The spambot report thread

If you experience problems or errors with the discussion forum, post here. Problems with individual users should be reported to the mods or the admin.
User avatar
MrFlibble
Demoniac Demo maniac
Demoniac Demo maniac
Posts: 2730
Joined: Sun Dec 05, 2010 11:39 am

Post by MrFlibble »

A bot that seems to have picked random sentences from posts in the forum and used them as topic titles:
http://www.dosgames.com/forum/profile.p ... le&u=13445

All stuff Trash Heap'd.

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

The returning spambot 'jagdev02' definitely needs to be moved out.
http://www.dosgames.com/forum/profile.p ... le&u=13317

Status: Posts removed. Spammed domain added to spam list. Account banned.

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

Another salesbot: 'NinaAnderso', multilingual posts, spanish link in profile.

http://www.dosgames.com/forum/profile.p ... le&u=13460

Status: Posts removed, account banned, spam words updated.

User avatar
MrFlibble
Demoniac Demo maniac
Demoniac Demo maniac
Posts: 2730
Joined: Sun Dec 05, 2010 11:39 am

Post by MrFlibble »

This bot has posted another thread: http://www.dosgames.com/forum/profile.p ... le&u=13467

A while ago it already made one, which was trash heap'd. It also has links in profile.

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

Some spam from a new user 'pingguoguo':

http://www.dosgames.com/forum/search.ph ... pingguoguo

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

Another spambot: 'alsoft' adding random generic posts of nonsense praise, in this case as new postings. Common practice by some robots.

http://www.dosgames.com/forum/search.ph ... hor=alsoft

Related spam-link in its profile.

User avatar
MrFlibble
Demoniac Demo maniac
Demoniac Demo maniac
Posts: 2730
Joined: Sun Dec 05, 2010 11:39 am

Post by MrFlibble »

Both bots' posts were Trash Heap'd, thanks.

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

Three differently named spambots, probably from the same spammer:
Edmuna, Kity, Theobald

http://www.dosgames.com/forum/profile.p ... le&u=13503
http://www.dosgames.com/forum/profile.p ... le&u=13505
http://www.dosgames.com/forum/profile.p ... le&u=13506

Trashed & banned. Updated spam words.

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

Spammer with random 11-letter names posting a few links.
(The spammer is from indonesia.)

http://www.dosgames.com/forum/search.ph ... kklertty23
http://www.dosgames.com/forum/search.ph ... jgdtytyrry
http://www.dosgames.com/forum/search.ph ... dtreeesiya

All posts Trash heap'd

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

More from the same Indonesian spammer; a new user with every post, containing identical text and web links. (the post titles are suggested for spam word filters)

spammer alter-ego user names:
qeyfarow
Crekiyox
demiera
rewasqiy
RWEWINS
REFANS
trevansxay

Trash Heap'd the stuff. Admins should take care of the rest ~ MrFlibble

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

More spam from the same source and with same message as before:
Todays spam is brought to you by:

Frandesraw
Drewbinx
Cvlara
Trevansd
Hevonix
Rewanes
Revkandre
Androans

edit: I see the removal was swifter than my post, almost :-)

User avatar
MrFlibble
Demoniac Demo maniac
Demoniac Demo maniac
Posts: 2730
Joined: Sun Dec 05, 2010 11:39 am

Post by MrFlibble »

I'm thinking that maybe the CAPTCHA type used should be changed to a question. These bots seem to be getting better and better at bypassing countermeasures.

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

More spam from same source:

new user:

Hewaveqz25

User avatar
wardrich
"Some Troll"
Posts: 3940
Joined: Sat Sep 14, 2002 9:08 pm
Location: Ontario Canada

Post by wardrich »

Updated ban list to include RWOLF's last 3 posts' worth spammers.

User avatar
MrFlibble
Demoniac Demo maniac
Demoniac Demo maniac
Posts: 2730
Joined: Sun Dec 05, 2010 11:39 am

Post by MrFlibble »

Can you please do something about that Indonesian spam? It seems like there are no less than 5 new spam posts from them every day now.

What about changing the CAPTCHA to a question? From my experience, it seems to be more effective than those "type in numbers from picture" countermeasures.

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

More Indonesian spam, likely from the same spammer.
The post headings, signatures and web links repeat in the profile.

new user names:
Sezkra,Vraxzz, Braygz, Praxzlo, Qzeqrox, Rexyz, Heqzax, Qrexzz, Kraylez, Zeqarex

User avatar
MrFlibble
Demoniac Demo maniac
Demoniac Demo maniac
Posts: 2730
Joined: Sun Dec 05, 2010 11:39 am

Post by MrFlibble »

I Trash Heap'd the posts, but is there any reason to list user names? I'm not sure about the version of phpBB here, but the latest versions will remove a username from the ban list if the respective account is deleted. IPs and emails will stay on the ban list regardless though.

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

Well, I know you find the posts anyway, I'd just as well list the profile pages or whatever is appropriate.

In this case any listing could be redundant, as they are rather obvious.


edit: 12 new spams from the same source.
I won't list them, you know where they are.

User avatar
MrFlibble
Demoniac Demo maniac
Demoniac Demo maniac
Posts: 2730
Joined: Sun Dec 05, 2010 11:39 am

Post by MrFlibble »

This spam nonsense is becoming increasingly annoying. Could the admins please do something like change the CAPTCHA type as I suggested above? This worked quite well for me in another forum.

User avatar
Rwolf
Way too much free time
Way too much free time
Posts: 977
Joined: Fri Jan 11, 2013 3:19 pm
Location: Sweden

Post by Rwolf »

10 more spam today, likely from same source as before.

On another forum we had to vet new registered users before letting them post in public; there was some 40-50 spammers each day, looking valid on the surface, but the profiles were faked, stolen from hacked user databases & the post content was always spam. It kept up from august to november last year.

Post Reply