ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

Wesley Crusher · 14 June 2014, 01:47 AM

Hi guys,

I've noticed some spambots on TRF that I'd like to point out. Here are a few recent examples:

http://www.rolexforums.com/member.php?u=124720
http://www.rolexforums.com/member.php?u=125159
http://www.rolexforums.com/member.php?u=124769
http://www.rolexforums.com/member.php?u=125302

One thing that I noticed is that every spambot sets its location as "mr." Another thing is that they will only make 8 posts. I have a feeling that all these spambots are coming from the same place. Can somebody do an IP check to confirm this? Do you guys have the ability to search for members by their location? If so, search for "mr" and you should find some spambots. If they are sharing an IP address, can you ban it so spambots will (temporarily, at least) be unable to join?

Thanks guys,
Wes

Welshwatchman · 14 June 2014, 01:59 AM

Thanks.

All gone and we'll add these sites to our "blocked site" list.

MonBK · 14 June 2014, 02:00 AM

Good detective work Wes.

powerfunk · 14 June 2014, 02:02 AM

I've noticed an increasing amount of spam bots around here too; I usually PM a mod that's online. Now that Tor exists, I imagine banning IP's is pretty much a futile exercise.

I've seen a lot of bots that insert an externally-hosted 1-pixel invisible image. I assume that the end game is to later replace that 1-pixel image with a Viagra-ad image on their server or something. Stupid spammers!

Wesley Crusher · 14 June 2014, 02:09 AM

Quote:

Originally Posted by Welshwatchman

Thanks.

All gone and we'll add these sites to our "blocked site" list.

Thank you!

Quote:

Originally Posted by MonBK

Good detective work Wes.

I'm just doing my part to keep TRF a great place.

Wesley Crusher · 14 June 2014, 02:09 AM

Quote:

Originally Posted by powerfunk

I've seen a lot of bots that insert an externally-hosted 1-pixel invisible image. I assume that the end game is to later replace that 1-pixel image with a Viagra-ad image on their server or something. Stupid spammers!

Ha, that's clever.

Gaijin · 14 June 2014, 02:29 AM

Nice job Wes!

TAKUYA · 14 June 2014, 02:34 AM

Great Wes!!!

Welshwatchman · 14 June 2014, 02:51 AM

Quote:

Originally Posted by powerfunk

I've noticed an increasing amount of spam bots around here too; I usually PM a mod that's online. Now that Tor exists, I imagine banning IP's is pretty much a futile exercise.

I've seen a lot of bots that insert an externally-hosted 1-pixel invisible image. I assume that the end game is to later replace that 1-pixel image with a Viagra-ad image on their server or something. Stupid spammers!

What we do is convert the website URL to ********, thus deadening the link.

powerfunk · 14 June 2014, 03:29 AM

Quote:

Originally Posted by Welshwatchman

What we do is convert the website URL to ********, thus deadening the link.

Ah, nice.

Wesley Crusher · 21 January 2015, 04:13 PM

A few more spambots. Please ban!

http://www.rolexforums.com/member.php?u=136623
http://www.rolexforums.com/member.php?u=136585
http://www.rolexforums.com/member.php?u=136328
http://www.rolexforums.com/member.php?u=136188

All posts contain a gif with http://**********.com as the source. Please block the URL, too.

14 June 2014, 01:47 AM	#1
Wesley Crusher "TRF" Member Join Date: Aug 2013 Real Name: Wes Location: Holosuite Posts: 6,345	Attn: Mods/Admin - Spambot Alert Hi guys, I've noticed some spambots on TRF that I'd like to point out. Here are a few recent examples: http://www.rolexforums.com/member.php?u=124720 http://www.rolexforums.com/member.php?u=125159 http://www.rolexforums.com/member.php?u=124769 http://www.rolexforums.com/member.php?u=125302 One thing that I noticed is that every spambot sets its location as "mr." Another thing is that they will only make 8 posts. I have a feeling that all these spambots are coming from the same place. Can somebody do an IP check to confirm this? Do you guys have the ability to search for members by their location? If so, search for "mr" and you should find some spambots. If they are sharing an IP address, can you ban it so spambots will (temporarily, at least) be unable to join? Thanks guys, Wes

14 June 2014, 02:34 AM	#8
TAKUYA ⭐⭐⭐⭐2024 DATE-JUST41 sponsor & Boutique Seller Join Date: Apr 2011 Real Name: Thanh Takuya Location: Dont mess w Texas Watch: AP/Rolex/PP Posts: 50,146	Great Wes!!! __________________ 2 Factor Authentication Security Active Instagram @takuyawatches

14 June 2014, 01:59 AM	#2
Welshwatchman "TRF" Member Join Date: Apr 2006 Real Name: Paul Location: Wales, UK Posts: 14,578	Thanks. All gone and we'll add these sites to our "blocked site" list.

14 June 2014, 02:00 AM	#3
MonBK Banned Join Date: Nov 2010 Location: Kingstown Posts: 58,281	Good detective work Wes.

14 June 2014, 02:02 AM	#4
powerfunk "TRF" Member Join Date: Jul 2011 Real Name: Rob Location: Boston, MA Watch: 1530 Posts: 3,786	I've noticed an increasing amount of spam bots around here too; I usually PM a mod that's online. Now that Tor exists, I imagine banning IP's is pretty much a futile exercise. I've seen a lot of bots that insert an externally-hosted 1-pixel invisible image. I assume that the end game is to later replace that 1-pixel image with a Viagra-ad image on their server or something. Stupid spammers!

14 June 2014, 02:29 AM	#7
Gaijin 2024 ROLEX DATEJUST41 Pledge Member Join Date: Feb 2007 Location: Japan Watch: ing your back. Posts: 16,179	Nice job Wes!

21 January 2015, 04:13 PM	#11
Wesley Crusher "TRF" Member Join Date: Aug 2013 Real Name: Wes Location: Holosuite Posts: 6,345	A few more spambots. Please ban! http://www.rolexforums.com/member.php?u=136623 http://www.rolexforums.com/member.php?u=136585 http://www.rolexforums.com/member.php?u=136328 http://www.rolexforums.com/member.php?u=136188 All posts contain a gif with http://**********.com as the source. Please block the URL, too.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)