Removal of Spam threads.

Originally Posted by ReaperX7 To be honest it looks like bots.

The one called "shescrazy8" replied to a thread in Introductions by mashing the keyboard. The post said "Asfagadzsgbag". The timestamp on its spam post is two minutes after that post. That doesn't look like a bot to me.

Looks like I found a common denominator: all the spammers use Windows 10. No, I'm not joking.

Also, Korean text seems to be pretty common. Maybe setting a filter for that would help. Usernames also sometimes follow a "666" theme. delelonagatha999, Victorprincess66@mail.co...

thanks, i hope you guys keep us informed how to eradicate the problem once its fixed; i work in systems engineering so i am naturally curious.

is anyone able to translate any of the posts... maybe it will clue us into something ?

Originally Posted by schneidz thanks, i hope you guys keep us informed how to eradicate the problem once its fixed; i work in systems engineering so i am naturally curious. is anyone able to translate any of the posts... maybe it will clue us into something ?

Already tried that, looks like Korean lipsum.

EDIT: Alright, shescrazy8 is using Windows 7, not 10. Still, looks like the Korean crap is coming from 10 users.

ANOTHER EDIT: shescrazy8 linked to a domain, and a whois search says that it points to somewhere in Seol.

YET ANOTHER EDIT: Interesting:
https://translate.google.com/#auto/e...9D%B4%ED%84%B0

YES ALREADY, ANOTHER EDIT: Attached the whois report. Maybe the admins can nab em on that?

One thing I might suggest for the future is using something like Google Translate's API (or an equivalent, since I know there are users here who won't want all their posts being sent to Google) and sending all posts that get detected as being in a language other than English into a moderation queue.

EDIT: I just saw a spam account whose post count (under its username) reads 183. :/

Usually in the past on other forums a controller will post a garbage post or reply to test for a post-flood safety check, and the tune their bots accordingly.

Just do what you can Tobi. Until the offending posts can be moved out, only Sticky topics are going to be more easily accessed.

Just realized the link to Google Translate didn't include the text, so I'm attaching a screenshot.

FWIW, and that's probably very little:

• there is a 'bam' 'war' theme to a lot of the thread titles
• there is a 'saga798' theme to a lot of the thread titles
• there is a 'UDAISO 03 . CoM' theme to a few of the thread titles
• some of the usernames seem to have created ~30 new threads in their first few hours of posting; is there a way of limiting that, at least until they have posted one or two 'worthwhile' posts?

Tobi, I want to thank you for what you have being doing and to express my sympathy for your current plight (and the last thing that I want to do is to distract you from this task, so maybe I owe you an apology for even posting this). I do wonder what the actor(s) behind this kind of attack get from this? It must take them some time and effort to prepare this attack, mustn't it?

Could be just random attacks. Could be deliberate attack from someone butthurt. Who knows. It's really pointless to say why. It just is what it is.

I wouldn't rule out this site is compromised.

Originally Posted by Emerson I wouldn't rule out this site is compromised.

I agree and have logged out until it's straightened up.
See also http://www.linuxquestions.org/questi...hp?issueid=205

Looks like it stopped, at least for a while.

Good work Tobi.

Was not caused by me, also, they are back. Looks to me that they just gave me a break to go for a walk with the dog

We're aware of the situation and are working to clean it up and prevent future occurrence. Thanks for the patience.

--jeremy