spam bots

[ed12]

 saint and other mod's
i know u guys are busy
but every night at about the same time
11:pm my time est
we get nailed by spam bot's
can we not lock them down ?

ed

[Monkeyvoodoo]

Снздр Ъцу Йош Йo Viяцs I Ряoмisэ
 
I Сдяэ Йoт Уoц Йo Sрздк Яцssiди.
I Дм Sрдмъoт Дгтэя Дll.
 
Jцsт Гoя Good Мздsцяэ I Яэpздт
 
Снздр Ъцу Йош Йo Viяцs I Ряoмisэ
Ндvэ Good Dду.


 

[ed12]

here we go
 

ed

[jdbailey1206]

Sweet! A Louis Vuitton purse for only 40 rubles?  And all I have to give is my Social Security number and address?  Yes please!   

[saint]

Yeah, something's changed and they're slipping past the antispam the forum has in place. I've switched back to manual account activation, only 1 spammer got through last night.

[brihyn]

Did it? Or maybe we've been annoying the spambots all along by logging on to their forums to discuss arcade machines?
hmmmmmm.....

[lilshawn]

(in heavy fake russian voice)

I off to find russian site to post ads for sale of Konky Dong (tm)

[BadMouth]

I assumed they were real people getting paid a few cents an hour. 

[ed12]

thnk-u saint

ed

[ark_ader]

Yeah, something's changed and they're slipping past the antispam the forum has in place. I've switched back to manual account activation, only 1 spammer got through last night.

What is the IP address of the Spambot?

[ed12]

ark_ader
they verie
best i can get is the routing is out of china

ed

[ed12]

here we again
http://forum.arcadecontrols.com/index.php/topic,136462.0.html

my god

ed

[pbj]

That's some fine moderation there, saint.

 

[lilshawn]

Man, they are going at it hardcore!

at this rate, we are going to have to shut down new applications 

[ed12]

saint
did say he was going back to manualy adding nicks
and turning off auto
but i do have a gut felling thats like shutting the barn door after the horse got out

ed

[saint]

Yeah, something's changed and they're slipping past the antispam the forum has in place. I've switched back to manual account activation, only 1 spammer got through last night.

What is the IP address of the Spambot?

Tons of them, obviously someone's got a bot-net they're using. I've been setting 180 day bans on the IP addresses.

[saint]

That's some fine moderation there, saint.

 

I regret once again that I have failed to live up to your incredibly high standards. I will refund you your money.

[saint]

There are probably going to be a few that have been slipped into the forum that are "sleeper" accounts that they'll notice and use. The one that ed pointed out a few posts further up was registered days ago.

[lilshawn]

that's probably it... registering accounts...letting them sit until there are a few built up as backups, then... SPAM!

[ed12]

i would have to think u are right saint
glad u are on top of this

ed

[ed12]

is this adver here ?
we enjoy our colleagues and our clientsdqd
if not spam again
this time do not click on it
my alret went off like a fire alarm

ed

[Slippyblade]

Seriously Ed?  You clicked a link in one of those?  Bad monkey! 

[ed12]

no i clicked the topic,to copy it
and it took me over to there site
hence the reason i asked if they were  a adver

ed

[ark_ader]

Seriously Ed?  You clicked a link in one of those?  Bad monkey! 

Yeah I did too, but it was something to do with small furry animals, and my Firewall said something about a RAT. 

Yeah, something's changed and they're slipping past the antispam the forum has in place. I've switched back to manual account activation, only 1 spammer got through last night.

What is the IP address of the Spambot?

Tons of them, obviously someone's got a bot-net they're using. I've been setting 180 day bans on the IP addresses.

Oh you have it easy, I had 30K on my SMF and I don't mod it much, but since I moved to 2.06 and changed the captcha to answer three obvious questions, it has gone down a bit.  I would configure new members to have they their posts sent to moderation and have your admins clear them out.  Change your rules to enforce the one post rule when joining so you can weed them all out.  Maybe new members to include a special character.  I think you can enforce that in ACP.

