Author Topic: Forum Spam Attack  (Read 27213 times)

0 Members and 1 Guest are viewing this topic.

sillytuna

  • Eufloria lacky
  • Administrator
  • Arboreal Being
  • *****
  • Thank You
  • -Given: 62
  • -Receive: 102
  • Posts: 462
    • TunaHQ
  • Eufloria: Yes
Forum Spam Attack
« on: January 08, 2014, 09:18:27 PM »
I've just returned to work to find we've been attacked by the spam bots. I've cleaned up the user accounts and the boards, as well as upgrading the forum security.

We've been deep in development so we've been rather quiet, but this year we plan to be rather more active again :)

Pilchard123

  • Tester
  • Old Oak
  • ****
  • Thank You
  • -Given: 4
  • -Receive: 25
  • Posts: 933
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #1 on: January 09, 2014, 02:09:02 AM »
Yea, they've been around for a while now. Bonobo and I have been beating them back, but it's a bit demoralising to find them here again each couple of days.

sillytuna

  • Eufloria lacky
  • Administrator
  • Arboreal Being
  • *****
  • Thank You
  • -Given: 62
  • -Receive: 102
  • Posts: 462
    • TunaHQ
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #2 on: January 09, 2014, 03:17:11 AM »
Thanks guys. Let's see how the next couple of days goes.

Lost Seedling

  • Shrub
  • ***
  • Thank You
  • -Given: 22
  • -Receive: 32
  • Posts: 205
Re: Forum Spam Attack
« Reply #3 on: January 10, 2014, 06:00:53 PM »
Thank you, thank you, thank you, thank you all! That was extremely irritating!

sillytuna

  • Eufloria lacky
  • Administrator
  • Arboreal Being
  • *****
  • Thank You
  • -Given: 62
  • -Receive: 102
  • Posts: 462
    • TunaHQ
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #4 on: January 10, 2014, 07:22:10 PM »
I tweaked the registration process as even the human questions were being defeated. Seems to have done the job.

sillytuna

  • Eufloria lacky
  • Administrator
  • Arboreal Being
  • *****
  • Thank You
  • -Given: 62
  • -Receive: 102
  • Posts: 462
    • TunaHQ
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #5 on: January 14, 2014, 01:44:52 AM »
Thank you, thank you, thank you, thank you all! That was extremely irritating!

And thanks guys for fighting it. Be sure to ping me in future - you shouldn't have had to do that, I just didn't realise it was happening as I was away :)

Ultra_Gizmo_64

  • UG64
  • Seed
  • *
  • Thank You
  • -Given: 1
  • -Receive: 0
  • Posts: 7
    • Youtube
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #6 on: January 24, 2014, 01:57:45 PM »
Good to know it's been cleaned up now.

sillytuna

  • Eufloria lacky
  • Administrator
  • Arboreal Being
  • *****
  • Thank You
  • -Given: 62
  • -Receive: 102
  • Posts: 462
    • TunaHQ
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #7 on: November 13, 2014, 07:38:01 PM »
Just patched again and removed 2 spam users.

Bonobo

  • Achiever
  • Old Oak
  • ****
  • Thank You
  • -Given: 155
  • -Receive: 13
  • Posts: 674
  • Was born, still alive.
    • Bonobo dot com
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #8 on: November 14, 2014, 07:44:49 AM »
Thank you!

There seem to be some, though, that don’t have any links in their posts but their posts don’t seem to be related to the topic, see this for example. My fingers get nervous when I see these …

Greetings, Tom

sillytuna

  • Eufloria lacky
  • Administrator
  • Arboreal Being
  • *****
  • Thank You
  • -Given: 62
  • -Receive: 102
  • Posts: 462
    • TunaHQ
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #9 on: November 14, 2014, 07:20:08 PM »
Missed that. Fixing :)

I updated the forum as well since it looks like it may be through some kind of hack. The forum software had an update a few weeks ago. All these posts are from users posting twice.

sillytuna

  • Eufloria lacky
  • Administrator
  • Arboreal Being
  • *****
  • Thank You
  • -Given: 62
  • -Receive: 102
  • Posts: 462
    • TunaHQ
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #10 on: February 23, 2015, 04:39:27 AM »
Re-enabled registrations and added an admin moderation requirement on new users posting/replying. I'm not sure what the problem is but something within our SMF install is allowing bots in too easily.

We have quite a few projects in development at the moment so we'd like to keep the forum sane ready for their launch.

Aino

  • Ent
  • ******
  • Thank You
  • -Given: 5
  • -Receive: 30
  • Posts: 1,528
  • They'll eat you next!
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #11 on: February 23, 2015, 07:31:56 AM »
I'm wondering why they want to attack this peaceful forum with bots though, have you guys made any enemies along the way? :o

sillytuna

  • Eufloria lacky
  • Administrator
  • Arboreal Being
  • *****
  • Thank You
  • -Given: 62
  • -Receive: 102
  • Posts: 462
    • TunaHQ
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #12 on: February 23, 2015, 06:46:31 PM »
Heh it's still happening even though I set all new users making topics/posts to be manually approved so there is a hole in SMF or one of its plug-ins. I'm going to start disabling plug-ins until it stops.

Bonobo

  • Achiever
  • Old Oak
  • ****
  • Thank You
  • -Given: 155
  • -Receive: 13
  • Posts: 674
  • Was born, still alive.
    • Bonobo dot com
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #13 on: February 23, 2015, 07:28:42 PM »
Thanks, hope it helps. Yesterday I removed two of these spammers and their (long) posts.

sillytuna

  • Eufloria lacky
  • Administrator
  • Arboreal Being
  • *****
  • Thank You
  • -Given: 62
  • -Receive: 102
  • Posts: 462
    • TunaHQ
  • Eufloria: Yes
Re: Forum Spam Attack
« Reply #14 on: February 23, 2015, 07:46:41 PM »
Thanks, hope it helps. Yesterday I removed two of these spammers and their (long) posts.

It's really annoying. It may be a directory permissions issue, maybe the media plug-in, who knows. SMF is up to date and they can bypass everything I've tried.