Spam Research: Experiment Continued on SMF Forum

A continuation of the Spambot Experiment with an SMF forum, read about the first experiment here: https://zylblog.com/2011/12/spambot-experiment/

The forums were completely wiped out on the 24th of December (all registered members were deleted, all posts removed, etc). A few options were changed: Guest posting was enabled. Registration verification was disabled. User threshold was decreased to 1 minute for accurate bot timekeeping.

Just a heads up: the next experiment is what I expect to yield more results. I plan on disabling Cloudflare, my preliminary blocking agent (blocks at the DNS level. Everything recorded up to this point is research that had that preliminary block on, blocking the most prominent and oldest bots.

The total view: 161307 Posts in 130008 Topics by 132563 Members on 3/11/2012.

Yearly Summary New Topics New Posts New Members Most Online Page views
March 2012 30058 37451 29187 56 883558
 February 2012 65955 83500 66795 43 1881278
 January 2012 28404 34489 31299 38 930937

Interestingly, now that I’ve set the threshold for user time online so that one single action counts for at most one minute, there are still bots that register abnormally high times online:

Most Time Online

dentalokdee
9d 22h 21m
Cassuggex
1d 8h 59m
Melofapr
11h 2m
Gevaoccache
10h 17m
NatashaTon
9h 24m
BackloFF
9h 17m
Nityenenturse
7h 23m
naxernada
4h 33m
Enrimicrilles
4h 8m
Badgaper
3h 59m

 

I have a hard time imagining how these numbers are even possible, it seems like a major waste of resources to allow a bot to stay on any given site for so long. It seems to me that the most a bot should do is go to the site, register (if necessary), post the spam, and move on to the next site to cover as much as possible.

Likewise, many topics have an abnormal view count (probably only from a single bot replying to its own topics multiple times).

Top ten topics by replies and views:

Top 10 Topics (by Views)

Quick question regarding disyllabic and unbosomed
24771
flash èãðû
21787
055 – prices buy hennessy cognac haltom pharmacy tx
9043
ugg boots
5575
ultram er side effects Yonkers
5494
tramadol with no prescription Latham
5085
binaryoptionstradingflaus.com top rated binary choices investing critiques in the environment.
3425
free erotice hentai hentai men
3073
cheap Celexa buy cod
2063
uggs norway
1802

 

Top 10 Topics (by Replies)

ugg boots
4759
055 – prices buy hennessy cognac haltom pharmacy tx
3109
ultram er side effects Yonkers
2701
free erotice hentai hentai men
2273
cheap Celexa buy cod
1854
uggs norway
1371
This Super!
650
Quick question regarding disyllabic and unbosomed
498
archeoligy dating
447
All Casino Grand Hotel Reviews
395

Top ten posters and topic starters are identical:

Top Topic Starters

Enrimicrilles
18365
delaccomypl
17627
epherturl
8012
addicduck
5033
RichardMaretti
4278
Perettos
2478
coapypedyday
2240
Philerlige
2193
Albertius
1887
BreariacanO
165

 

Top 10 Posters

Enrimicrilles
18365
delaccomypl
17627
epherturl
8012
addicduck
5033
RichardMaretti
4278
Perettos
2478
coapypedyday
2240
Philerlige
2193
Albertius
1887
BreariacanO
1651

Summary statistics:

General Statistics

Total Members:
132563
Total Posts:
161307
Total Topics:
130008
Most Online:
81 – December 23, 2011, 09:12:35 am (note, this is still prior to the beginning of the second set of experiments)
Online Today:
56
Total page views:
3865188
Average registrations per day:
783.35
Average posts per day:
1070.14
Average topics per day:
890.99
Average online per day:
26.75
Male to Female Ratio:
20167:1
Average page views per day:
19620.24

 

Conclusion: Interesting.

Next, Cloudflare’s anti-spam technology is going to be disabled completely.

About Jesse Zylstra

Hey! My name is Jesse Zylstra, and I am the administrator of this website. I used to write about free software and programs, online web applications, and new technology -- especially open-source. Now I just write udder nonsense. I also play pipe organ, which I'm told is a fun and interesting fact about me. In the past, I studied network administration. Now I've been trying to pursue a real fake bachelors degree for the last, oh, 10 years or so.
This entry was posted in Spam Research, Web Services, Application, and Design and tagged , , , , . Bookmark the permalink.

Leave a Reply

Your email address will not be published.