Recommended Posts

I have a little forum i have sitting in a non used part of my webspace

I first set it up as a test forum then it started collecting spam so i left it there to do so

I am now getting around 600 new registrations a day

I had 9500 yesterday and this morning around 10100

It started out just as an experiment to see how many i could collect

The thing i want to know is, is there anything worthwhile i can do with over 10k spam email addresses lol

Link to comment
https://www.neowin.net/forum/topic/1156652-spam-honeypot/
Share on other sites

There are extensions you can use to filter out the spam registrations, we use two at Neowin: the honeypot extension, and antispam database for IPB.

btw that';s insane! We get around 50-60 registrations a day, and before the antispam stuff it was double that.

Link to comment
https://www.neowin.net/forum/topic/1156652-spam-honeypot/#findComment-595734950
Share on other sites

Sorry i think i need to explain it better lol

I am using the forum setup to harvest spammers emails lol

I wondered if there was a list that people use that i could submit them all to

I am going to so a little analysis on the emails too

Link to comment
https://www.neowin.net/forum/topic/1156652-spam-honeypot/#findComment-595735112
Share on other sites

AH! I see.... Yes, here's a website with a database of usernames, emails and IP addresses which are reported as spam:

http://www.stopforumspam.com/

Click the Add Spam Data button at the top to add the data. Gunna be a painful journey with all those thousands to do though ;)

  • Like 2
Link to comment
https://www.neowin.net/forum/topic/1156652-spam-honeypot/#findComment-595735122
Share on other sites

  • 2 weeks later...

Well two weeks since i did this and have another 10k registrations lol

 

so might wel do the same again

 

gonna have to find some way of pruning though as i am running out of database space lol

Link to comment
https://www.neowin.net/forum/topic/1156652-spam-honeypot/#findComment-595765830
Share on other sites

Looking at your dataset, confirms my plan when I set up my mail server.  I run mailscanner to filter out crap, and have seen alot of .ru, .in, etc addresses.  My solution: block every domain suffix from countries I don't want, then block entire country ip ranges for the rest.

Link to comment
https://www.neowin.net/forum/topic/1156652-spam-honeypot/#findComment-595766896
Share on other sites

not sure i loked at google ads but they refused due to the site not being within there guidelines?? lol

 

I have taken the forum offline just now

 

these are the stats

 

more so just the total users/post etc as i reset the board start date so i knew when i last filtered the results lol

 

post-229387-0-32516900-1371805494.jpg

Link to comment
https://www.neowin.net/forum/topic/1156652-spam-honeypot/#findComment-595773550
Share on other sites

As I understand the basics of forum spam software like xrummer there's no real e-mail addresses. The software tool fills in all the necessary fields of the registration form and then catches a message from your mailserver to create the right answer.

So the ideas of publishing the spammer e-mails is a kind of utopia. They are almost useless.

Link to comment
https://www.neowin.net/forum/topic/1156652-spam-honeypot/#findComment-595773612
Share on other sites

There needs to be an email address for the registration email to go to

 

and if the "Tool" they use manages to catch the email then the email address again has to be valid

 

also if you read about Xrumer you would see that 

 

 

 