[ed12]

yep i would to
ark_ader
the last 1 got through 2-x
saint is not asleep at the switch..but these little :p's: are not also
they just keep hitting the door until they can find a hole
its like that :itch that will not go away:
and yes i think the same way
make a post and it goes to a mod before it will hit the forms
that will at-least..slow them down
from there we can deal with >mark as read/delete<
as that is truly the olny way to deal with them at this time..
 i can come in and the banner WILL NOT BE A PAID ADVER.
thats the 1 that gets me..i mean think about it
u are apying xxx to adv and they over ride u
well i just pissed my $$ down the drain. right ?

ed

[lilshawn]

Seriously Ed?  You clicked a link in one of those?  Bad monkey! 

Meh...I bareback the internet like a boss. 

[Slippyblade]

Now that was funny.  Looks like one of the bot scripts got stuck in a loop.  You have my sympathies Saint.  Good luck

[ed12]

freg me there at it early

ed

[ed12]

freg me 23 of 25 spam bot
i just marked al as read and cleared the board
what a pain in the ass
chopperdog thks for the inside

ed

[pbj]

Give me a break.  What's this forum get?  2... 3 actual new users a month?

I've enjoyed all the free porn, though.

 

[opt2not]

Sex porn all folks.  Sex porn all.

[pbj]

Looks like she's giving birth to a slice of bologna.

 

[lilshawn]

Give me a break.  What's this forum get?  2... 3 actual new users a month?

I've enjoyed all the free porn, though.

 

congratulations, your computer now has chlamydia.

[ed12]

u know i am in the giving mood
after all its x-mas and all
and as i have tracked 90% of the ips'
think the next time i get 1,i will reply with a proggie there fire walls
CANNOT STOP
reason is simple,once i list it..u get a welcome to the hell gift
and watch your putter melt down...its funny as all get out to see it at work,and the more they reboot the worse it gets

ed

[hypernova]

Use card for all purchase to Russian site:

[jdbailey1206]

In Mother Russia spam bot sexes you.

[ed12]

ok ppl i have been looking into this spam bot problem
your best fix right now..
go to the right mark as read
go to delete
they are and i mean are sneaking in behind whatever fire wall is up
if it is ie ?,then we have a short way..
if it is java based ? then i have put the nessary problems into place..all expect a few mods on another fourm whom refuse to remove the offending s/w

ed

[ark_ader]

ok ppl i have been looking into this spam bot problem
your best fix right now..
go to the right mark as read
go to delete
they are and i mean are sneaking in behind whatever fire wall is up
if it is ie ?,then we have a short way..
if it is java based ? then i have put the nessary problems into place..all expect a few mods on another fourm whom refuse to remove the offending s/w

ed

Your best fix is to keep a tight ship.  The reason for the bots, is due to either a lack of time, planning, or interest.

I would hate to manage this site.  I'm surprised Saint has the patience of a Saint to keep this show going.

If it was me, I would administer new accounts bimonthly.

[Ken Layton]

Seems like these are "sleeper" accounts that were registered 6 months ago and lay dormant.

[ed12]

yes ken they are
i know saint is working on cleaning them out

ed

[saint]

Yep, I've been looking at them before nuking them as they crop up. 90% of them are sleepers registered long ago.  I just deleted something like 1000 registered but never used accounts that looked fishy.

[ed12]

ya i am getting alot of old yahoo stuff to
>spam bots<...not so much here..the ones here are easy to deal with
unless of course they flood the dang fourm..
but for some reason i am yet to get a handle on is my wiffie likes to go to you-tube
and face-book..she goes to play the games..dang my main box fill's up as we are on the same network >admin here<,but now atleast there down to using yahoo..
when i was running a mirc we had the same problem
so we made everyone go through the re-reg deal..u had to be alive to do it
then we cleaned out the server..never had another problem..
if u do this saint.? imho your best bet
send out the active mems a pm,to tell them to re-reg..a active mem will understand

ed

[saint]

Today's spammer account was made in June 2012!

[lilshawn]

Today's spammer account was made in June 2012!

that is brutal.

perhaps people just go around and make accounts. they stockpile a huge database of accounts, then sell them off to the spammers as ready to go spam accounts to advertise on.

it's...brilliant. 

[ed12]

shawn u nailed it to the t
a few years ago less then 10, a sign up addy >spam< was worth .25 cents
today it is 2.00 for each addy spammed.
this is exactley why we did on micr as i sujested.
mass e-mail all nicks
tell them they have until xx day to re-reg..then we shut down the servers and cache
cleaned out the cache,and did a back-up on the real files etc
and started a new
the process was easy but a spy bot >spambot< could not do it
name
password
answer the below question
this u had to type in
u had 3 chances
and if u did not get it, the reg fourm was cancelled
no more spam

ed

[lilshawn]

a dubloonie for an account.... hell, that's good money.
almost worth my time.

[ed12]

yes u c once a :bot: room's a site..and or sign's up..without the need to auth the account..bing ban boom u get a fishing for false accounts
this was and is very bad in ie6/7/8 and firefox up to and still 12.05.05..
there is really olny one way to stop it
LOCK IT DOWN
most ppl wonder why 1 site went from free to pay for ?
guess WHY NOW?..it is not hard if u have a brain.
there is truley olny 1 way to rid them,
and personally i do not want to be in saints shoes,as some of these are robo :bots:
the worest pain in the ass u can ever fiquire..think about your morning itch,u will get the point.
IF u clean the cache,make sure all nicks re-reg in 3 simple step's
u stop them cold  DEAD COLD..IT IS THAT SIMPLE...
next everytime they post a bull thing they get $2.00
do that for 16 hours
do the math
c u in the islands

ed

[ed12]

if u want to see the best 1 to date?
they just hit my :dorment: paypal account
i can post the full link as i will keep it,to do
a=flush it
b=answer it and send them winfuck
i like :b: better,as then i can go to bed knowning they all need new putters

ed

[ed12]

man that last 1 got u clocked saint
it is in about 12 dif pages
under 2 user names but same topic

ed

[HaRuMaN]

Yeah this latest batch of spambots were registered about a year ago, and seem to have been dormant until now.

[Ken Layton]

Wow, this one hit hard this time. A real spamblast!

[ed12]

boy there at it early tonight

>
stockpimp
Newbie

 Online
Posts: 1
I want to build my own arcade controls!



 Invest in Yourself, Invest in your Future
« Reply #1 on: Today at 11:42:58 pm »QuoteThis ongoing online stock market course is the best decision you'll ever make.
 
Tons of in depth training videos, live open chat with some of the best expert traders on the planet sharing their expertise to help you out, plus hand picked winners to trade everyday. but even better, you get buy/sell text and email alerts. Know exactly when to get in and get out of stocks with pure profits. Hands down the best and most affodable stock training you'll find  <
with a html link to boot

ed

[MajorHavoc]

Saint truely lives up to his screen name.  Thanks for doing all the heavy lifting to keep this site up and running smoothly.  Certainly a labor of love.  Thank you.   

[ed12]

welp this 1 got through
Slevainee
no less then 6 posts on the same crap

ed

[saint]

And gone.

[ed12]

thk's

ed

[Ken Layton]

Here's one:

http://forum.arcadecontrols.com/index.php?reportsent;topic=137678.msg1420793#msg1420793

[HaRuMaN]

Would you people please stop replying to the spammers, it makes it that much more difficult to delete, since I can no longer do it from their post page.

[DeLuSioNal29]

I noticed that most of the spammer accounts created has this exact wording, "I want to build my own arcade controls!" in their description.  I wonder if we could filter all those out and take a better look at them?

D

[lilshawn]

all the newbies do before they graduate to "full member" status.

[ed12]

idiots
and yet they answer

here u go again

beatsbydre

with no less then 4 replys
do u nicks not under stand or care that not olny dose this site
but your provider pay and bill u $1.00 and the faund shot at malware ?
so in short $2.00 to pay for malware...boy u have out done yourselfs

ed

[yotsuya]

It's called fun, bro. Relax. There's 99 spambots, this ---smurfette--- is just one.

[ed12]

yotsuya
fun ---my bottom---
i love this site
the last thing i want to see is spam
i can go to goole it for shits and giggles
u settle down

ed

[yotsuya]

I love this site, too. I have faith in the mods and Saint to clean it up. They haven't let us down yet. Chill.

