Blocking SPAM

Post

Posted
Rating:
#3613 (In Topic #723)
HardTrancid
Lately we have been getting Multiple "SPAM" Post every day… Everything from New Jordan running shoes, to BitCoin offers etc. It's rather annoying as I have to manually delete them. I've noticed that this site doesn't seem to be affected by this? Is there something I've not enabled in the settings since an upgrade? Thanks for any insight.

Post

Posted
Rating:
#3614
Joe
I think they are; I've noticed a couple on here but I think Chris and the rest of the staff just keep on top of deleting this stuff.

Post

Posted
Rating:
#3615
Chris Graham
Until this new year spam has not been an issue here. However, since we redirected ocportal.com to here, we've inherited the spam people have been posting there.

People in low paid countries do it manually.

I'll reply to this in due course, probably after I've thought if we can block the incidents here using one of our existing inbuilt tools.

Post

Posted
Rating:
#3616
HardTrancid
Thanks for the reply! And the explanation! It's been driving me crazy, I wasn't sure if somehow people were exploiting SQL Injections or something…..  I guess I'll just keep manually deleting them for the time being. =)

Post

Posted
Rating:
Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 Item has a rating of 5 (Liked by ironfeather)
#3637
Chris Graham
Ok, I looked at recent spam here, and found which of our tools would block it. I'm not going to mask IPs as I don't think we have to preserve the privacy of blatant spammers.

Code

IP              Username            StopForumSpam          zen.spamhaus.org   Country        Project Honeypot   Auto-blockable?
===============================================================================================================================
39.42.191.64                        0.02                   listed             Pakistan       not listed         Yes
77.111.245.14   ethardsdaisy92      70.969999999999999     not listed         France         not listed         Yes
39.53.217.80    AaizaNoor           not listed             listed             Pakistan       not listed         Yes
104.236.144.230 cruzpetar           72.730000000000004     not listed         USA            comment spam       Yes
112.120.33.208  xiao1235            not listed             not listed         Hong Kong      not listed         No
203.122.5.219   jeanghosh62         82.349999999999994     listed             India          not listed         Yes
105.156.45.114  Liliben Ben         not listed             listed             Morocco        honeypot           Yes

Setting up StopForumSpam, a DNS RBL (spamhaus), and Project HoneyPot, should block all but one of these spammers.
103 views (286 KB)
All the spammers are seemingly real humans, solving CAPTCHA, who browse the site normally, on a normal web browser. Although it's impossible to tell 100%. Therefore you need to use these spammer database services to catch them.

Don't copy my Project HoneyPot settings directly, you'll need to set it up yourself, uploading a script file, and configuring against it. You also need to create a StopForumSpam API key. You can, however, use the RBL Servers option directly.

Post

Posted
Rating:
#3640
Chris Graham
Whoops, I made a couple of mistakes above.

The big one is I should have not used the spamhaus RBL. That was marking any machine not meant to be sending e-mails. Not known spammers, but whole IP ranges. So that definitely should not be used and I've taken that out of our configuration here.

This does unfortunately mean there's less that is auto-blockable..

Code

IP              Username            StopForumSpam          Country        Project Honeypot   Auto-blockable?
============================================================================================================
39.42.191.64                        0.02                   Pakistan       not listed         No
77.111.245.14   ethardsdaisy92      70.969999999999999     France         not listed         Yes
39.53.217.80    AaizaNoor           not listed             Pakistan       not listed         No
104.236.144.230 cruzpetar           72.730000000000004     USA            comment spam       Yes
112.120.33.208  xiao1235            not listed             Hong Kong      not listed         No
203.122.5.219   jeanghosh62         82.349999999999994     India          not listed         Yes
105.156.45.114  Liliben Ben         not listed             Morocco        honeypot           No


The other is I forgot to actually configure HTTP:BL. I set up the Project HoneyPot, but I didn't configure the RBL servers option to include that IP.

0 guests and 0 members have recently viewed this.