#1 2008-01-16 7:45 am

Captain Red

Member

Registered: 2008-01-04

Posts: 59

Did anybody else get unusually hammered today?

Today (January 15) I got hit with seven different spam posts from seven different sources.(this comes after a few days where I had one or none)  Is it just me, or were the spammers out in force today?

Mousetyme

Member

Registered: 2008-01-06

Posts: 14

Website

Re: Did anybody else get unusually hammered today?

I got hammered also. I also noticed that I am getting a lot of MySQL errors that too many people are on the site. Even when it is just me on the board.

----------------------
Error:
mySQL query error: SELECT id, member_id, running_time, location FROM ibf_sessions WHERE id='3d2cef21f2eeccdcb1c2e8736d7242ca' and ip_address= 'it gave my IP addres' AND browser=''

mySQL error: Too many connections
mySQL error code: 1040
Date: Wednesday 16th of January 2008 09:37:52 AM
-----------------------

I have read that it is possible that these BOTS are over loading my message board and they are trying to index it. I have blocked freely registering and posting.

Does anyone know if they are able to get any informationg from my members - ie: IP numbers & email addresses -, by indexing from the page they have to register from?

lv2jm

Member

From: Northern Ontario

Registered: 2007-11-30

Posts: 6

Re: Did anybody else get unusually hammered today?

The last few days my little forum get's hit about 15 to 25 times a day by one single source  (I believe) ip's are all proxies....
Different user names and different giberrish represented by the *s but I believe same source  ********@amnevsepoh.info
Thanks to Antispam ACP...none get through but I get email reports on every one of them.
A quick search of that domain reveals a porn site......
                                                 Andre

lv2jm

Member

From: Northern Ontario

Registered: 2007-11-30

Posts: 6

Re: Did anybody else get unusually hammered today?

Here is a sample of the automaticaly generated messages That Anti Spam ACP emails me when a bot tries to log in, filling in certain fields only bots can see........

A user just attempted an illegal operation with their profile(while they were registering) on your board named ************  **********  *******.
Username: Bald Pussy zmaOVVdM
Password:
Email: zWwIwsMxyjh@amnevsepoh.info
IP Address: =(Useless....they are all proxies)
IP:LookUp:
http://whois.domaintools.com/
http://www.nwtools.com/default.asp?prog=express&host=
The user set off the following triggers(the fields he attempted to insert illegally)
:ICQ Number: 220860691
Website: [[url]http://pussy-[Censored because I cant articulate my thoughts].us/p0.html[/url]]
Signature: Nijzax iwcdveqnrl!..

Brackets on porn site so nobody clicks by accident

I just love that mod on phpBB forums

Last edited by lv2jm (2008-01-17 12:48 am)

fspamlist

Member

Registered: 2008-01-06

Posts: 33

Re: Did anybody else get unusually hammered today?

I have noticed a lot of spammers hitting my honey pot forum recently (within the last few days).. so yeah..

wonder how these waves get so big all of the sudden.

forrie

Member

Registered: 2007-12-22

Posts: 15

Re: Did anybody else get unusually hammered today?

thank god it was not just my site that got taken down ( server extermily overloaded )

Captain Red

Member

Registered: 2008-01-04

Posts: 59

Re: Did anybody else get unusually hammered today?

On a selfish note, it is some comfort to know that it isn't just that my efforts have failed all at once... and on another selfish note, I'm glad to know that I'm not the only one whose thoughts tended this way. :¬)

wonder how these waves get so big all of the sudden.

I wonder about that too.  It's like a tsunami: you know there was an earthquake somewhere, but you only see the water.

johnnaasdotcom

Member

Registered: 2007-12-22

Posts: 6

Re: Did anybody else get unusually hammered today?

I had so many that day I didn't have time to register them all. I had a bunch yesterday too. I now have textual confirmation enabled and its working great! But now I cant contribute as often.

Captain Red

Member

Registered: 2008-01-04

Posts: 59

Re: Did anybody else get unusually hammered today?

I would say that I had another slam day today, but all five hits came from the same IP: 75.125.0.130

Adding info now.

[edit]the five hits came from three different usernames, all three associated with email accounts from 12-gogogo.com.  The usernames follow a pattern... but I don't have enough data to break it satisfactorily.(right now it looks like "(commonname)_(series of four letters, numbers, or mixed)")[/edit]

Last edited by Captain Red (2008-01-22 12:42 am)