Lots of userbots started test my bot and not stopping
Hi there,
I've submitted a bot and after this random userbots started test my bot (about 2-3 per hour).
I think it's ok to test a bot initially. But why continue it? will it ever stop?
if not, maybe there is a way to distinguish these test userbots from the real users, so I can filter them out in my logs and stats?
Hi,
We currently have ONLY ONE user account that we (moderators) use to see if a bot responds to commands and whether everything is as claimed. Its first name on Telegram is "Telegramic Robot". We do not have shadow/alternative/multiple accounts.
If there are userbots that spam your bot, you can contact Telegram: telegram.org. I'm sure they will help you if you provide all necessary information. But it may take some time. Please not that Telegramic is NOT affiliated with Telegram. If you have problems with the Telegram services, please contact Telegram.
Sometimes a user starts a conversation with a bot, and then stops it because he does not understand the bot's language or functions. We also suffer from this, so we are working on a new update and localization in various languages. So maybe they are real users, not userbots. If you are sure that these are userbots, maybe you can use your confirmation logic in your program as well.
; As I checked, we sent only two requests to your bot:
1. /start (May 17, 2020. 20:39 UTC)
2. An inline keyboard callback (Get today's yoga video button).
Your bot responded to our requests by sending 12 messages as a result. That's all.
Thanks!
Thanks for the detailed response!
Indeed, there were requests from Telegramic Robot at 20:39. Right after it, at 20:41, started the flood of userbots. 2-3 new user per hour.
It seems like stolen accounts of real users. They behave like bots: send lots of commands at the same time. And the flood continues steadily since then.
I'm sure it's related somehow to the fact that I published the bot here.
Maybe someone monitors telegramic and directs his bots to new bots? If so, you can notice the monitoring service in your logs.
I understand that you cannot help here. But I think you should know that such thing exists.
Also wondering if other bot authors experienced this?
Hi,
Thanks for the information you provided. I hope you can solve your issue. What I can do is to advise you to contact Telegram and explain these suspicious user behaviors. Maybe they can check and ban such robot accounts, if any.
Our website has several algorithms to stop crawler bots and also uses some services to monitor and immediately prevent possible attacks. Even if we have a web service like a castle, it can't prevent user bots from reading the posts of our Telegram channels. We publish featured/new contents on these Telegram channels (@newestbots, @newestchannels, ...) and we cannot see who's viewing the content. We also published the bot you added there at 20:40 (https://t.me/newestbots/554). It's all about the Telegram's side. There are many other services/channels that publish new contents as discovered.
I think there's no benefit in sending random commands to a bot and I think it is very hard for an attacker to stole a Telegram account. Telegram is a secure application. So I still think that they are users who don't understand the functions of your bot. But I respect your experience and I am sure you can easily prevent such flood attacks. So I guess you wanted to help us by informing. We appreciate this generous effort!
That's all I can say for the Telegramic side. Please contact Telegram for more information and help.
Thanks.
I was not aware about the news channel. Now it all makes sense. The wave of "userbots" becomes less by now, so now I see your point. It's the real users which seen the bot in the news channel and checking it quickly out of curiosity.
We can close the issue, I guess.
Sorry for bothering you with my paranoia and thanks for explanations!
Hi,
No problem! I am glad that everything is clear.
Thanks