As per the latest update to XRumer 7 the software is able to automatically register e-mail accounts on mail.ru (Russian IP addresses only) and Gmail
Link to comment
https://www.neowin.net/forum/topic/1156652-spam-honeypot/#findComment-595773712
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • BrowserOS 0.46.0 by Razvan Serea BrowserOS is a free, open-source Chromium-based browser that runs AI agents natively, offering a smarter, more productive browsing experience. It supports Chrome extensions and integrates AI agents to automate tasks, fill forms, and streamline workflows. Your data stays on your computer: you can use your own API keys or run local models via Ollama, making it a privacy-first alternative to tools like Perplexity, Comet, or Dia. With built-in productivity tools and app integrations, BrowserOS boosts efficiency while keeping control firmly in your hands. Being Chromium-based, BrowserOS lets you effortlessly import your bookmarks, passwords, and Chrome extensions in just a few clicks. BrowserOS works with OpenAI GPT models, Anthropic Claude, Google Gemini, and local AI models via Ollama or LMStudio. You can use your own API keys and effortlessly switch between providers. BrowserOS Agent Your AI productivity assistant that organizes and manages your browsing effortlessly Quickly list, group, or close tabs Save and resume browsing sessions Search your history and organize bookmarks Switch instantly to the tab you need BrowserOS Navigator – Automate web tasks with ease Navigate websites and search automatically Interact with pages without manual effort Handle repetitive tasks in seconds What makes BrowserOS special Feels like home - same familiar interface as Google Chrome, works with all your extensions AI agents that run on YOUR browser, not in the cloud Privacy first - bring your own keys or use local models with Ollama. Your browsing history stays on your computer Open source and community driven - see exactly what's happening under the hood MCP store to one-click install popular MCPs and use them directly in the browser bar (coming soon) Built-in AI ad blocker that works across more scenarios! BrowserOS 0.46.0 changelog: Run Claude Code & Codex right in your browser — We've extended the agent harness to bring full coding agents into BrowserOS. Claude Code and Codex now come bundled and plug straight into the assistant, so you can drive your browser with the agent — and the subscription — you already use. A brand new experience — A redesigned new tab, a calmer composer, and a rebuilt command center for switching between agents. The whole assistant is cleaner, faster to reach, and easier to live in. New MCP tools — We rebuilt the browser tool surface from the ground up — a tighter, more reliable set of tools for agents to drive the browser. Plus one-click install of BrowserOS as an MCP server into the agents you already run, with automatic URL sync. Chromium 148 — Updated to the latest Chromium base with all recent upstream fixes and security patches. Streamlined — We've pulled back a few features that weren't getting much use — Skills, Soul, and Memory — so we can focus and ship better versions of them soon. Download: BrowserOS 0.46.0 | 181.0 MB (Open Source) Download: BrowserOS for macOS | 485.0 MB Links: BrowserOS Homepage | Github | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Microsoft finally admits its default Windows 11 25H2, 24H2 action broke key legacy component by Sayan Sen Microsoft last week released Windows 11 KB5094126 and KB5093998 as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. So far the company has acknowledged two known issues that have popped up after the release which include bugged-out Office apps as well as the Recycle Bin; though there could be more at play too. Speaking of bugs and issues, Microsoft seems to have finally acknowledged a problem that probably has been around for close to a year. That's because back in July of 2025 the company made a default change to the latest Windows 11 versions, wherein it switched to JScript9Legacy on Windows 11 24H2 and later releases. Hence following the release of version 25H2 in October 2025, JScript9Legacy also remained default-enabled. As a result there has been a compatibility issue ever since then. For those wondering, by switching to JScript9Legacy Microsoft intended to improve the security of modern Windows PCs by reducing vulnerabilities tied to legacy scripting like cross-site scripting (XSS), among others. XSS exploits can allow cyber-attackers to attach malicious code onto legitimate websites and use them to execute the code when a potential victim loads such a website. Hence the new JScript9Legacy engine enforced stricter execution policies and improved object handling, which should help mitigate such attacks. Microsoft today has published a new support article detailing the problem. Neowin spotted it while browsing. The company says that JScript global definitions and execution context may fail to persist across scripts, potentially breaking older dependent apps and web-based components that relied on this legacy behavior. In the article Microsoft has confirmed that the issue stems from its move away from the older jscript9.dll engine in favor of jscript9legacy.dll. As mentioned above, while the newer engine was designed to address vulnerabilities and strengthen security it also changes how JScript handles execution context. As a result functions and definitions loaded by one script could no longer remain available to subsequent scripts once execution ended. The company notes that some applications worked correctly on earlier Windows versions because the older JScript engine automatically retained global definitions and execution state between scripts. Under the newer model though that behavior is disabled by default causing certain legacy workloads and polyfill-dependent scripts to fail. Microsoft says it addressed the problem via the KB5077241 update though the fix had not been enabled automatically in the following updates. As such admins must explicitly turn on persistent JScript execution context using a Registry setting that the tech giant shared today. The configuration can be applied to individual processes or system-wide through the FEATURE_ENABLE_PERSISTENCE registry key. The steps have been outlined below: Run the following command to create the feature control registry key: reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PERSISTENCE" Under this key, create a new DWORD (32-bit) value. Configure the value as follows: To enable persistence for specific processes only: Set the value to 1 for each target process name. To enable persistence for all processes: Add * as the key name and set its value to 1. You can find the official support article here on Microsoft's website.
    • The possibility that milk gathers back into a glass implies that gravity can be 'reversed'.
  • Recent Achievements

    • Week One Done
      Jordan Smith earned a badge
      Week One Done
    • Reacting Well
      BizSAR earned a badge
      Reacting Well
    • First Post
      AndreaB earned a badge
      First Post
    • Week One Done
      Huge Trailer earned a badge
      Week One Done
    • Week One Done
      Classifyskilleducation earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      590
    2. 2
      +Edouard
      186
    3. 3
      PsYcHoKiLLa
      76
    4. 4
      Michael Scrip
      73
    5. 5
      Steven P.
      66
  • Tell a friend

    Love Neowin? Tell a friend!