The spambot report thread

Post by **MrFlibble** » Thu Feb 04, 2016 4:08 am

A bot that seems to have picked random sentences from posts in the forum and used them as topic titles:
http://www.dosgames.com/forum/profile.p ... le&u=13445

All stuff Trash Heap'd.

Rwolf · Post by **Rwolf** » Wed Feb 17, 2016 4:39 am

The returning spambot 'jagdev02' definitely needs to be moved out.
http://www.dosgames.com/forum/profile.p ... le&u=13317

Status: Posts removed. Spammed domain added to spam list. Account banned.

Rwolf · Post by **Rwolf** » Fri Feb 19, 2016 8:59 am

Another salesbot: 'NinaAnderso', multilingual posts, spanish link in profile.

http://www.dosgames.com/forum/profile.p ... le&u=13460

Status: Posts removed, account banned, spam words updated.

Post by **MrFlibble** » Sat Mar 05, 2016 9:52 am

This bot has posted another thread: http://www.dosgames.com/forum/profile.p ... le&u=13467

A while ago it already made one, which was trash heap'd. It also has links in profile.

Rwolf · Post by **Rwolf** » Mon Mar 21, 2016 8:46 pm

Some spam from a new user 'pingguoguo':

http://www.dosgames.com/forum/search.ph ... pingguoguo

Rwolf · Post by **Rwolf** » Tue Mar 22, 2016 7:40 am

Another spambot: 'alsoft' adding random generic posts of nonsense praise, in this case as new postings. Common practice by some robots.

http://www.dosgames.com/forum/search.ph ... hor=alsoft

Related spam-link in its profile.

Post by **MrFlibble** » Tue Mar 22, 2016 2:33 pm

Both bots' posts were Trash Heap'd, thanks.

Rwolf · Post by **Rwolf** » Sat Mar 26, 2016 7:43 pm

Three differently named spambots, probably from the same spammer:
Edmuna, Kity, Theobald

http://www.dosgames.com/forum/profile.p ... le&u=13503
http://www.dosgames.com/forum/profile.p ... le&u=13505
http://www.dosgames.com/forum/profile.p ... le&u=13506

Trashed & banned. Updated spam words.

Rwolf · Post by **Rwolf** » Fri Apr 01, 2016 6:57 am

Spammer with random 11-letter names posting a few links.
(The spammer is from indonesia.)

http://www.dosgames.com/forum/search.ph ... kklertty23
http://www.dosgames.com/forum/search.ph ... jgdtytyrry
http://www.dosgames.com/forum/search.ph ... dtreeesiya

All posts Trash heap'd

Rwolf · Post by **Rwolf** » Tue Apr 05, 2016 12:41 pm

More from the same Indonesian spammer; a new user with every post, containing identical text and web links. (the post titles are suggested for spam word filters)

spammer alter-ego user names:
qeyfarow
Crekiyox
demiera
rewasqiy
RWEWINS
REFANS
trevansxay

Trash Heap'd the stuff. Admins should take care of the rest ~ MrFlibble

Rwolf · Post by **Rwolf** » Thu Apr 07, 2016 11:35 am

More spam from the same source and with same message as before:
Todays spam is brought to you by:

Frandesraw
Drewbinx
Cvlara
Trevansd
Hevonix
Rewanes
Revkandre
Androans

edit: I see the removal was swifter than my post, almost :-)

Post by **MrFlibble** » Thu Apr 07, 2016 11:57 am

I'm thinking that maybe the CAPTCHA type used should be changed to a question. These bots seem to be getting better and better at bypassing countermeasures.

Rwolf · Post by **Rwolf** » Thu Apr 07, 2016 9:39 pm

More spam from same source:

new user:

Hewaveqz25

Post by **wardrich** » Sat Apr 09, 2016 1:41 am

Updated ban list to include RWOLF's last 3 posts' worth spammers.

Post by **MrFlibble** » Mon Apr 11, 2016 5:03 am

Can you please do something about that Indonesian spam? It seems like there are no less than 5 new spam posts from them every day now.

What about changing the CAPTCHA to a question? From my experience, it seems to be more effective than those "type in numbers from picture" countermeasures.

Rwolf · Post by **Rwolf** » Wed Apr 13, 2016 9:52 am

More Indonesian spam, likely from the same spammer.
The post headings, signatures and web links repeat in the profile.

new user names:
Sezkra,Vraxzz, Braygz, Praxzlo, Qzeqrox, Rexyz, Heqzax, Qrexzz, Kraylez, Zeqarex

Post by **MrFlibble** » Wed Apr 13, 2016 11:29 am

I Trash Heap'd the posts, but is there any reason to list user names? I'm not sure about the version of phpBB here, but the latest versions will remove a username from the ban list if the respective account is deleted. IPs and emails will stay on the ban list regardless though.

Rwolf · Post by **Rwolf** » Wed Apr 13, 2016 1:37 pm

Well, I know you find the posts anyway, I'd just as well list the profile pages or whatever is appropriate.

In this case any listing could be redundant, as they are rather obvious.

edit: 12 new spams from the same source.
I won't list them, you know where they are.

Post by **MrFlibble** » Thu Apr 14, 2016 7:05 am

This spam nonsense is becoming increasingly annoying. Could the admins please do something like change the CAPTCHA type as I suggested above? This worked quite well for me in another forum.

Rwolf · Post by **Rwolf** » Fri Apr 15, 2016 8:44 am

10 more spam today, likely from same source as before.

On another forum we had to vet new registered users before letting them post in public; there was some 40-50 spammers each day, looking valid on the surface, but the profiles were faked, stolen from hacked user databases & the post content was always spam. It kept up from august to november last year.