Attention All Users Of All Net Tools

[Moonbat]

We are getting a rather large wave of spam. It's been like this since early April. I have contacted D.Parker about the issue, mainly because many of these usernames are coming from the same IPs. There are usually 2-3 usernames with each IP address, then a new one is used.

I am getting the feeling these spammers are controlled by a botnet. The symptoms seem to fit:

1. The same message(s) regardless of IP
   
2. We are being (as far as I know) specifically targeted, probably due to our popularity on search engines. I believe this because unlike most spam, which is "hit and run" usually 1-2 messages, we've been getting hit for over a month now.
   
3. The names seem to be generated from a program that uses keywords related to the topic. For example, the IP 59.173.113.47 has 3 accounts, tibiaking2008, tibiakings, and tibiagamegold. It seems like a program just generated usernames and registered the ones that worked
   
4. The IPs seem to be coming from similar ranges. For example, the users Lifetibia and lifetibiarlz have IPs 201.36.107.115 and 201.36.104.159 respectively. From this I can assume that some sort of bot server.exe program was spread to users of a certain region, in this case Latin America, and most likely to users of the same ISP. Also, the IP I posted in point 3 (59.173.113.47) is on the same IP range as another spammer who registered two accounts under the IP 59.174.65.155. Both come from the Asia Pacific region, and probably the same ISP.

I believe this is a botnet. So how do we stop it? First of all, I need to highlight a point:

We are not getting anywhere banning usernames

Multiple usernames under the same IP, using many IPs. If all we have in our arsenal is banning usernames, we will never stop this spam. We will stop the problem for a day, maybe two at the most. But it will not go away. It hasn't gone away since it started in early April, and I doubt it will go away now.

We have a few options.

1. We can get more moderators to continue banning usernames
2. The active moderators can get temporary admin powers to ban IPs or IP ranges
3. The existing admins can become more active and ban IPs
4. The existing admins can ban entire IP ranges

I have two nominations for moderators. JayT and gordo. JayT joined around August 2007 and has posted many informative posts in the Programming section, and seems to have enough maturity to be a mod. gordo has been around since April 2007 and has helped people a lot, and has a lot of patience. He is also mature enough in my eyes to be a mod. If the other mods/admins agree, I'd support JayT and gordo becoming moderators. If we can't ban IPs, the least we could do is get more mods to ban usernames

The second option is to endow the mods with temporary admin powers so we can ban IPs. This option is here because many of the people with admin powers aren't very active, and I can understand that. So this would make life easier if we could ban IPs. I know some admins will look at this and think that I just want admin status just to have power, but that isn't the case. Notice I said 'temporary'. I just want to stop this problem of spam. I would gladly give up admin status after the problem goes away. This option would be good, not sure how effective it will be, but I can guarantee that the spam will decrease a lot more if we can ban IPs.

The third option is for the admins to become more active and ban IPs. I doubt this strategy will work because I'm sure that the admins are preoccupied with real life work/other and cannot be as active. I am not trying to bad-mouth or disrespect any admins due to their lack of activity; I just want to be realistic. We can't depend on admins such as Elias or Admin who haven't logged on since 2004 to help us stop this spam problem. D.Parker is the most active out of the admins, and even he can't always login every day.

If by chance we decide to take the third option and the admins become more active, we have another option in addition to IP banning. We can ban whole IP ranges. I personally don't think this is a good idea because you'll be cutting off access to many legitimate users, but if the problem gets worse we'll have no choice but to block entire ranges.

So the point of this thread is to do two things:
a) Decide whether or not this is a botnet
b)Pick one of the options from above

My choice is a mixture of 1 and 3. I want JayT and gordo to become mods. We mods will ban usernames and assemble lists of IPs who are spammers. Once a week or so, the admins will login and we will give them the lists. They will ban the IPs. We will continue as such.

I'm sure the admins can take one day out of the week to log in to ban a list of IPs that we mods will make. This seems like a practical idea.

Anyway, discuss.

[Moonbat]

As an update, we are getting hit with a wave of pedophile spam, and other sexual spam that seems to be targeting stickied threads and threads with good ratings on the search engines.

This thread was meant just for mods and admins, but since I haven't gotten any feedback yet about this issue from any of them, I have decided to make it public.

[gordo]

Thanks for your recommendation Moonbat. Although my computer skills are not much,I can be here every day for awhile and I will help if I can.

[nozf3r4tu]

Gordo has my vote,not only he will do a good job,but personally trust him as far as been fair with the rest of users.

[Ezekiel]

This site just needs a better CAPTCHA system; nothing more. Perhaps the webmaster could be convinced to upgrade the forum to a post-millennium version.

[Moonbat]

This site just needs a better CAPTCHA system; nothing more. Perhaps the webmaster could be convinced to upgrade the forum to a post-millennium version.

I thought writing an essay and using different colors would be better

But yeah, a better CAPTCHA would help. But it's only a matter of time before a program adapts to the new CAPTCHA.

We are pretty much at a standstill until the admins do something. I just brought this up to let people know that I personally am trying to anything I can to fix the situation.

[Ezekiel]

But yeah, a better CAPTCHA would help. But it's only a matter of time before a program adapts to the new CAPTCHA.

Not if we used something like the ridiculous one on Rapidshare where you have to enter only the letters with cats sitting on them.

This website's been pretty much static since 2004 though, so it's a bit unlikely.

[Moonbat]

Not if we used something like the ridiculous one on Rapidshare where you have to enter only the letters with cats sitting on them.

I remember when they first started using that, it was pretty funny, creative, and most of all, it worked. Even mangaed to keep some humans out, namely myself

I'm assuming you've seen the fake RapidShare CAPTCHA with Riemann's Hypothesis right? That was funny, but it got old after I saw it posted everywhere.

[sunnys7]

what ever you said is correct even Gordo has my vote, yes he being fair with all the users.
==========================================
phani

Put The Message Where It Matters! A New Way To Advertise On Social Networks!

http://www.widecircles.com

[frankiben123]

thanks....nice post.....

sales tracking software

[jonny0009]

make mee a moderatorrrrr. =} lol. jkjk. doesnt matter. xD

[minaadel1994]

I think Admins should give the Moderators the ip ban command , since this issue will lagg YOUR server and take database space needed for other important things (if you're using your database) , assigning more mods is good also to provide more order and make the forum a bit smoother.... because this isn't the only issue , virus posters are everywhere too :P since you're a popular site then you should consider this :-)

[Moonbat]

We've requested IP ban powers before, but the requests have never been answered. I think the only way to IP ban is to actually be an Administrator, and I don't think the other administrators want to give us the Administrator access.

[VirusFlyTrap]

Im not really good at this sort of stuff, but can't you get programs that stop spam for you? Probably not that effective though. I personally think captcha is a nuisance, but if it stops spam I can live with it.

[subhylut]

It hasn't gone away since it started in early April, and I doubt it will go away now.