Results 1 to 10 of 10
  1. #1
    Join Date
    Feb 2005
    Location
    Near salt water
    Posts
    23,335
    Post Thanks / Like

    WTF is up with all the spam??

    OK so everyone is wondering, no doubt. I've seen the comments and - since we are having a parallel discussion about it on the admin area - we thought it would be a good idea to let you guys know WTF was going on. A lot of what is below is cut/pasted directly from that original admin post.

    On 8/31 of last year, we were asked by MagnumClub to dial down the controls of our anti-spam prevention software a little bit because he was getting a lot of complaints of false positives and people could not register. I don't blame him, nothing says "Go F yourself" like trying to register for a forum and being told you can't because you are a spammer.

    Unfortunately, that in turn lead to this:



    That is our weekly registrations... note that before September, we averaged between 140-180 registrations a week. Beginning in September (with the dialed down settings) that jumped to anywhere between 300-500. Then all hell breaks loose. There were a couple weeks in November where we broke 1,000 registrations in a week, then in January we had over 2,000 registrations in ONE WEEK!!!

    Around the first week of the month the settings were dialed back up to being very strict, and now we are back to normal registrations. However, we have TWO problems:

    1) The floodgates were open so long we have become a target for spammers. I just checked the spam logs and we get upwards of 750 spam rejected registrations PER DAY ! (many are duplicate of the same user however, so the true number is well south of that). They aren't getting through, so really this is a 'problem' that will likely take care of itself and no one will know any better. The spammers will get sick of trying to register and go hammer someone else.

    2)Here's the real problem: We have thousands upon thousands of "sleeper cell" bots that registered during our lax time. You've probably noticed every day we get 5 or 6 posts from spambots. Well, I noted they all registered during the "free play" time period and get activated randomly to post up their garbage.

    Sooo....in a nutshell. No more bots are signing up. But a bunch of their buddies are already in.
    So. Now you know whats going on. In case you didn't know, what spammers tend to do is register fake users and then let them sit and look innocent - just another lurker. You'll even see them read a few threads to change their activity stats. Its all automated. Basically they are sleeper agents. At a certain point they post spam and get banned. But there are hundreds more waiting to be activated behind them.

    I know some people have been blaming the forum upgrade but if you think back this problem started surfacing just before then.

    We're working on solving the problem. Worst case we go in and delete the sleepers as best we can by hand.
    Last edited by MattRobertson; 02-24-2012 at 12:23 PM.
    "LxF welcomes with open arms all members, regardless of social status, creed, color, sexual preference, or anything else. The only thing we discriminate against is douchebags."

    Check out Darth Hemi in the LxForums Garage



  2. #2
    Join Date
    Sep 2005
    Location
    Lorain Oh
    Posts
    34,030
    Post Thanks / Like
    Did you put in software that sends them all to Legmakers forum? Cause that's just hilarious
    BFNY Performance
    9515 Detroit Rd,Cleveland Ohio 44102
    440-787-7235 8am- 5pm

    BFNYPERFORMANCE@YAHOO.COM
    RIP NHDave
    RIP LOU1355

  3. #3
    Join Date
    Feb 2005
    Location
    Near salt water
    Posts
    23,335
    Post Thanks / Like
    Really? Ouch. Maybe Lance is behind all this.

  4. #4
    HULK's Avatar
    HULK is online now West Coast Style Meets East Coast Power


    Join Date
    Aug 2007
    Location
    Chicago, IL
    Posts
    7,812
    Post Thanks / Like
    Quote Originally Posted by MattRobertson View Post
    Really? Ouch. Maybe Lance is behind all this.
    That was my thought as well, lol.

    Quote Originally Posted by Simans82 View Post
    Compared to your modding addiction, I'm just looking at the coke on the table. You on the other hand, you're more like Scarface.

