Looks like a spam outbreak

Rooster89 · 09-20-2013, 01:48 AM

Quote:

Originally Posted by DEpointfive0

I like **** sauce, lol

By any miracle of god, do you have anything to do with it? (Do you work there? Know someone who works there?)

Nope. Just like it. And it has a rooster on it. Perfect avvy.

SouthArk370Z · 09-20-2013, 11:40 AM

Someone was asking what was going on but, by the time I typed a reply, Mods had deleted the thread (Go, Mods, Go!).

My guess is that it's someone with a script and some zombie bots. Since Admin is having problems blocking all this crap, I'm assuming that the zombies are widely distributed (ie, not the same IP or range of IPs). I hoping that whoever it is runs out of unblocked zombies soon but it may take a while. Until then: Happy Hunting, guys!

Trips · 09-20-2013, 11:58 AM

I'll be on Spam Patrol so KEEP reporting.

SouthArk370Z · 09-20-2013, 12:16 PM

Quote:

Originally Posted by Trips

I'll be on Spam Patrol so KEEP reporting.

You'll have to ban me to keep me from reporting. I HATE SPAM!

Actually, a simple request would work. But you get the point. heehee

Edit: BTW, this one is still hanging around.

SouthArk370Z · 09-21-2013, 08:38 AM

The members of this site have done well when tracking down bad sellers/buyers. Maybe they could apply their skills locating the SPAMmer(s). Post some IPs and other info you might have on them, Admin.

DEpointfive0 · 09-21-2013, 11:38 AM

Wow... Today is worse than before

SouthArk370Z · 09-21-2013, 11:56 AM

Looks like the Mods are sleeping late today. Lots of flagged posts haven't been deleted yet.

On a more serious note, if Admin will send me a list with Username, Location, and Drives of users who have signed up in the last few months, I'll see if I can find someone to write a short script to GREP loc and drvs for the "aaaaNNNN" string (or do it manually). Should be able to spot most, if not all, of the SPAMmer accts.

DEpointfive0 · 09-21-2013, 11:58 AM

Quote:

Originally Posted by SouthArk370Z

Looks like the Mods are sleeping late today. Lots of flagged posts haven't been deleted yet.

On a more serious note, if Admin will send me a list with Username, Location, and Drives of users who have signed up in the last few months, I'll see if I can find someone to write a short script to GREP loc and drvs for the "aaaaNNNN" string (or do it manually). Should be able to spot most, if not all, of the SPAMmer accts.

Can't blame them, I think they were partying hard last night

Huck · 09-21-2013, 11:59 AM

holy crap it's nothing BUT spam today lol. I got all happy when I saw there was a whole bunch of new stuff for sale but then got sad again. It's all just gibberish. I wonder why this is happening in the first place?

SouthArk370Z · 09-21-2013, 12:09 PM

Quote:

Originally Posted by Huck

... It's all just gibberish. I wonder why this is happening in the first place?

Thank goodness, for the gibberish part - makes 'em easy to spot. I'm even getting to where I can spot a bogus username two out of three times (still getting some false positives but I'm getting better at it).

My guess is that it's someone with a grudge against the site or one of the users. Most SPAMmers would have given up by now.

///PureSwank · 09-21-2013, 12:17 PM

Its over!! They are in balls deep!!!

Sent from my SPH-L710 using Tapatalk 2

rAiN · 09-21-2013, 12:37 PM

a simple exploit injection in database can cause this, admin really needs to save and backup database weekly and revert back to before the spam break outs.

this can be easily done by changing a file name to inject.xss to inject.xss.jpg and upload them into the forum image uploader.

since we dont know what the "cracker/hacker" used the file to contaminate the database but that is how they usually get into database. or at least one of the way.

shadoquad · 09-21-2013, 01:56 PM

yep

Trips · 09-21-2013, 02:30 PM

We are doing are best But WE do have to sleep among other things and are on top things once in here.

Most of these are like someone put it "Zombie" accounts that will eventually be eradicated with simply IP Banning.

Like AK has mentioned the registration has been ramped up so we're not getting these types of accounts anymore.

I can only ask for everyones cooperation and patience as this will take some time to resolve.

Once again a BIG THANKS to everyone.

SouthArk370Z · 09-21-2013, 02:54 PM

Quote:

Originally Posted by Trips

We are doing are best But WE do have to sleep among other things and are on top things once in here.
...
I can only ask for everyones cooperation and patience as this will take some time to resolve.

Once again a BIG THANKS to everyone.

Y'all are doing a great job. Too bad some jerk is causing so many problems for you.

BTW, notice the smiley after my "sleeping late" comment. Meant to be a good-natured ribbing for being human and having family/jobs/sleep/&c to take care of. Sorry if you were offended.

