Spam analysis

The place for discussions and decisions about the forum

Spam analysis

Postby Jan_J » Fri Sep 13, 2013 1:34 am

Hello,

last month in Polish forum we note abnormal number of spambot registrations.
Great part of them uses single e-mail portal and typical generated user names.
Do we have any tool to collect user names/addresses according to regexp pattern, and who can use it?
JJ ∙ http://forum.openoffice.org/pl/
LO (6.1|6.0) ∙ AOO 4.1.5 ∙ Python (3.7|2.7) ∙ Unicode 11 ∙ LᴬTeX 2ε ∙ XML ∙ Unix tools ∙ Linux (2.6|3.x) ∙ Fedora ∙ CentOS ∙ SUSE
Jan_J
 
Posts: 142
Joined: Wed Apr 29, 2009 1:42 pm
Location: Poland

Re: Spam analysis

Postby Hagar Delest » Fri Sep 13, 2013 11:44 am

No tools that I know.
On the English forum, we had this kind of attack in the past but much less now. So the regexp is seldom used.
Moderators should be able to use them in the ban interface.
AOO 4.1.6 on Xubuntu 18.10 and 4.1.5 on Windows 7 (with winPenPack port).
User avatar
Hagar Delest
Moderator
 
Posts: 28383
Joined: Sun Oct 07, 2007 9:07 pm
Location: France

Re: Spam analysis

Postby RGB » Fri Sep 13, 2013 1:26 pm

On the ES forum we had the problem of rising number of spammers too. For a time we banned those disposable email servers as soon as they were used and after a while (only seven or so servers) the spammers almost disappeared. But then, after months of peace, this year they started to use an infinite source of accounts on a hight profile free email provider (perhaps they hacked the registration process there?)... and you cannot ban that kind of servers.

Once they start, the only way to stop them is to show that their "work" is useless: on the ES forum we enabled the first message moderation like here on EN forum and the problem was solved: When the spammers noticed that their messages never arrived to the public forum they almost disappeared again... at least for now...
There are two types of people: those who believe that there are two types of people and those who do not.

openSUSE Leap with KDE Plasma / LibO
User avatar
RGB
 
Posts: 1453
Joined: Mon Oct 08, 2007 1:34 am

Re: Spam analysis

Postby RoryOF » Fri Sep 13, 2013 1:30 pm

On Wednesday/Thursday morning mainly there is often a flood of kitchen cabinet emails, mostly originating from a server in Thailand. I banned the IP number, but I wouldn't be surprised if it resumed on another number on the same subnet. I ban them, delete their email which is undoubtedly spam, tag them with a descriptive word or two, and Hagar moves then to the banned list.
Apache OpenOffice 4.1.6 on Xubuntu 18.04.2 (mostly 64 bit version) and very infrequently on Win2K/XP
User avatar
RoryOF
Moderator
 
Posts: 28394
Joined: Sat Jan 31, 2009 9:30 pm
Location: Ireland

Re: Spam analysis

Postby Jan_J » Fri Sep 13, 2013 5:06 pm

Thanks,
moderators can apply some wildcards to emails or IPs, but that's not exactly what could be done using regexp. I expected that some migthy persons could ask database in the style like "select username, useremail from users where username similar to '[a-z]+[0-9]+' " for easy and precise preparation of the ban lists.
JJ ∙ http://forum.openoffice.org/pl/
LO (6.1|6.0) ∙ AOO 4.1.5 ∙ Python (3.7|2.7) ∙ Unicode 11 ∙ LᴬTeX 2ε ∙ XML ∙ Unix tools ∙ Linux (2.6|3.x) ∙ Fedora ∙ CentOS ∙ SUSE
Jan_J
 
Posts: 142
Joined: Wed Apr 29, 2009 1:42 pm
Location: Poland

Re: Spam analysis

Postby RoryOF » Fri Sep 13, 2013 5:37 pm

Our banning is done usually on a case by case basis as postings arrive.
Apache OpenOffice 4.1.6 on Xubuntu 18.04.2 (mostly 64 bit version) and very infrequently on Win2K/XP
User avatar
RoryOF
Moderator
 
Posts: 28394
Joined: Sat Jan 31, 2009 9:30 pm
Location: Ireland


Return to Forum Governance

Who is online

Users browsing this forum: No registered users and 0 guests