| MC Marshy | 05 Feb 2006 10:44:22 SPAM ALERT!Somebody keeps on spamming this forum. It happened a few days ago but it's happening again today. What is happening? :o http://forum.lemmingswelt.de/cgi-bin/yabb2/YaBB.pl?num=1089129620/870#870 http://forum.lemmingswelt.de/cgi-bin/yabb2/YaBB.pl?num=1089136533/555#555 http://forum.lemmingswelt.de/cgi-bin/yabb2/YaBB.pl?num=1109817901 These 3 topics have been spammed. |
|---|---|
| Lomay | 05 Feb 2006 11:28:27 Re: SPAM ALERT!Somebody keeps on spamming this forum. It happened a few days ago but it's happening again today. What is happening? :o http://forum.lemmingswelt.de/cgi-bin/yabb2/YaBB.pl?num=1089129620/870#870 http://forum.lemmingswelt.de/cgi-bin/yabb2/YaBB.pl?num=1089136533/555#555 http://forum.lemmingswelt.de/cgi-bin/yabb2/YaBB.pl?num=1109817901 These 3 topics have been spammed. that dude gonna go to hell! >:( |
| MC Marshy | 05 Feb 2006 13:37:18 Re: SPAM ALERT!I hope he goes to hell the bastard! Andi could you possibly ban guests from entering the forum and make people register if they want to post on the forum? |
| Lomay | 05 Feb 2006 14:11:07 Re: SPAM ALERT!but if andi removes the comments for the guests, that might also means "ccexplore" can't comment in the guest comments, becauses their has to be another way. |
| Leviathan | 05 Feb 2006 16:10:44 Re: SPAM ALERT!Grrr something has to be done against this...wish I was mod so I could instantly delete the spam on the first moment I notice it :P I guess it's best to have people require to register before posting...it's a shame that it's necessairy but that's the way it goes all the time: the good people have to be penalized too for the things the bad people do :( |
| JM | 05 Feb 2006 16:20:33 Re: SPAM ALERT!I guess it's best to have people require to register before posting...it's a shame that it's necessairy but that's the way it goes all the time: the good people have to be penalized too for the things the bad people do :( I agree with you Leviathan. That happened on Garjen's forum ages ago. It's best to have people require to register before posting :) |
| Lomay | 05 Feb 2006 17:02:59 Re: SPAM ALERT!to all members I've notice that the spammer's e-mail address keeps changing, so this might mean that their are more that just one spammer or just one, meaning he/she/it's IP logging might be weird. |
| JM | 05 Feb 2006 17:39:29 Re: SPAM ALERT!to all members I've notice that the spammer's e-mail address keeps changing, so this might mean that their are more that just one spammer or just one, meaning he/she/it's IP logging might be weird. If their e-mail address is changing they are probably using other e-mail addresses to stop people finding out who they really are. |
| Lomay | 05 Feb 2006 17:42:23 Re: SPAM ALERT!to all members I've notice that the spammer's e-mail address keeps changing, so this might mean that their are more that just one spammer or just one, meaning he/she/it's IP logging might be weird. If their e-mail address is changing they are probably using other e-mail addresses to stop people finding out who they really are. oh |
| MC Marshy | 05 Feb 2006 17:58:17 Re: SPAM ALERT!I'm sure that the spammer is using different e-mail addresses to try and impersonate other people. To see if it's the same person or not we need the moderators to check the I.P addresses from all the posts the spammers have made. |
| Lomay | 05 Feb 2006 18:00:10 Re: SPAM ALERT!I'm sure that the spammer is using different e-mail addresses to try and impersonate other people. To see if it's the same person or not we need the moderators to check the I.P addresses from all the posts the spammers have made. yeah! |
| tseug | 05 Feb 2006 18:26:36 Re: SPAM ALERT!Block his IP range. |
| Mr. Ksoft | 05 Feb 2006 18:32:34 Re: SPAM ALERT!Somebody, do SOMETHING! Changing email address could be randomly generated by a computer program to avoid capture. I'm betting this is automated, since it's trying to put in HTML code and says random nonsense. There should be a law about this that could make them pay a fine or something. |
| tseug | 05 Feb 2006 18:51:26 Re: SPAM ALERT!post moved from a different thread: Wished I could hack their PC so they couldn't do this again. I'll see what I can do. ;) I'm not very good but I might be able to do something. EDIT: The IP Andi mentioned appears to be a PC running windows NT V3.90 (on second thought I'm not so sure if 3.90 is right). Andi it would help if you posted more IPs. |
| Mindless | 05 Feb 2006 18:54:52 Re: SPAM ALERT!There's no reason to reply to spam posts, people. Spambots don't listen, they spam. We need one of the following:
|
| Anatol | 05 Feb 2006 21:06:00 Re: SPAM ALERT!As a side note, the guestbook on my Lemmings page has been getting spammed a ton with messages almost identical to these. Every time I look back at my guestbook, it seems there's about 40 more spams, so it must be a bot of some type. I don't know how to stop it either, besides requiring registration. :-/ |
| tseug | 05 Feb 2006 23:16:36 Re: SPAM ALERT!Would changing the address help? The old one could point to a sentence explaining the new address. The bots from this particular website seem vicious though. Of course if someone launched a DDoS attack on the server it would help, but the problem is that that could get you in trouble. ;) EDIT: A whois lookup shows email is: domainnameregistration@cassava.net server IPs are: 64.49.213.233 64.49.213.241 EDIT2: All of the bot's posts contain mangled html (well, just different from this board's format). So maybe it would be possible to block posts that contain that stuff? |
| ccexplore (not logged in)(Guest) | 05 Feb 2006 23:31:50 Re: SPAM ALERT!EDIT2: All of the bot's posts contain mangled html (well, just different from this board's format). So maybe it would be possible to block posts that contain that stuff? That has been on my thoughts all along, to disable posts containing common HTML tags (eg. <a href...></a>, <img> etc.). That way it would at least force the bot to be more YaBBC-tags aware, which I think should cut down on the likelihood of getting these posts. |
| MC Marshy | 06 Feb 2006 10:35:03 Re: SPAM ALERT!Spambots should be destroyed! |
| Lomay | 06 Feb 2006 16:28:23 Re: SPAM ALERT!Spambots should be destroyed! yeah! |
| Andi | 06 Feb 2006 17:45:55 Re: SPAM ALERT!Andi it would help if you posted more IPs. Another one: 202.71.106.121 Anyway, what to do now? Shall I disable guestposting or do you want to collect more IPs to erm... do something with them? ^^ @Anatol: I'm sorry for you. What GB do you use? Propably it has an anti-flood feature. |
| MC Marshy | 06 Feb 2006 18:05:18 Re: SPAM ALERT!I think guestposting should be disabled on this forum. That could stop spambots. |
| Anatol | 06 Feb 2006 18:07:31 Re: SPAM ALERT!My guestbook is a project called Openbook. I found it on Sourceforge, but the project page seems to have died long ago. So there are guestbooks out there that help prevent this sort of thing? Where can I find them? |
| MC Marshy | 06 Feb 2006 18:09:51 Re: SPAM ALERT!Anatol, all that spam on your website on the guestbook is awful. Couldn't you make it log the I.P address of the person who posts on your guestbook? It's been done 100 times in a row or so :o |
| JM | 06 Feb 2006 19:37:23 Re: SPAM ALERT!I just looked at the guestbook. Somebody must do something about this. I guess it was spambots that spammed all over Garjen's forum. |
| MC Marshy | 06 Feb 2006 20:54:31 Re: SPAM ALERT!I'm sure spambots are doing that elsewhere. All forums need to have people register before they can post. |
| tseug | 07 Feb 2006 00:13:45 Re: SPAM ALERT!The IPs seem utterly random. So I guess you should make something filter out that kind of html. The bot itself has no way of knowing what happens to what it sends because it is sending from a different IP. It might ping the server before sending, I don't know if you have any way to find out. EDIT: Or you could just look for anything sent from either of the sever IPs. |
| ccexplore (not logged in)(Guest) | 07 Feb 2006 01:55:29 Re: SPAM ALERT!I'm sure spambots are doing that elsewhere. All forums need to have people register before they can post. This makes it difficult for people who simply wants to ask for Game Help or Technical Questions, it would be a hassle to expect random people to have to register just to do that. Though certain other parts of the forum may conceivably be registered-only. I would rather not though. Especially keep in mind also that if the bot is truly YaBB2 aware, registration is unlikely to stop a bot from creating new accounts to SPAM. After all, currently there isn't even an e-mail verification for registering new accounts here, much less the CAPCHA-type verification found on, say, Yahoo account registeration. Thus I think the HTML filtering approach combine with IP-address blocking would be best. The miniscule amount of SPAM here is hardly that big a deal when you consider the dozens (possibly even hundreds) of SPAM that goes into your e-mail inbox (though nowadays e-mail filters do a good job) daily. |
| MC Marshy | 07 Feb 2006 11:03:20 Re: SPAM ALERT!This makes it difficult for people who simply wants to ask for Game Help or Technical Questions, it would be a hassle to expect random people to have to register just to do that. Though certain other parts of the forum may conceivably be registered-only. I would rather not though. Especially keep in mind also that if the bot is truly YaBB2 aware, registration is unlikely to stop a bot from creating new accounts to SPAM. After all, currently there isn't even an e-mail verification for registering new accounts here, much less the CAPCHA-type verification found on, say, Yahoo account registeration. Thus I think the HTML filtering approach combine with IP-address blocking would be best. The miniscule amount of SPAM here is hardly that big a deal when you consider the dozens (possibly even hundreds) of SPAM that goes into your e-mail inbox (though nowadays e-mail filters do a good job) daily. I don't get much spam in my e-mail inbox. If the bot registered for a username so it could spam we could easily ban it from the forum for 10 years. Some people who just want help who are guests may want to come back for more help or to have a look around the forum and find interesting things. If I find the e-mail address of the spambot then I'll give it lots of spam. |
| ccexplore (not logged in)(Guest) | 07 Feb 2006 12:11:40 Re: SPAM ALERT!If the bot registered for a username so it could spam we could easily ban it from the forum for 10 years. You don't get it at all. The point is right now registration is so easy on this board, a YaBB-aware bot can automate it and register a new username for every piece of spam it wants to post. Some people who just want help who are guests may want to come back for more help or to have a look around the forum and find interesting things. Statistically speaking I'm not sure that's the case when it comes to the Game Help and especially the Technical Help forums. If I find the e-mail address of the spambot then I'll give it lots of spam. That's what tseug proposed essentially (except what tseug said would actually work) when he talked about the DDoS attack. Incidentally, even if you do somehow get hold of a real e-mail address of a spammer and spam him, I'd think spammers are the people with the least negative reaction to spam. After all, they make their living off it. ::) |
| Timballisto | 08 Feb 2006 00:24:55 Re: SPAM ALERT!What the heck is a DDoS attack? |
| Mindless | 08 Feb 2006 01:34:09 Re: SPAM ALERT! |
| JM | 08 Feb 2006 17:07:03 Re: SPAM ALERT!The spambots have returned :o :o :o :o :o |
| Leviathan | 08 Feb 2006 19:10:24 Re: SPAM ALERT!Please don't react on those spammed topics as nobody even reads your reactions...and it gives the mods extra work. Just let the mods do their work to delete the spam right after they discovered it and in the meantime,maybe we could try to automatically delete any post or thread containing the word "casino". I don't know if it works,but maybe the program thinks the spam was posted but actually it was automatically deleted a second or so afterwards ;) |
| Timballisto | 08 Feb 2006 20:05:08 Re: SPAM ALERT!We need to get some of the mods to come back who haven't been around - namely Lem'ka an TW. I'll give them emails... EDIT: Both of them have locked emails. |
| JM | 08 Feb 2006 20:10:22 Re: SPAM ALERT!It's only Lomay who seems to get aggravated by the spam. |
| Timballisto | 08 Feb 2006 20:15:13 Re: SPAM ALERT!Actually it bothers me too. It's annoying and this isn't the place for it. I'm not one for letting it sit around and create clutter. It seems to get longer after it spams a couple times, obviously enough. You know, I don't understand it. All that does is [I]deter[/I] people. Why do they think that gets people to come to their website? The only reason I'd do that would be to get their address and fill IT with spam. |
| tseug | 09 Feb 2006 01:47:43 Re: SPAM ALERT!There were several very lengthy SPAMS (3 I think) in random topics. Blocking "<a href" may be the way to go. EDIT: Or maybe DDoS. That site deserves it. EDIT2: Especially since it somehow found this forum, which means that there are probably tons of other bots roaming around. |
| Mr. Ksoft | 09 Feb 2006 02:27:55 Re: SPAM ALERT!EDIT: Or maybe DDoS. That site deserves it. You say we should do a DDoS to them? That would just be like being worse than the spammer. We need to try figuring this out in a more civilized way. Blocking posts with ANY html is the way to go. I'll bet this bot doesn't even know that we don't support HTML. Maybe blocking the username that the bot uses would be good too, as it wouldn't be able to do anything. Someone could maybe register under that name, making it unable to use it? EDIT: Anyone have a clue why this bot seems to post fragments of sentences somewhere in the HTML? I can't see what it's supposed to be. The sentences can't be connected either, like it's just a buncha rambling. |
| Lomay | 09 Feb 2006 07:55:10 Re: SPAM ALERT!It's only Lomay who seems to get aggravated by the spam. me? :o Edit: i'm sorry :-[ |
| JM | 09 Feb 2006 10:15:58 Re: SPAM ALERT!Lomay it's ok. I'm sure I have discovered a spambots e-mail address and I could try and hack it so it couldn't work again. The e-mail address is something like this spambot5000@hotmail.co.uk |
| Andi | 09 Feb 2006 17:34:50 Re: SPAM ALERT!T stop the spambots for now I disabled guestposting and every account must be activated within 24 hours by email. I'm sorry I had to do this. But remember something? Slightly the same situation as we had once on LUDB. Only diference: back on LUDB it were actually humans. |
| JM | 09 Feb 2006 18:00:37 Re: SPAM ALERT!There's still several topics containing spam. Delete the posts that contain the word "casino" |
| MC Marshy | 10 Feb 2006 11:38:09 Re: SPAM ALERT!Yes there's still a few posts that these casino guy posted that need deleting! I'll find the posts and post them here for moderators to sort out. http://forum.lemmingswelt.de/cgi-bin/yabb2/YaBB.pl?num=1116111874/21#21 http://forum.lemmingswelt.de/cgi-bin/yabb2/YaBB.pl?num=1132961704/1#1 http://forum.lemmingswelt.de/cgi-bin/yabb2/YaBB.pl?num=1089242774/790#790 They still contain the spam that the casino guy posted. |
| Andi | 10 Feb 2006 12:51:20 Re: SPAM ALERT!Has been deleted. |
| MC Marshy | 12 Feb 2006 11:02:27 Re: SPAM ALERT!The spammers have not returned :) |
| Lomay | 12 Feb 2006 11:13:45 Re: SPAM ALERT!The spammers have not returned :) yay!! ;D ;D ;D |
| Lomay | 12 Feb 2006 11:16:26 Re: SPAM ALERT!evil is gone, lemming land has restored peace! :) |
| MC Marshy | 17 Feb 2006 12:19:57 Re: SPAM ALERT!If a spammer registers to try and spam the forum then we can just block their username from the forum :) |
| dumb_lem | 07 Mar 2006 21:19:13 Re: SPAM ALERT!would it be possible to make people have to register to guest post, but with only one requirement? I had an idea that before guest posting, this site would make you look at a graphic with a word written in it and ask the person to type what the word says. If you made the word unreadable by a text recognizer program, would a spambot be able to get through that? |
| Andi | 08 Mar 2006 20:06:16 Re: SPAM ALERT!U donno. But I prefer members. You can talk to them directly and send them PMs. They are easy to ban and you don't have to mess with IP ranges. |
| MC Marshy | 25 Mar 2006 21:54:46 Re: SPAM ALERT!Members are better. Guests leave fake e-mail addresses. |