# Important - spam attack **URL:** \ **Category:** General Discussion\ **Created:** [July 13, 2015, 3:19pm UTC](https://community.cartalk.com/t/important-spam-attack/90593 "2015-07-13T15:19:47Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![cdaquila](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/cdaquila/32/18089_2.png) [@cdaquila](https://community.cartalk.com/u/cdaquila)\ **Post date:** [July 13, 2015, 3:19pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/1 "2015-07-13T15:19:47Z")
Good morning, everyone - I’m writing to let you know that we are aware of the spam attacks over the last couple of days. Last night, after I went to bed (believe it or not, it happens), we got hit most severely. I’m in the process of cleaning it up (all 33 pages or so). Our spam filters are usually sufficient to ward off incursions such as these. Please know we’re working on stopping it, so we can get back to our regularly scheduled programming. Thanks, Carolyn ---
**Author:** ![VDCdriver](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/vdcdriver/32/30_2.png) [@VDCdriver](https://community.cartalk.com/u/VDCdriver)\ **Post date:** [July 13, 2015, 3:46pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/2 "2015-07-13T15:46:26Z")
Thank you, Carolyn. As always, your efforts are appreciated. ---
**Author:** ![cdaquila](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/cdaquila/32/18089_2.png) [@cdaquila](https://community.cartalk.com/u/cdaquila)\ **Post date:** [July 13, 2015, 3:50pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/3 "2015-07-13T15:50:26Z")
I am doing this manually, so it’s going to take some time. I’m blocking by IP where possible, but I have to ban piece by piece. I am really careful about watching the site, and, plainly speaking, I feel terrible about it. Please bear with us and I’ll get it fixed as soon as I can. ---
**Author:** ![MikeInNH](https://avatars.discourse-cdn.com/v4/letter/m/a587f6/32.png) [@MikeInNH](https://community.cartalk.com/u/MikeInNH)\ **Post date:** [July 13, 2015, 3:58pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/4 "2015-07-13T15:58:50Z")
Blocking it MANUALLY may never work. If this is coming from more then one IP address then they have their own server farm (either real or virtual) and can create THOUSANDS of IP addresses. ---
**Author:** ![cdaquila](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/cdaquila/32/18089_2.png) [@cdaquila](https://community.cartalk.com/u/cdaquila)\ **Post date:** [July 13, 2015, 4:00pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/5 "2015-07-13T16:00:49Z")
Yes, I know. The deletion alone is very labor intensive. I’ve passed it on to both Vanilla and to the Car Talk brain trust to try to stem the flood. ---
**Author:** ![BillRussell](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/billrussell/32/3179_2.png) [@BillRussell](https://community.cartalk.com/u/BillRussell)\ **Post date:** [July 13, 2015, 5:01pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/6 "2015-07-13T17:01:14Z")
These appear to be entered manually, judging by the frequency and the variation in the message. That makes if much more difficult to block. You may have to block any post with Korean characters in it. I just noticed a post NOT from bamwar5, someone different, but still korean. So the word is getting around… b ---
**Author:** ![BillRussell](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/billrussell/32/3179_2.png) [@BillRussell](https://community.cartalk.com/u/BillRussell)\ **Post date:** [July 13, 2015, 5:02pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/7 "2015-07-13T17:02:53Z")
now down to 7 pages of spam, from 33 pages. ---
**Author:** ![the\_same\_mountainbike](https://avatars.discourse-cdn.com/v4/letter/t/c89c15/32.png) [@the\_same\_mountainbike](https://community.cartalk.com/u/the_same_mountainbike)\ **Post date:** [July 13, 2015, 5:06pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/8 "2015-07-13T17:06:58Z")
Please do NOT feel “terrible about it”. You did NOT do it! On he contrary, you’re the one who prevents it from happening more often and has to clean it up when is does happen. The little fat guy from N. Korea DID promise a cyber attack… I guess this is the best they can do… thank God! ---
**Author:** ![cdaquila](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/cdaquila/32/18089_2.png) [@cdaquila](https://community.cartalk.com/u/cdaquila)\ **Post date:** [July 13, 2015, 5:53pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/9 "2015-07-13T17:53:10Z")
OK, since you didn’t order Korean spam for breakfast, I’ll substitute donuts instead: ![](http://i.huffpost.com/gen/1177833/original.jpg) I’ll keep an eye on it and try to catch any new accounts that are created while we wait for some sort of higher-level fix. Thanks again for your patience, all. ---
**Author:** ![shadowfax](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/shadowfax/32/13026_2.png) [@shadowfax](https://community.cartalk.com/u/shadowfax)\ **Post date:** [July 13, 2015, 6:00pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/10 "2015-07-13T18:00:13Z")
> I feel terrible about it. Don’t. Spammers are very clever. They will find a way around just about any anti-spam measures you put in place. I have excellent spam filters on my private forum, yet one day at work one of my users emailed me and asked “what’s with all the horse porn?” They’d gotten through somehow and it took hours to clean up their mess. So… It could be considerably worse. 😉 I ended up making a newly registered user profile which all new signups are assigned to. They can only see one forum, called “spam trap.” They can post there to their hearts’ content, which fools spam bots into thinking they’ve accomplished their mission, except that normal users can’t see the spam trap forum at all. There’s a sticky announcement in the spam trap telling actual humans to PM an admin to get verified and be released to the real forum. Unfortunately, that scheme would probably be a bit labor intensive for you guys. My forum is small and new user signups are relatively rare. ---
