11:58 pm
by Alastair
This explains Muhsan12 (original by jedie) and aaagul45 (original by TMitH).

So basically it's everyone with a user name that ends with a numeral - except pser1, retrofreak90, and vdc300?

Re: SPAM Bots...

Posted: Tue Dec 30, 2014 12:03 am
by jedie
Reason is SPAN Links in Signature, see User-Profile, e.g.: memberlist.php?mode=viewprofile&u=7366

Re: SPAM Bots...

Posted: Tue Dec 30, 2014 12:09 am
by Alastair
I've been checking the list of latest members (continues on for several pages), those with dodgy websites are definitely spammers.

Plus alieen is another with spam links in the signature.

Re: SPAM Bots...

Posted: Tue Dec 30, 2014 12:43 am
by rolfmichelsen
We're seeing more spammers register to the site lately. Most of them never get through to the forum, but can bee seen in the member directory as some of you point out. I hate to reject a genuine forum user, so hence some spammers get through and have their first post accepted when it looks reasonably ok. I don't have the capacity to double check for copies of earlier posts. Lately, I have been deleting about 10-20 spammers trying to post to the forum on a daily basis. I have temporarily blocked registrations from gmail.com and outlook.com for the next few weeks since a lot of recent registrations come from those two services. On a monthly basis I go through the list of recent registrations that have not yet posted and remove those that are most obvious spammers.

-- Rolf

Edit: I just did a quick purge of newly registered users with obviously spammy intentions. At least the member directory should be free from p**n links.