09-20-2013, 11:40 AM	#122 (permalink)
SouthArk370Z Premium Member Join Date: Nov 2010 Location: South Arkansas Posts: 8,435 Drives: 2014 Challenger Rep Power: 324198	Someone was asking what was going on but, by the time I typed a reply, Mods had deleted the thread (Go, Mods, Go!). My guess is that it's someone with a script and some zombie bots. Since Admin is having problems blocking all this crap, I'm assuming that the zombies are widely distributed (ie, not the same IP or range of IPs). I hoping that whoever it is runs out of unblocked zombies soon but it may take a while. Until then: Happy Hunting, guys! __________________ Steering Lock Links - Search The370Z Bookmarklet - FSM @ NICOclub Mankind has progressed past the need for war but we haven't evolved that far. - NachoMahma

09-20-2013, 11:58 AM	#123 (permalink)
Trips Administrator Join Date: May 2009 Location: Disneyland, Ca Posts: 8,732 Drives: 🔰 Rep Power: 10	I'll be on Spam Patrol so KEEP reporting. Baer383 likes this. __________________

09-21-2013, 08:38 AM	#125 (permalink)
SouthArk370Z Premium Member Join Date: Nov 2010 Location: South Arkansas Posts: 8,435 Drives: 2014 Challenger Rep Power: 324198	The members of this site have done well when tracking down bad sellers/buyers. Maybe they could apply their skills locating the SPAMmer(s). Post some IPs and other info you might have on them, Admin. __________________ Steering Lock Links - Search The370Z Bookmarklet - FSM @ NICOclub Mankind has progressed past the need for war but we haven't evolved that far. - NachoMahma

09-21-2013, 11:38 AM	#126 (permalink)
DEpointfive0 Premium Member Bitches Join Date: Jan 2012 Location: SoCal Posts: 14,824 Drives: a lot Rep Power: 17151	Wow... Today is worse than before __________________ Do YOU want to know what/where I got my username from? ( Click to show/hide ) NSFW due to language:

09-21-2013, 11:56 AM	#127 (permalink)
SouthArk370Z Premium Member Join Date: Nov 2010 Location: South Arkansas Posts: 8,435 Drives: 2014 Challenger Rep Power: 324198	Looks like the Mods are sleeping late today. Lots of flagged posts haven't been deleted yet. On a more serious note, if Admin will send me a list with Username, Location, and Drives of users who have signed up in the last few months, I'll see if I can find someone to write a short script to GREP loc and drvs for the "aaaaNNNN" string (or do it manually). Should be able to spot most, if not all, of the SPAMmer accts. __________________ Steering Lock Links - Search The370Z Bookmarklet - FSM @ NICOclub Mankind has progressed past the need for war but we haven't evolved that far. - NachoMahma

09-21-2013, 11:59 AM	#129 (permalink)
Huck A True Z Fanatic Join Date: Jan 2012 Location: Cocoa, Florida Age: 42 Posts: 5,075 Drives: Pantydropper machine Rep Power: 33	holy crap it's nothing BUT spam today lol. I got all happy when I saw there was a whole bunch of new stuff for sale but then got sad again. It's all just gibberish. I wonder why this is happening in the first place? DEpointfive0 likes this. __________________ VLEDS \| Evo-R \| Moddiction \| CF Hood Struts \| F.I. CF CBE & LTH \| Stillen CAI \| NST Pulleys \| UpRev \| Z1 \| M7 \| Status \| Forgestar \| PSS \| Whiteline \| SPL \| SPC \| Kenwood \| Zenclosure \| Kicker \| Alpine Type R

09-21-2013, 12:17 PM	#131 (permalink)
///PureSwank Track Member Join Date: Mar 2012 Location: Earth Posts: 954 Drives: 2009 370z Rep Power: 14	Its over!! They are in balls deep!!! Sent from my SPH-L710 using Tapatalk 2 roy'sz likes this. __________________

09-21-2013, 12:37 PM	#132 (permalink)
rAiN Track Member Join Date: Jan 2009 Location: va Posts: 721 Drives: 2012 370z mt Rep Power: 17	a simple exploit injection in database can cause this, admin really needs to save and backup database weekly and revert back to before the spam break outs. this can be easily done by changing a file name to inject.xss to inject.xss.jpg and upload them into the forum image uploader. since we dont know what the "cracker/hacker" used the file to contaminate the database but that is how they usually get into database. or at least one of the way.

09-21-2013, 01:56 PM	#133 (permalink)
shadoquad A True Z Fanatic Join Date: Apr 2010 Location: . Posts: 42,608 Drives: . Rep Power: 3886	yep

09-21-2013, 02:30 PM	#134 (permalink)
Trips Administrator Join Date: May 2009 Location: Disneyland, Ca Posts: 8,732 Drives: 🔰 Rep Power: 10	We are doing are best But WE do have to sleep among other things and are on top things once in here. Most of these are like someone put it "Zombie" accounts that will eventually be eradicated with simply IP Banning. Like AK has mentioned the registration has been ramped up so we're not getting these types of accounts anymore. I can only ask for everyones cooperation and patience as this will take some time to resolve. Once again a BIG THANKS to everyone. Rooster89 and DEpointfive0 like this. __________________

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Site Virus/Spam?	MattP725	The370Z.com Feedback, Suggestions & Questions	100	09-11-2012 12:55 AM
dealing with spam	shadoquad	The370Z.com Feedback, Suggestions & Questions	18	01-21-2011 08:27 AM
Spam?????	SigPapa226	The370Z.com Feedback, Suggestions & Questions	15	02-27-2010 09:49 AM