**Author:** ![Barkydog](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/barkydog/32/2470_2.png) [@Barkydog](https://community.cartalk.com/u/Barkydog)\ **Post date:** [July 13, 2015, 6:09pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/11 "2015-07-13T18:09:37Z")
Drupal noted a similar attack. The robot? adapts, but they noted they were all gmail accounts. ---
**Author:** ![bing](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/bing/32/4619_2.png) [@bing](https://community.cartalk.com/u/bing)\ **Post date:** [July 13, 2015, 7:00pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/12 "2015-07-13T19:00:48Z")
Thanks for your effort. Man the 33 pages must have happened during sleep time. I like donuts too and love America and Americans. Just got back from the dentist though and he says knock off the donuts. ---
**Author:** ![missileman](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/missileman/32/1366_2.png) [@missileman](https://community.cartalk.com/u/missileman)\ **Post date:** [July 13, 2015, 7:39pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/13 "2015-07-13T19:39:27Z")
I hate SPAM…unless it’s the canned variety from Hormel. Thanks for the donuts…I just made the pic my screensaver. FYI…I had to shrink the pic to make it a screensaver. Anything over 1MB can affect your computer’s performance…even new computers with tons of memory. I have 8 GB of physical memory and the original pic (2MB) affected my computer until I used MS Paint to resize to 1MB. All is well now. ---
**Author:** ![BillRussell](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/billrussell/32/3179_2.png) [@BillRussell](https://community.cartalk.com/u/BillRussell)\ **Post date:** [July 13, 2015, 8:08pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/14 "2015-07-13T20:08:13Z")
I often wonder what these spammers hope to gain by this type of attack. The spam is in Korean, for a service in Korea, this is an English Language site, primary U.S. There is no connection. And, the spam repeated over 600 times with lots of variations. Even if there were someone here interested, why would they want to read the same thing 600 times? When I was on Yahoo Answers, we got mostly asian spam also, all in a foreign language, many hundreds every day. Over and over and over again… b ---
**Author:** ![texases](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/texases/32/862_2.png) [@texases](https://community.cartalk.com/u/texases)\ **Post date:** [July 13, 2015, 8:21pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/15 "2015-07-13T20:21:04Z")
I’m guessing these attacks are automated, so they just send it out to any place that they find. And once they find one, watch out! ---
**Author:** ![BillRussell](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/billrussell/32/3179_2.png) [@BillRussell](https://community.cartalk.com/u/BillRussell)\ **Post date:** [July 13, 2015, 8:37pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/16 "2015-07-13T20:37:10Z")
didn’t look automated to me, from the irregular timing, and the text changing on every post. I think they use cheap labor to do this manually. ---
**Author:** ![texases](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/texases/32/862_2.png) [@texases](https://community.cartalk.com/u/texases)\ **Post date:** [July 13, 2015, 9:41pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/17 "2015-07-13T21:41:21Z")
Oh, you’d be surprised at how ‘intelligent’ the automated spammers are these days. I bet there’s software out there to modify posts to prevent simple corrective actions, just as happened here. ---
**Author:** ![shadowfax](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/shadowfax/32/13026_2.png) [@shadowfax](https://community.cartalk.com/u/shadowfax)\ **Post date:** [July 13, 2015, 10:04pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/18 "2015-07-13T22:04:22Z")
Its almost all automated. Otherwise my spamtrap trick would not work, as a human would see through it right away. Bots are still dumb, fortunately. For now… ---
**Author:** ![cdaquila](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/cdaquila/32/18089_2.png) [@cdaquila](https://community.cartalk.com/u/cdaquila)\ **Post date:** [July 13, 2015, 10:11pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/19 "2015-07-13T22:11:28Z")
I noticed that each new account created three threads each, and for each new IP address three accounts were created. Then whatever bot came up with a new IP and kept creating new accounts. Now it looks like the bot went to sleep, but I don’t want to jinx it. 😉 ---
**Author:** ![shadowfax](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/shadowfax/32/13026_2.png) [@shadowfax](https://community.cartalk.com/u/shadowfax)\ **Post date:** [July 13, 2015, 10:14pm UTC](https://community.cartalk.com/t/important-spam-attack/90593/20 "2015-07-13T22:14:37Z")
The really stupid thing about such bot schemes is that the _only_ thing they do is irritate people. No one is going to look at the spam here and say “Gee, I think I’ll spend money there now that it’s made my favorite forum unreadable.” If the spammers were smart they’d work advertisements in subtly, like a hint of Borden’s cream in a cup of fine coffee. -ducks- [Next page](https://community.cartalk.com/t/important-spam-attack/90593.md?page=2)