[ed12]

i am in the berg
stay on page

ed

[yotsuya]

i am in the berg
stay on page

ed

 

[ed12]

ya shawn once
to chk

>pbj< ?

here u go saint
2-x so far

nick >cheapbydre <

ed

[ed12]

i thought i had replyed

no shawn as a rule
but it came under a dif banner
this time the banner was clear 2-x

pbj why are u even thinking about going there ?

thk-u mod's

ed

[ed12]

the third 1 came in
>7 Bizarre Products for Dressing Up Your Genitals <

ed

[lilshawn]

the third 1 came in
>7 Bizarre Products for Dressing Up Your Genitals <

ed

Now this, I think I could use...bein' valentines day and all...

[ed12]

here we go again
there like a never ending weed
>AerotoSactwer<

ed

[HaRuMaN]

here we go again
there like a never ending weed
>AerotoSactwer<

ed

Already banned and cleaned up even before you posted this message... 

[ed12]

thk-u HaRuMaN
the olny reason i posted is, i deleted the first 2 early this am and left the form
i just got back and seen 3 more

ed

[ed12]

holy crap
2 days running
spam spam spam spam
u ppl want it cold or hot ?

ed

[Ken Layton]

Wow, another spam blast!

They were really going at it today.

[yotsuya]

It's all UK sites. I blame Ark. 

[ed12]

come on saint
let's get them cookie's out
 

ed

[ed12]

ya ken i caught that part >uk< :)2 dif nick's also

ed

[ed12]

holy crap
at least 30 of them today.??
hey mod's how about a little clean up here ?
thk-u in advance

ed

[DeLuSioNal29]

Working on this as we speak!  :-)

DeLuSioNaL29

[ed12]

thk-u

ed

[ed12]

its like they grew wings
this is all over the first page
post by this 1 nick >KbdiSap9h <
at least the other >2< olny did 1/2 as many

ed

[DeLuSioNal29]

Yeah, there were 42 to be exact between 2 users!  I had to knock out each one by one.   

But I banned their IPs so after we catch this new "batch" hopefully it will slow down a bit.

DeLuSioNaL29

[ed12]

again thk-u sir
nice work as normal 

ed

[pbj]

Now we're deleting posts about deleting posts?

[ed12]

pbj ?
huh wtf are u talking about ?
i posted the spambot's,u want to read them ?
had 1 sneak into my e-mail...how i will never know..as i delted and banned it..

here is a run down..WE ARE TALKING ABOUT SPAM BOT'S
u enjoy opening a page full ?,if so request it

ed

[Malenko]

Working on this as we speak!  :-)

DeLuSioNaL29

I got a warning about reporting too quickly, so I stopped , heh

[ark_ader]

Working on this as we speak!  :-)

DeLuSioNaL29

I got a warning about reporting too quickly, so I stopped , heh

Employ the "less than 10 post requires moderation" option.  I think I said that like eleventy times in older posts......

[ed12]

ark_ader
u are doing well
i love your peace out message,when i read it again tonight it  sunk in
thk-u sir

the mod's here are doing a fine job,as far as i can see

ed

[ed12]

holy crap there is over 20 of them

ed

[DeLuSioNal29]

Yeah, saw them pop up on my phone.  Although I can kill the topics remotely, I can't ban the user with my phone for some reason, so I usually wait until I'm near a PC to do it.  Didn't have my Macbook last night so...

I think Haruman took care of them though.   

D

[ed12]

here we go again
insubsede is your spambot

ed

[ed12]

hey guy's the last 1 i reported on is a robo bot

e

[ed12]

starting early this week
>Hignflelf <
get em guy's

ed

[Ken Layton]

They are starting early this day:

http://forum.arcadecontrols.com/index.php?action=profile;u=81371

The username of this spammer is:   Rosendomurb

[ed12]

yeah ken
i have been watching em all day....
thk's for posting it though

ed

[HaRuMaN]

Nuked!   

[ed12]

boy there early this week
>pinabiteyro <

ed

[ed12]

real early 2-x +1 = 3
>WilliamDrek <

ed

[ark_ader]

Working on this as we speak!  :-)

DeLuSioNaL29

I got a warning about reporting too quickly, so I stopped , heh

Employ the "less than 10 post requires moderation" option.  I think I said that like eleventy times in older posts......

Now Eleventy-one times.