  5. #5
    Join Date
    Jun 2004
    Location
    Huntington Beach, CA
    Posts
    3,255
    Post Thanks / Like
    Not sure where your bots are coming from, but are you doing any filtering by country/region on certain net blocks? I did that for an ecommerce site and it cut my fraud down to almost nothing. I used to have scammers ordering small items as a method to verify stolen credit card numbers were still active.
    " Where Southern California Car Culture Meets Modern Mopar Muscle"

  6. #6
    Join Date
    Dec 2006
    Location
    SAN DIEGO, CA
    Posts
    17,113
    Post Thanks / Like
    I do have to agree that it is a big F U when you can not even get signed up. I tried to join a forum for our coupe build and had all kinds of trouble with it. After the first 5 times of not being able to log in I told the admins to **** off. lol

  7. #7
    bipto's Avatar
    bipto is offline "If you like your LXF, you can keep it"

    Join Date
    Aug 2004
    Location
    New Hampshire
    Posts
    15,072
    Post Thanks / Like
    Quote Originally Posted by MattRobertson View Post
    Really? Ouch. Maybe Lance is behind all this.
    Wow - ghosts of douchebags past...


    ...
    Sent from my Droid X2 using Tapatalk because I know you give a rat's ass...
    "It's not that I'm old - your music really does suck..."
    See The Iron Mistress Galleries
    ***
    R.I.P. Dave Coults ***

  8. #8
    Join Date
    May 2006
    Location
    Long Island , NY
    Posts
    4,478
    Post Thanks / Like
    If said bag o' douche was behind it , he would have ''borrowed'' the idea from another spammer .......and then ****ed that guy over . Poor Chris . I keep telling the non legmaker spammers ( few and far between ) that they are posting in the wrong section......lol .
    06 CSRT-8 Silver Steel (all opts.): MagnaCharger MP2300 TVS Supercharger, Hemituner tuned, Hemi Shop P & P heads , FRI Tomahawk cam , Dynatech LT headers,Corsa cat-back,Magnaflow HF cats,LMI CF True 4'' fendermount CAI , PT 3400 stall TC , Getrag LSD 3.06 rear, Paramount rebuilt tranny & valve body , Arrington 85MM Ported TB w/ nitrous ports , BT catch can ,Hotchkis front & rear sways ,15% tint all around,SRT-8 embroidered mats(biggest HP gain ).On the way:Arrington 426 & and presumably divorce papers.....=) .

    PB 11.25 @ 125.16 - Stock Bottom 6.1L blown (10lbs boost)

  9. #9
    Join Date
    Oct 2006
    Location
    orlando, fl
    Posts
    12,695
    Post Thanks / Like
    Quote Originally Posted by Hemi31 View Post
    Did you put in software that sends them all to Legmakers forum? Cause that's just hilarious
    no...no......it really is not hilarious....... seems everyday i pick up my phone i have a gazillion notices of action in my section. gets me all excited for nuthin'!

    Quote Originally Posted by MattRobertson View Post
    Really? Ouch. Maybe Lance is behind all this.
    whose lance????? you mean the dude from north of the border who i helped put out of business??? lol

    Quote Originally Posted by bipto View Post
    Wow - ghosts of douchebags past...
    lol
    FLXC President

    10.06 @ 140 mph PWR forged 6.1 Procharger F1A Nitrous Outlet
    AfterHours Mopar Perf. installed!!!

  10. #10
    Join Date
    Feb 2005
    Location
    Near salt water
    Posts
    23,335
    Post Thanks / Like
    Quote Originally Posted by JonW View Post
    Not sure where your bots are coming from, but are you doing any filtering by country/region on certain net blocks? I did that for an ecommerce site and it cut my fraud down to almost nothing. I used to have scammers ordering small items as a method to verify stolen credit card numbers were still active.
    I banned most of Asia long before this latest episode, and yes that took out like 90% of our spam at the time (a year ago?). A continental or countrywide ban is yesterday's solution to yesterday's spammers. the ones these days appear to be using bots that vary their incoming IP from a variety of European countries. If I banned Holland I would probably take out half of them. But then they'll just use proxies from another country once they figure out we banned Holland, just like they worked around our ban of China. Its a whackamole game you will never win, so we have to find another way.

    And we think we have it. Can't say anything publicly cuz you never know if spies will listen in, but DMag found out something useful.

Share This Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •