Pages:
Author

Topic: New spam bot? [how do they do it?] (Read 453 times)

legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
July 16, 2018, 02:56:34 PM
#23
Or if we could implement some kind of mass reporting to mods...
Just imagine, you could report all "good project" "good project sir" etc... posts with only a few clicks...
Spammers would scream and shout Smiley
Mods would scream too if that happens!
hero member
Activity: 1442
Merit: 629
Vires in Numeris
July 16, 2018, 02:47:05 PM
#22
I'm wondering if it's possible to check automatically if a post was posted already? In this case spammers couldn't post the same post in every topic, at least they would need to modify it a bit... so it's still not the perfect solution...
It's programmable, need string however for a forum I don't think it's appropriate. 
Yeah, it was only an idea...
Or if we could implement some kind of mass reporting to mods...
Just imagine, you could report all "good project" "good project sir" etc... posts with only a few clicks...
Spammers would scream and shout Smiley
copper member
Activity: 630
Merit: 420
We are Bitcoin!
July 15, 2018, 03:25:27 PM
#21
I'm wondering if it's possible to check automatically if a post was posted already? In this case spammers couldn't post the same post in every topic, at least they would need to modify it a bit... so it's still not the perfect solution...
It's programmable, need string however for a forum I don't think it's appropriate. 
hero member
Activity: 1442
Merit: 629
Vires in Numeris
July 09, 2018, 05:26:52 PM
#20
...
Report all of them

As long as they use bots (programmed computers) to spam continously, reporting is like fighting a forest fire with a child's water gun...

I'm wondering if it's possible to check automatically if a post was posted already? In this case spammers couldn't post the same post in every topic, at least they would need to modify it a bit... so it's still not the perfect solution...
hero member
Activity: 2576
Merit: 883
Freebitco.in Support https://bit.ly/2I9BVS2
July 09, 2018, 07:20:47 AM
#19
Looking at this image and the quoted contents - I do not think cloudfare do much against bots. They only put some limits. May be these bots are designed having these limits in mind.

As someone who works for a gambling site with a faucet, I can tell you that Cloudflare provides no protection against botnets whatsoever. The evil IP system and captcha won't help either as these guys have access to massive pools of IP addresses and captcha solvers.
newbie
Activity: 364
Merit: 0
July 09, 2018, 07:08:08 AM
#18
So the easier way for me to report the posts which I will do after posting this however I wanted to bring it in your attention.

I have my email notification ON for several boards which I watch of-course. This is something I noticed when I checked my email...

In 20 minutes same topic were posted (Looking a the topic title). I thought this is usual spambot and same user was posting it. When I was checking the topics to report then I realized that contents are same but the accounts are not!!! Have a look (I archived all for reference)

nencipitua1982 ==> http://archive.is/2EveB

pogenpuvir1983 ==> http://archive.is/e1Xzi

arpsicsubscons1977 ==> http://archive.is/TR0g4

tiasicafou1974 ==> http://archive.is/qveGV

spamretlialter1976 ==> http://archive.is/kfgCL

seytendxihu1989 ==> http://archive.is/Yr5IJ

6 different users but the contents are the same!

After looking at their registration time I noticed 3 of them were created yesterday (arpsicsubscons1977, pogenpuvir1983 and seytendxihu1989 on July 06, 2018, 11:53:10 AM - July 06, 2018, 11:55:02 AM and July 06, 2018, 12:06:01 PM respectively) and other 3 were created today (tiasicafou1974, spamretlialter1976, nencipitua1982 on Today at 01:20:43 PM - Today at 01:24:19 PM - Today at 01:38:59 PM respectively).

So, looks like each day this person or company is creating 3 accounts to spam the same contents in different boards. May be they are using a new type of spambot to spam the forum with new strategy.  My question is/are...

How do they do it - Don't they get caught with evil IP score?
Aren't they breaking any rule to get banned? If we don't have any rule against them then Isn't it right thing to ban them?


This is really a big issue for the forum and we need to stop it.

This is the first time I have seen such things. It is unbelievable that this can happen on the forum. And how do they do it?
Report all of them
hero member
Activity: 1232
Merit: 738
Mixing reinvented for your privacy | chipmixer.com
July 08, 2018, 06:50:13 PM
#17
Looking at this image and the quoted contents - I do not think cloudfare do much against bots. They only put some limits. May be these bots are designed having these limits in mind.
I think posting bots are not deemed abusive by cloudflare, unless it's posting every second
and posting every second won't be possible because of the forum's limit on posting
so all cloudflare can do is protecting forum from DDoS and limiting user connected from blacklisted IP

the possible way to fight against bots, dislikes by most users, is by adding captcha for posting
but bots would also implement captcha decoder bots Lips sealed
I'm afraid there's no silver bullet in the fight against bots and spammers
copper member
Activity: 630
Merit: 420
We are Bitcoin!
July 08, 2018, 05:28:55 PM
#16
Just 6? I've seen like 600 accounts involved in spamming similar to this (last January).
Yes those popped up on my email. I am not a data center like you  Tongue

1. How do they bypass cloudfare?

"We also block threats and limit abusive bots and crawlers from wasting your bandwidth and server resources.

Looking at this image and the quoted contents - I do not think cloudfare do much against bots. They only put some limits. May be these bots are designed having these limits in mind.
staff
Activity: 1718
Merit: 1206
Yield.App
July 08, 2018, 02:21:04 PM
#15
I have 2 questions:

1. How do they bypass cloudfare? And

2. What do they get from this? Got my answer:
Last think my "informant" told me was bumping rates are around $1000 per week. Spam is big business, and most ICOs are shady money grabbers anyway, so they don't care.

1. It's tricky but what QS said above might be possible.

2. Heard something from the street it's around 2 ETH for 20 pages of shitty discussion.

Yeah, this isn't something that is exclusive to new accounts. It's been happening a while with higher ranked accounts too. I've personally seen several full members, and reported them in the past.

It seems like they're pausing at the moment.
staff
Activity: 3304
Merit: 4115
July 08, 2018, 02:11:17 PM
#14
I'm watching the page carefully and that one seems to be the only one that came from a non-newbie account.
Yeah, this isn't something that is exclusive to new accounts. It's been happening a while with higher ranked accounts too. I've personally seen several full members, and reported them in the past.
legendary
Activity: 2383
Merit: 1551
dogs are cute.
July 08, 2018, 02:05:52 PM
#13
I have 2 questions:

1. How do they bypass cloudfare? And

2. What do they get from this? Got my answer:
Last think my "informant" told me was bumping rates are around $1000 per week. Spam is big business, and most ICOs are shady money grabbers anyway, so they don't care.
staff
Activity: 1718
Merit: 1206
Yield.App
July 08, 2018, 01:43:15 PM
#12
And this one is not a newb:
Unfortunately, patrol doesn't show those.

I'm watching the page carefully and that one seems to be the only one that came from a non-newbie account.
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
July 08, 2018, 01:41:23 PM
#11
And this one is not a newb:
Unfortunately, patrol doesn't show those.
staff
Activity: 1718
Merit: 1206
Yield.App
July 08, 2018, 01:33:21 PM
#10
I've nuked more than 30 of them. They're still going.

And this one is not a newb:

🚀 FREE Pump-Signals +200% profits  ✅ We all Buy the same Coin to Pump it !  ❌ NO VIP   🗣 Over 4.000 members  👉👉👉     Click here to Join us
copper member
Activity: 2996
Merit: 2374
July 08, 2018, 12:51:54 PM
#9
I would speculate whoever is ultimately behind this spambot is using something similar to mTurk to have people create accounts from a diverse IP address, and solve the recaptcha from the same.
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
July 08, 2018, 12:46:02 PM
#8
6 different users but the contents are the same!
Just 6? I've seen like 600 accounts involved in spamming similar to this (last January).

