Looks like a spam outbreak

Chuck33079 · 09-17-2013, 08:39 AM

Might be time to freeze new membership for a little while until some way to stop them is found.

Jasonle · 09-17-2013, 08:48 AM

Stupid spam.

SouthArk370Z · 09-17-2013, 09:31 AM

I found and flagged 6-7 this AM. Chuck33079 beat me to a bunch of 'em.

Chuck33079 · 09-17-2013, 09:38 AM

Wheee! was on point this morning. He got there first most times.

SouthArk370Z · 09-17-2013, 09:42 AM

I have noticed something that might help if you have GREP available to search - the Location and Drives fields all start with 5 LC alpha chars and end with 5 numeric chars. Edit3: Always 10 chars for username, Location, and Drives. Edit4: Not _always_. Also found username "George103". Edit5: Found a few other usernames with less than 10 chars. Loc and Drvs = "aaaaannnnn" seems to be consistent.

Edit: Acccckkkk! They just keep coming. The 60 secs between reports is getting tedious and really slows things down (yeah, it's probably a good thing during "normal" operations but still a PITA for occasions such as this).

Edit2: BTW, I haven't been leaving a post saying I flagged posts. Would just have to go back later and delete. If I should be making an I-flagged-this post, please let me know.

Chuck33079 · 09-17-2013, 09:46 AM

This is already worse than yesterday.

+1 on the time limit on reporting posts getting lifted temporarily.

Somebody's got to do something about this. Fo realz.

SouthArk370Z · 09-17-2013, 10:24 AM

Quote:

Originally Posted by Chuck33079

Somebody's got to do something about this. Fo realz.

If they are using just a few IPs or the IPs are in a range, they can be blocked. If the forum software won't do it, htaccess will.

SouthArk370Z · 09-17-2013, 10:33 AM

I was a member of a site that had a group of users that could hide posts. The posts weren't deleted, just flagged as hidden so they didn't display until a full mod took a look at it. An over-zealous member of the group couldn't do much harm; if the post was improperly flagged, the mod just unflagged it and it reappeared. Our group was scattered around the globe so we usually had 24/7 monitoring. I have no idea how it was implemented but it worked very well.

wheee! · 09-17-2013, 10:53 AM

Quote:

Originally Posted by Chuck33079

Wheee! was on point this morning. He got there first most times.

Sat there drinking my coffee swearing under my breath, clicking like a madman with 30 windows open....

DIGItonium · 09-17-2013, 11:11 AM

I'm not sure what kind of practical joke this is, but this is all randomly generated. I saw one of the random links appears to link to some page on this site. The rest are random sites. I tried running VirusTotal to scan some of the URLs, and it didn't find anything.

For what it is, it could be a human member on this site running a utility to infiltrate the new member registration and spew out random threads on every subforum with random junk. Z h8r troll?

Chuck33079 · 09-17-2013, 11:18 AM

Quote:

Originally Posted by DIGItonium

For what it is, it could be a human member on this site running a utility to infiltrate the new member registration and spew out random threads on every subforum with random junk.

Then they should recieve the death penalty.

AK370Z · 09-17-2013, 11:19 AM

Thanks for the patience guys. The spam accounts are EXISTING account that signed up before. I haven't let a single new member in my forum in 72+ hours. These accounts are from prior sign ups.

I tend to see this happen each year. No specific time or anything. Massive spam activity, then followed a quiet whole year. Last year it happened too. So I am guessing it's that time. I'm going to change some registration verification question now. I'll change report post time interval to a smaller number. Please continue to report these posts and last but not least, big

for trips and frost cleaning these threads up and keeping The370z clean

Quote:

Originally Posted by frost

Yeah, AK was supposed to get on and change the setup ... not sure what happened

I am going to change it but it only affects registration from this point on. All these spammers are from the past that are already member. I have not let anyone in last 3-4 days. ( I already had new members on moderation queue "on")

AK370Z · 09-17-2013, 11:21 AM

Quote:

Originally Posted by DIGItonium

I'm not sure what kind of practical joke this is, but this is all randomly generated. I saw one of the random links appears to link to some page on this site. The rest are random sites. I tried running VirusTotal to scan some of the URLs, and it didn't find anything.

For what it is, it could be a human member on this site running a utility to infiltrate the new member registration and spew out random threads on every subforum with random junk. Z h8r troll?

Must be a my350z member that hates 370z!

Trips · 09-17-2013, 11:21 AM

Morning guys, I've removed all the latest spam thats been reported.

I please suggest NOT quote the spam post But simply just report it

That makes the cleanup much easier after the fact.

AK is aware of the issue as I presume is working on a fix to stop these bots

Again THANKS to everyone especially Chuck

Chuck33079 · 09-17-2013, 11:24 AM

Not a problem. Been stuck on web based compliance training all day, so it was good to have something productive to do.

09-17-2013, 08:39 AM	#61 (permalink)
Chuck33079 A True Z Fanatic Join Date: Nov 2011 Location: Houston Posts: 12,265 Drives: 2011 370ztt Rep Power: 29539	Might be time to freeze new membership for a little while until some way to stop them is found. wheee! and DEpointfive0 like this. __________________ 2011 MB Touring-Sport-6sp-Nav/GTM TT/FI TT TDX/JTran/Kosmic/Eibach/Hotchkis/SPC/CSF/RPS/SoThatsWhereAllMyMoneyWent

09-17-2013, 08:48 AM	#62 (permalink)
Jasonle A True Z Fanatic Join Date: Jan 2011 Location: St. Louis Posts: 3,509 Drives: 09 370z Rep Power: 25	Stupid spam. __________________ 2009 Nissan 370z/2003 Honda Soccer Van Shineauto Amuse Body Kit/UAM Fenders/Bc Br Coilovers/Topspeed Exhaust/Racing Hart Wheels and More My Sexy Beast

09-17-2013, 09:31 AM	#63 (permalink)
SouthArk370Z Premium Member Join Date: Nov 2010 Location: South Arkansas Posts: 8,435 Drives: 2014 Challenger Rep Power: 324198	I found and flagged 6-7 this AM. Chuck33079 beat me to a bunch of 'em. __________________ Steering Lock Links - Search The370Z Bookmarklet - FSM @ NICOclub Mankind has progressed past the need for war but we haven't evolved that far. - NachoMahma

09-17-2013, 09:38 AM	#64 (permalink)
Chuck33079 A True Z Fanatic Join Date: Nov 2011 Location: Houston Posts: 12,265 Drives: 2011 370ztt Rep Power: 29539	Wheee! was on point this morning. He got there first most times. wheee! likes this. __________________ 2011 MB Touring-Sport-6sp-Nav/GTM TT/FI TT TDX/JTran/Kosmic/Eibach/Hotchkis/SPC/CSF/RPS/SoThatsWhereAllMyMoneyWent

09-17-2013, 09:42 AM	#65 (permalink)
SouthArk370Z Premium Member Join Date: Nov 2010 Location: South Arkansas Posts: 8,435 Drives: 2014 Challenger Rep Power: 324198	I have noticed something that might help if you have GREP available to search - the Location and Drives fields all start with 5 LC alpha chars and end with 5 numeric chars. Edit3: Always 10 chars for username, Location, and Drives. Edit4: Not _always_. Also found username "George103". Edit5: Found a few other usernames with less than 10 chars. Loc and Drvs = "aaaaannnnn" seems to be consistent. Edit: Acccckkkk! They just keep coming. The 60 secs between reports is getting tedious and really slows things down (yeah, it's probably a good thing during "normal" operations but still a PITA for occasions such as this). Edit2: BTW, I haven't been leaving a post saying I flagged posts. Would just have to go back later and delete. If I should be making an I-flagged-this post, please let me know. DEpointfive0 likes this. __________________ Steering Lock Links - Search The370Z Bookmarklet - FSM @ NICOclub Mankind has progressed past the need for war but we haven't evolved that far. - NachoMahma Last edited by SouthArk370Z; 09-17-2013 at 12:26 PM.

09-17-2013, 09:46 AM	#66 (permalink)
Chuck33079 A True Z Fanatic Join Date: Nov 2011 Location: Houston Posts: 12,265 Drives: 2011 370ztt Rep Power: 29539	This is already worse than yesterday. +1 on the time limit on reporting posts getting lifted temporarily. Somebody's got to do something about this. Fo realz. DEpointfive0 likes this. __________________ 2011 MB Touring-Sport-6sp-Nav/GTM TT/FI TT TDX/JTran/Kosmic/Eibach/Hotchkis/SPC/CSF/RPS/SoThatsWhereAllMyMoneyWent Last edited by Chuck33079; 09-17-2013 at 10:19 AM.

09-17-2013, 10:33 AM	#68 (permalink)
SouthArk370Z Premium Member Join Date: Nov 2010 Location: South Arkansas Posts: 8,435 Drives: 2014 Challenger Rep Power: 324198	I was a member of a site that had a group of users that could hide posts. The posts weren't deleted, just flagged as hidden so they didn't display until a full mod took a look at it. An over-zealous member of the group couldn't do much harm; if the post was improperly flagged, the mod just unflagged it and it reappeared. Our group was scattered around the globe so we usually had 24/7 monitoring. I have no idea how it was implemented but it worked very well. __________________ Steering Lock Links - Search The370Z Bookmarklet - FSM @ NICOclub Mankind has progressed past the need for war but we haven't evolved that far. - NachoMahma

09-17-2013, 11:11 AM	#70 (permalink)
DIGItonium A True Z Fanatic Join Date: Jan 2009 Location: Kansas Posts: 3,800 Drives: 09 Z34-TT 6MT Rep Power: 42	I'm not sure what kind of practical joke this is, but this is all randomly generated. I saw one of the random links appears to link to some page on this site. The rest are random sites. I tried running VirusTotal to scan some of the URLs, and it didn't find anything. For what it is, it could be a human member on this site running a utility to infiltrate the new member registration and spew out random threads on every subforum with random junk. Z h8r troll? __________________

09-17-2013, 11:21 AM	#74 (permalink)
Trips Administrator Join Date: May 2009 Location: Disneyland, Ca Posts: 8,730 Drives: 🔰 Rep Power: 10	Morning guys, I've removed all the latest spam thats been reported. I please suggest NOT quote the spam post But simply just report it That makes the cleanup much easier after the fact. AK is aware of the issue as I presume is working on a fix to stop these bots Again THANKS to everyone especially Chuck Chuck33079 likes this. __________________

09-17-2013, 11:24 AM	#75 (permalink)
Chuck33079 A True Z Fanatic Join Date: Nov 2011 Location: Houston Posts: 12,265 Drives: 2011 370ztt Rep Power: 29539	Not a problem. Been stuck on web based compliance training all day, so it was good to have something productive to do. __________________ 2011 MB Touring-Sport-6sp-Nav/GTM TT/FI TT TDX/JTran/Kosmic/Eibach/Hotchkis/SPC/CSF/RPS/SoThatsWhereAllMyMoneyWent

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Site Virus/Spam?	MattP725	The370Z.com Feedback, Suggestions & Questions	100	09-11-2012 12:55 AM
dealing with spam	shadoquad	The370Z.com Feedback, Suggestions & Questions	18	01-21-2011 08:27 AM
Spam?????	SigPapa226	The370Z.com Feedback, Suggestions & Questions	15	02-27-2010 09:49 AM