Myspammers deletion offline for a couple of days

Alex Kemp · 2011-05-06 5:21 am

(I'll make this the last post, as otherwise it will get boring)

If you see duplicate posting from me, then I reckon it's coming from some other place than the Modem-Help server. I got the following just now:

# fgrep 'httpd: SFS: POST to ' /var/log/messages
May  2 08:01:36 <removed> httpd: SFS: POST to http://www.stopforumspam.com/post.php with POST-fields email=yulyabeloglaz%40gmail.com&ip_addr=178.46.122.224&username=SvetaSilaeva&api_key=<removed>
May  6 01:39:43 <removed> httpd: SFS: POST to http://www.stopforumspam.com/post.php with POST-fields email=nexusinstruments%40gmail.com&ip_addr=182.64.88.69&username=Manoj+Kumar&api_key=<removed>

znews · 2011-05-06 5:22 pm

Pedigree, per your request, here are my duplicate submissions:
5-May-11 11:04 AM 195.54.163.122 uttettelimaro seeneikelry@mail.ru Ukraine
3-May-11 05:34 PM 195.54.163.122 uttettelimaro seeneikelry@mail.ru Ukraine

18-Apr-11 11:56 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:56 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:56 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:56 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:56 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:56 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation
18-Apr-11 11:55 AM 91.212.226.133 Guesytetphapy SuenSoype@us.efast.in Russian Federation

pedigree · 2011-05-06 5:50 pm

Thanks, Ill trawl the logs when I get a moment

pedigree · 2011-05-06 11:40 pm

znews wrote:

Pedigree, per your request, here are my duplicate submissions:
5-May-11 11:04 AM 195.54.163.122 uttettelimaro seeneikelry@mail.ru Ukraine
3-May-11 05:34 PM 195.54.163.122 uttettelimaro seeneikelry@mail.ru Ukraine

These two were both added from Drupal.

ill have to see if I have the logs backups for the others.

znews · 2011-05-07 3:42 am

Thanks Pedigree, I added about 3 or 4 entries manually when I first signed up back in March. Everything else should have been added by the Drupal Spambot module. It's a small, private union site for 90 or so members so we don't get much riffraff. We don't have any ads at all on the site, so Adsense is not an issue for us.

Do you want me to delete one of the 2 duplicates?

pedigree · 2011-05-07 8:59 am

Dont worry about them, its handy to have a history of submissions.

pedigree · 2011-05-10 9:26 pm

Sorry all, this seems to have cropped up again and Im trying to figure out what is setting spammer totals to 0.

fcollingwood · 2011-05-11 3:40 am

terarmt wrote:

I'm not sure about that.

SPAMMER!

zaphod · 2011-05-11 3:49 am

BAGGED & TAGGED!

Zap

fcollingwood · 2011-05-11 3:53 am

zaphod wrote:

BAGGED & TAGGED!
Zap

Dunno what made the little bugger think he could get away with his crap here........

angie · 2011-05-11 7:03 am

I just noticed a few min ago that one of mine is submitted twice. Not an error on my part but submitted through my trap script while I was not home.

11-May-11 05:36 AM 109.227.218.38 ressscous gennickxoxxoxjoxxjo @gmail.com
11-May-11 05:33 AM 109.227.218.38 ressscous gennickxoxxoxjoxxjo @gmail.com

pedigree · 2011-05-11 8:11 am

angie wrote:

I just noticed a few min ago that one of mine is submitted twice. Not an error on my part but submitted through my trap script while I was not home.

Hmm, these were both added from the same IP number

angie · 2011-05-11 8:41 am

pedigree wrote:

angie wrote:
I just noticed a few min ago that one of mine is submitted twice. Not an error on my part but submitted through my trap script while I was not home.
Hmm, these were both added from the same IP number

Yeah I thought it was odd as well as it should have only submitted once. All the others went fine without duplications..

Wizzle · 2011-05-11 1:14 pm

That can happen if the dumb arse tries to register again with the same info. The trap will reject the attempt, but the info will still be submitted to SFS & BS. If you notice there's a 3 minute gap in attempts. So it's not actually "duplicate" submissions. (1 submission creating 2).

pedigree · 2011-05-12 8:09 am

Well, since taking the myspammers and admin deletion offline for two days, Ive not seen any errornous database cache corruption. This gives me something to look at. Sorry about the delay but I need to make sure I get this right

pedigree · 2011-05-12 4:47 pm

A quick update on this.

A debug test has been running on my test server for several hours, deleting random rows one at a time. So far, so good so I should shortly be able to put the removal code back up for the myspammers page.

Admin removal is still down as it uses slightly different code.

Once all the tests have completed, I should have the pages back up. Now if they complete without error, then I cant reproduce the error on the dev box... then things start gettnig difficult.

pedigree · 2011-05-13 7:14 pm

I hope to have some code changes rolled out over the weekend. Ive not been able to reproduce his in tests (doesnt my test server know about it) but Ive rewritten a lot of the deletion code, so fingers crossed.

angie · 2011-05-15 9:13 pm

Wizzle wrote:

That can happen if the dumb arse tries to register again with the same info. The trap will reject the attempt, but the info will still be submitted to SFS & BS. If you notice there's a 3 minute gap in attempts. So it's not actually "duplicate" submissions. (1 submission creating 2).

Ah okay thanks

#26 2011-05-06 5:21 am

Re: Myspammers deletion offline for a couple of days

#27 2011-05-06 5:22 pm

Re: Myspammers deletion offline for a couple of days

#28 2011-05-06 5:50 pm

Re: Myspammers deletion offline for a couple of days

#29 2011-05-06 11:40 pm

Re: Myspammers deletion offline for a couple of days

#30 2011-05-07 3:42 am

Re: Myspammers deletion offline for a couple of days

#31 2011-05-07 8:59 am

Re: Myspammers deletion offline for a couple of days

#32 2011-05-10 9:26 pm

Re: Myspammers deletion offline for a couple of days

#33 2011-05-11 3:40 am

Re: Myspammers deletion offline for a couple of days

#34 2011-05-11 3:49 am

Re: Myspammers deletion offline for a couple of days

#35 2011-05-11 3:53 am

Re: Myspammers deletion offline for a couple of days

#36 2011-05-11 7:03 am

Re: Myspammers deletion offline for a couple of days

#37 2011-05-11 8:11 am

Re: Myspammers deletion offline for a couple of days

#38 2011-05-11 8:41 am

Re: Myspammers deletion offline for a couple of days

#39 2011-05-11 1:14 pm

Re: Myspammers deletion offline for a couple of days

#40 2011-05-12 8:09 am

Re: Myspammers deletion offline for a couple of days

#41 2011-05-12 4:47 pm

Re: Myspammers deletion offline for a couple of days

#42 2011-05-13 7:14 pm

Re: Myspammers deletion offline for a couple of days

#43 2011-05-15 9:13 pm

Re: Myspammers deletion offline for a couple of days

Board footer