I think it's a bot that spams the same message on many accounts, to make it harder to nuke them all. And if the account survives, it just continues spamming the next day.

I've reported 2 of them already today. I'll now start downloading patrol again to catch them all.
The only reason I stopped doing this, is a lack of disk space. It fills one GB per week. If someone has a VPS on standby, it's easy to create full patrol-records to search through (it adds about 50 GB per year).
Having a patrol-archive makes it very easy to search for certain strings (like great project), and create a list of accounts to ban.



I think the spambot takes random titles from other threads, like Bitcoin SCAM!. They use different titles too.
Mods, these Newbies have posted "FREE Pump-Signals +200% profits", please nuke them:
    1. ylalamof1983
     2. guthedera1988
     3. wardwindworkta1971
     4. berkthirsmesni1970
     5. sicoguato1985
     6. melsmotisi1989
     7. camilropoun1973
     8. laucrusoptu1973
     9. prolinalac1971
    10. schoolacammer1985
    11. lfootnososo1973

All banned!

I expect to post a much longer list tomorrow.

Disclaimer:
It is possible a Newbie was dumb enough to quote the spam, in that case it's a false positive. But considering their join date, that's very unlikely.
member
Activity: 350
Merit: 47
July 08, 2018, 10:48:01 AM
#7
How do they do it - Don't they get caught with evil IP score?
They're probably using VPN when creating these accounts. What VPN do is it masks your IP address making you anonymous while browsing the net. Well not entirely masks your address, rather be assigned to a new address within the same location.
copper member
Activity: 630
Merit: 420
We are Bitcoin!
July 08, 2018, 09:30:18 AM
#6
As per my experiment, I've tried to make a new account and only have 4 accounts in total on 1 IP, then the next account was caught by devil IP.
I created one ALT account and it's caught by evil IP and was asking for 0.005BTC. I had/have a big cause to create that account which I do not want to disclose in public however since it's asking me for 0.005BTC I thought let's have a break LOL. So since then I am not using it.

Anyway, we really - really need to find a way to get rid of these spammers.

I can't find post where I can learn something else.
I partially disagree. There are a lot of stuffs in the forum which are useful to gain exclusive knowledge. At-least for me - so far I have all these (Personal Gains) personal development from the forum which I doubt I would ever had if I was not a member here.

@iwasneverhere I like this wwf gif LOL
sr. member
Activity: 1162
Merit: 450
July 08, 2018, 09:18:17 AM
#5
I reported 3 of them earlier in this board.

I see many of them scattered in every part of the forum, and it's getting to be a serious problem. I can't find post where I can learn something else.
sr. member
Activity: 588
Merit: 251
July 08, 2018, 09:18:03 AM
#4
After looking at their registration time I noticed 3 of them were created yesterday (arpsicsubscons1977, pogenpuvir1983 and seytendxihu1989 on July 06, 2018, 11:53:10 AM - July 06, 2018, 11:55:02 AM and July 06, 2018, 12:06:01 PM respectively) and other 3 were created today (tiasicafou1974, spamretlialter1976, nencipitua1982 on Today at 01:20:43 PM - Today at 01:24:19 PM - Today at 01:38:59 PM respectively).

So, looks like each day this person or company is creating 3 accounts to spam the same contents in different boards. May be they are using a new type of spambot to spam the forum with new strategy.  My question is/are...

How do they do it - Don't they get caught with evil IP score?
Aren't they breaking any rule to be banned? If we don't have any rule against them then Isn't it right thing to ban them?
As per my experiment, I've tried to make a new account and only able to create 4 accounts in total on 1 IP, then the next created account was caught by devil IP. I would be thinking if they renewed their IP to a new fresh one, so that's why they don't get caught with the devil IP. For the spam on different boards, they might be using a script which is prepared for these accounts and use it in bulk at the current time. It could be an iMacros script on Mozilla, but they are no longer supported in the current version. Undecided
This is really a big issue for the forum and we need to stop it.
Pages:
Jump to: