Forum Rule: Always post complete source code & details to reproduce any issue!
Page 1 of 3 1 2 3 LastLast
Results 1 to 25 of 69

Thread: Clever spam bots

  1. #1
    Senior Member PaulStoffregen's Avatar
    Join Date
    Nov 2012
    Posts
    18,687

    Clever spam bots

    Please keep an eye out for spam bots posting nonsense replies.

    At first glance, these messages look like an overconfident non-English speaking novice trying to be helpful. The bots compose replies from fragments of messages from other threads. You can tell it's a bot by clicking the link to their user profile. Bots will have a "home page" link to a site selling pills, porn or other junk.

    If you see any of these, please click the "Report Post" (small black triangle below the message) and in the report, please mention this is a bot with a spam link on their profile page. Robin does review every spam report, but when the original message looks like it might be legitimate without the surrounding thread's context, she often takes a conservative approach to avoid banning a real person. Please mention the account's profile has a spammy home page link so she'll be sure to ban the account.

  2. #2
    Have you noticed the ones that switch those almost-coherent posts with spam? I reported one a few weeks ago..

  3. #3
    Administrator Robin's Avatar
    Join Date
    Oct 2012
    Location
    PJRC Global Headquarters
    Posts
    283
    Quote Originally Posted by PaulStoffregen View Post
    Robin does review every spam report, but when the original message looks like it might be legitimate without the surrounding thread's context, she often takes a conservative approach to avoid banning a real person. Please mention the account's profile has a spammy home page link so she'll be sure to ban the account.
    Lately I've been taking an approach of ban now and don't ask questions later.

  4. #4
    Administrator Robin's Avatar
    Join Date
    Oct 2012
    Location
    PJRC Global Headquarters
    Posts
    283
    Quote Originally Posted by ohhorob View Post
    Have you noticed the ones that switch those almost-coherent posts with spam? I reported one a few weeks ago..
    There are also ones who copy a post from some other forum. The post looks legit, but then I get a report from one of our eagle-eyed regulars that points out it's a copy. Grrrrrrr, I hate spammers.

  5. #5
    Senior Member+ Frank B's Avatar
    Join Date
    Apr 2014
    Location
    Germany NRW
    Posts
    4,768
    Quote Originally Posted by Robin View Post
    Lately I've been taking an approach of ban now and don't ask questions later.
    ;-) LOL Yea terminate them
    How do they register ? Is this an automated process ?
    Maybe i could help to add an unusual cpatcha....this would mean to edit/patch the registration-page a bit.. I "speak" php / mysql...
    Last edited by Frank B; 07-25-2017 at 08:00 PM.

  6. #6
    Senior Member+ Frank B's Avatar
    Join Date
    Apr 2014
    Location
    Germany NRW
    Posts
    4,768
    newest member lily000, no posts, links to http://veteransdayblog.com/veterans-day-history-facts/

  7. #7

  8. #8
    Senior Member
    Join Date
    Apr 2013
    Posts
    1,823
    All Ab and Ac names. Is that just as far as you got, or somebody using a sorted list of scraped user IDs in a script?

  9. #9
    Senior Member+ Frank B's Avatar
    Join Date
    Apr 2014
    Location
    Germany NRW
    Posts
    4,768
    Quote Originally Posted by GremlinWrangler View Post
    All Ab and Ac names. Is that just as far as you got, or somebody using a sorted list of scraped user IDs in a script?
    I just started with "A". I think there are much much more...

  10. #10
    Member
    Join Date
    Sep 2016
    Location
    NYC, USA
    Posts
    44
    Although these look suspicious, it is possible to legitimately have an account and not post. I don't post much myself, but having an account helps me keep track of what I've read, etc. So I'd be wary of deleting accounts for that reason alone.
    --Michael

  11. #11
    Senior Member
    Join Date
    Apr 2013
    Posts
    1,823
    @Michael - your profile doesn't link to a spam page though. Not sure if there is a simple way to filer non posting accounts that have a link without some false positives though. And pass on manually following all the links to quantify them.

  12. #12
    Senior Member+ Frank B's Avatar
    Join Date
    Apr 2014
    Location
    Germany NRW
    Posts
    4,768
    Links to erotic-toys (dot) info are spam in a microcontroller forum..

    https://forum.pjrc.com/members/47892-abuhysyb

  13. #13
    Member
    Join Date
    Sep 2016
    Location
    NYC, USA
    Posts
    44
    "Links to erotic-toys (dot) info are spam in a microcontroller forum.."

    Maybe they're Teensy-controlled?

    --Michael

  14. #14
    Senior Member
    Join Date
    Nov 2012
    Posts
    270
    Quote Originally Posted by PaulStoffregen View Post
    The bots compose replies from fragments of messages from other threads.
    Yes and after some time they edit the post.
    example: https://forum.pjrc.com/threads/44408...rious-problems

  15. #15
    Quote Originally Posted by HWGuy View Post
    Yes and after some time they edit the post.
    example: https://forum.pjrc.com/threads/44408...rious-problems
    Last edited by vuthuyly; 06-22-2017 at 08:42 AM. Reason: love
    Trying to be cute about it at least!

  16. #16
    Senior Member+ defragster's Avatar
    Join Date
    Feb 2015
    Posts
    7,092
    Just killed three identical posts - saying how great @tni code was - while VERY TRUE - not related to the threads on which it was posted. Indeed a new type of SCAM.

    triemdeptrai
    Junior Member
    Join Date
    Jul 2017
    Posts
    3

    I like tni's program too, that's so amazing to learning c++.

  17. #17
    Administrator Robin's Avatar
    Join Date
    Oct 2012
    Location
    PJRC Global Headquarters
    Posts
    283
    I've been going through the forum user list this past week and have banned about 700 suspected spammer accounts. More bans are coming...

  18. #18
    Senior Member+ Frank B's Avatar
    Join Date
    Apr 2014
    Location
    Germany NRW
    Posts
    4,768
    wow, a lot of work to do this manually..

    a new one: https://forum.pjrc.com/members/49930-linda901

  19. #19
    Senior Member+ defragster's Avatar
    Join Date
    Feb 2015
    Posts
    7,092
    Quote Originally Posted by Frank B View Post
    wow, a lot of work to do this manually..
    Yes - but Robin is no mere MAN

    @Robin - keep up the good work.

  20. #20
    Senior Member+ defragster's Avatar
    Join Date
    Feb 2015
    Posts
    7,092
    Does a user get AUTO suspended from posting when they get a post blocked pending review - or is it the other way around - that a block is done after a post is flagged?

    I got blocked once 'for a short time' when I reposted part of a post that had Chinese characters in it after I translated it . . .

    This thread could be sticky perhaps so folks could see they can report posts. I just reported one with 3 views - a bit later similar post came back - seemed like the same user.

    Today, 10:21 PM
    selenajames started a thread 1^^844^^^200^^^3985 Kaspersky Antivirus Phone Number #NATIONALOHIODAY #NATIONALDEV in General Discussion
    Kaspersky @@$%1^^844^^^200^^^3985^^$% Kaspersky internet security 2016 @@$%1^^844^^^200^^^3985^^$% @ Kaspersky antivirus for mac #NATIONALMENMAKEDINNERDAY #NATIONALOHIODAY #NATIONALDEVILEDEGG DAY...
    see more
    YUP _ same poster just posted same content again:
    Today, 10:48 PM
    selenajames started a thread 1^^844^^^200^^^3985 Kaspersky Antivirus Phone Number #NATIONALOHIODAY #NATIONALDEVI in General Discussion
    Kaspersky @@$%1^^844^^^200^^^3985^^$% Kaspersky internet security 2016 @@$%1^^844^^^200^^^3985^^$% @ Kaspersky antivirus for mac #NATIONALMENMAKEDINNERDAY #NATIONALOHIODAY #NATIONALDEVILEDEGG DAY...
    see more
    <edit>: And a THIRD - plus a second user with 2 similar posts just flagged:
    Today, 11:02 PM
    selenajames started a thread 1^^844^^^200^^^3985 Kaspersky Antivirus Phone Number #NATIONALOHIODAY #NATIONALDEVI in General Discussion
    Kaspersky @@$%1^^844^^^200^^^3985^^$% Kaspersky internet security 2016 @@$%1^^844^^^200^^^3985^^$% @ Kaspersky antivirus for mac #NATIONALMENMAKEDINNERDAY #NATIONALOHIODAY #NATIONALDEVILEDEGG DAY...
    see more
    Last edited by defragster; 11-02-2017 at 07:21 AM.

  21. #21
    Senior Member+ Theremingenieur's Avatar
    Join Date
    Feb 2014
    Location
    Colmar, France
    Posts
    2,068
    I've reported about 10 of these, too, this morning. (UTC+1 here)

    I wonder why this continues. Normally, the user account should be blocked after a posting has been reported until an administrator has reviewed the case and taken a decision.

    Oh shit, there it comes again... user selenajames is annoying...

  22. #22
    Senior Member+ Theremingenieur's Avatar
    Join Date
    Feb 2014
    Location
    Colmar, France
    Posts
    2,068
    Could one of the admins please block definitively user "selenajames" ? Thank you!

  23. #23
    Senior Member
    Join Date
    Dec 2016
    Location
    Montreal, Canada
    Posts
    2,804
    all these spammers and bans are preventing coding opportunities!

  24. #24
    Administrator Robin's Avatar
    Join Date
    Oct 2012
    Location
    PJRC Global Headquarters
    Posts
    283
    Quote Originally Posted by Theremingenieur View Post
    Could one of the admins please block definitively user "selenajames" ? Thank you!
    Done. I cleaned up the spam and banned the accounts.

  25. #25
    Senior Member+ Theremingenieur's Avatar
    Join Date
    Feb 2014
    Location
    Colmar, France
    Posts
    2,068
    Thank you, Robin! What about the idea that a user account goes automatically in read-only mode (thus unable to continue spamming) after a spam has been reported, until you decide about final measures?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •