You are not logged in.
- Topics: Active | Unanswered
Pages: 1
#1 2010-03-11 6:05 pm
- Geek
- Member
- From: BC, Canada
- Registered: 2010-01-07
- Posts: 102
Botnet Stats?
Hi folks,
A few years back I heard on the TV news that botnet masters were adding 10,000 new IP's *per day* to their botnets.
Is there any updated figures on this or is it about the same?
Just curious because I'm coming up to my 1,000,000th IP in the banlist (should there be a party? 
) at one forum I admin (the one I have no access to other than the forum admin panel) and registrations have not slowed one iota from when I accepted the postion and the banlist was empty.
Cheers!
Offline
#2 2010-03-12 9:49 am
- EOC_Jason
- Member
- Registered: 2010-01-28
- Posts: 50
Re: Botnet Stats?
I find that adding a single IP in a forum ban list is somewhat pointless for a one-time spammer since 90% of the time it's a dynamic IP and will probably change in a day or two.
If it's not a static IP (or can't resolve) I usually do a search to see if other spam registrations have occurred from the same IP over time. If nothing hits then I expand the search to only three octects (i.e. 125.192.125. ) and see what all matches. If all those end up being spammers then I just block the subnet.
But honestly, since implementing SFS and some other anti-bot registration features on my forum several months ago, I've had zero need to add an IP to my forum's ban list.
Offline
#3 2010-03-12 11:17 am
- pedigree
- uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı
- From: Londonderry
- Registered: 2008-04-16
- Posts: 4,445
Re: Botnet Stats?
10,000 stupid people are born every day it would seem
Offline
#4 2010-03-12 4:03 pm
- Geek
- Member
- From: BC, Canada
- Registered: 2010-01-07
- Posts: 102
Re: Botnet Stats?
10,000 stupid people are born every day it would seem
Agreed!!!!
Offline
#5 2010-03-12 4:12 pm
- Geek
- Member
- From: BC, Canada
- Registered: 2010-01-07
- Posts: 102
Re: Botnet Stats?
I find that adding a single IP in a forum ban list is somewhat pointless for a one-time spammer since 90% of the time it's a dynamic IP and will probably change in a day or two.
If it's not a static IP (or can't resolve) I usually do a search to see if other spam registrations have occurred from the same IP over time. If nothing hits then I expand the search to only three octects (i.e. 125.192.125. ) and see what all matches. If all those end up being spammers then I just block the subnet.
That's part of what I've been doing, especially with networks crawling with infection *cough*Ukraine*cough*
But honestly, since implementing SFS and some other anti-bot registration features on my forum several months ago, I've had zero need to add an IP to my forum's ban list.
The biggest offenders are the "overnighters" when I'm in bed and their emails and usernames are not on any lists (one night I couldn't sleep, even the IP's were all new... must have added 30 virgin IP's, emails and usernames that night), so the API would be useless on my worst offenders :-\
Cheers!
Offline
Pages: 1