Systems and Methods for Detecting Spam

One or more computer-readable non-transitory storage media comprising software that is operable when executed by a computer system to:

• receive requests from client devices of a plurality of users to perform user actions;
• determine that a first user action of the user actions performed by a first user of the plurality of users is undesirable;
• access user information associated with the first user and action information associated with the first user action, the action information comprising information associated with:
• the request for performing the first user action;
• a network communication protocol used for transmitting that request;
• and
• one or more timestamps associated to the user action denoting a time over which the user action occurred;
• generate a first signature associated with the first user based on the information associated with the first user and the action information associated with the first user action;
• compare the first signature with signatures associated with a plurality of user actions performed by other users to identify a set of matching user actions selected from the plurality of user actions, wherein the plurality of other user actions occur after the time of the signature of the first user action;
• and
• label the set of matching user actions as being undesirable.

A system comprising:

• one or more processors;
• and
• one or more computer-readable non-transitory storage media coupled to one or more of the processors and comprising instructions operable when executed by one or more of the processors to cause the system to:
• receive requests from client devices of a plurality of users to perform user actions;
• determine that a first user action of the user actions performed by a first user of the plurality of users is undesirable;
• access user information associated with the first user and action information associated with the first user action, the action information comprising information associated with:
• the request for performing the first user action;
• a network communication protocol used for transmitting that request;
• and
• one or more timestamps associated to the user action denoting a time over which the user action occurred;
• generate a first signature associated with the first user based on the information associated with the first user and the action information associated with the first user action;
• compare the first signature with signatures associated with a plurality of user actions performed by other users to identify a set of matching user actions selected from the plurality of user actions, wherein the plurality of other user actions occur after the time of the signature of the first user action;
• and
• label the set of matching user actions as being undesirable.