Drug Spamming

[Wifey]

I have a question for y'all. Is it just me or have y'all had an influx recently of spammers with .ru e-mail addresses spamming your boards with drg company ads. I just had to censor about 30 different links as well as ban a few IP's.

How do y'all safeguard against this on your boards?

Just a couple examples of what I just dealt with...

A lot of urls ending in *.fullka.com

(Edit out a couple of life links to domains for drugs, MarcoH64)

[Bernd]

there is an anti-spam hack available for 3.5.x.

[Boofo]

Link, please?

[Freesteyelz]

There's also one for PM's. Anyway, here it is and the title's a doozy:

SpamBuster v1.0.0 (Stable): Identify, log and remove spam posts on your forum (https://vborg.vbsupport.ru/showthread.php?t=109258&highlight=anti-spam)

[Boofo]

There's also one for PM's. Anyway, here it is and the title's a doozy:

SpamBuster v1.0.0 (Stable): Identify, log and remove spam posts on your forum (https://vborg.vbsupport.ru/showthread.php?t=109258&highlight=anti-spam)

Does this work? Have you installed it?

[Freesteyelz]

I haven't installed it. My community doesn't get the random spam like general community forums. I just remember passing it by when I was looking for another mod. :)

[Wifey]

I'm still running 3.0.0, ugh. Alrighty I'm going to have to get my board upgraded. I need to remember the e-mail of the guy I contacted before about it so I can pay him to do it...

Thanks y'all :)

[nsusa]

Is the one listed here also for PMs?

[COBRAws]

Does this work? Have you installed it?
I have it installed. I added some "wildcards" so I can identify posts selling stuff. One of my major boards is about clubbing scene in Buenos Aires, we derive thousands of people everynight to different nightclubs.

We have a zero tolerance policy regarding ticket sales and promoting unauthorised Lists and VIP Pass. Well, this hack has helped our staff to track these messages down and delete them within seconds after being published.


Give it a try. The downside, i believe, is that my server load has increased a little bit. But I cant really tell if its because of this hack.

Cheers

[Cyburbia]

How do y'all safeguard against this on your boards?

1) Block registration from these addresses:

au.ru
bk.ru
fromru.ru
front.ru
go.ru
halyava.ru
hotmail.ru
id.ru
inbox.ru
land.ru
list.ru
mail.ru
mailgate.ru
newmail.ru
nextmail.ru
nm.ru
notmail.ru
ok.ru
pochta.ru
rambler.ru
ru.ru
sendmail.ru
yandex.ru
zmail.ru
gomail.com.ua
mail15.com

2) Block registration from any address containing .info and .biz.

3) Block the IP blocks belonging to Inhoster (http://www.google.com/search?hs=Jyg&hl=en&lr=&client=firefox-a&rls=org.mozilla%3Aen-US%3Aofficial&q=inhoster+spam&btnG=Search) domains using .htaccess, or better yet at the server level. (Inhoster is a spam, malware, phishing and bot-friendly Ukranian hosting service. I got hammered last week from bots with IPs in the Inhoster blocks.)

85.255.112.0 - 85.255.127.255
195.95.218.0 - 195.95.219.255
195.225.176.0 - 195.225.179.255

4) Ban the IP block assigned to Intercage (http://www.google.com/search?q=intercage+spam&start=0&ie=utf-8&oe=utf-8&client=firefox-a&rls=org.mozilla:en-US:official).

69.50.160.0 - 69.50.191.255

[ChrisSy]

I've been getting a lot of spam via the 'Contact Us' form lately, we get spam posts but nothing severe.

[Wifey]

I've been getting a lot of spam via the 'Contact Us' form lately, we get spam posts but nothing severe.


SAME HERE. That and registration problems.

I'm currently doing all the suggested IP/mail reg. bans. Thanks Cyburbia!

[Guest210212002]

Does this work? Have you installed it?

That hack was a wee on the tempermental side for me.

1) Block registration from these addresses:

au.ru
bk.ru
fromru.ru
front.ru
go.ru
halyava.ru
hotmail.ru
id.ru
inbox.ru
land.ru
list.ru
mail.ru
mailgate.ru
newmail.ru
nextmail.ru
nm.ru
notmail.ru
ok.ru
pochta.ru
rambler.ru
ru.ru
sendmail.ru
yandex.ru
zmail.ru
gomail.com.ua
mail15.com

2) Block registration from any address containing .info and .biz.

3) Block the IP blocks belonging to Inhoster (http://www.google.com/search?hs=Jyg&hl=en&lr=&client=firefox-a&rls=org.mozilla%3Aen-US%3Aofficial&q=inhoster+spam&btnG=Search) domains using .htaccess, or better yet at the server level. (Inhoster is a spam, malware, phishing and bot-friendly Ukranian hosting service. I got hammered last week from bots with IPs in the Inhoster blocks.)

85.255.112.0 - 85.255.127.255
195.95.218.0 - 195.95.219.255
195.225.176.0 - 195.225.179.255

4) Ban the IP block assigned to Intercage (http://www.google.com/search?q=intercage+spam&start=0&ie=utf-8&oe=utf-8&client=firefox-a&rls=org.mozilla:en-US:official).

69.50.160.0 - 69.50.191.255

Great post man. :cool:

[Wifey]

Just wanted to add a quick thing to this.

I had someone register from a .es e-mail address. AND I have the image verification set up. So I blocked everything from a .es e-mail address.

[AF-Brandy]

Ton's of .ru spam recently, both on the forums and via Contact Us - on ALL of our forums...what a nightmare it's been grr...

[Make Money?]

Any spam killer updates?

Real pest now on my forum

mostly cel phones...

[SBLNet]

Is there any way of banning certain email suffixes from registering? ".ru" for example

[Wifey]

Is there any way of banning certain email suffixes from registering? ".ru" for example

Yep. In vbulletin options under user banning options you can block certain e-mail addresses. These are some I have blocked:

au.ru
bk.ru
fromru.ru
front.ru
go.ru
halyava.ru
hotmail.ru
id.ru
inbox.ru
land.ru
list.ru
mail.ru
mailgate.ru
newmail.ru
nextmail.ru
nm.ru
notmail.ru
ok.ru
pochta.ru
rambler.ru
ru.ru
sendmail.ru
yandex.ru
zmail.ru

or do .ru

Also, I installed a mod that requires the users answer a question (an easy one) -- the NoSpam! hack or something like that -- I haven't had ANY problems since I installed that :)

[sv1cec]

I have a simple solution, for antispamming, but it is based on vB 3.0.xx.

If some one is interested, write to me and I'll provide the code. If you have installed my AWS hack, even better, but it is not necessary. It basically checks the first post the spammer makes and tries to find words you have predefined. It counts the occurence of these words and if the counter exceeds a predefined limit, it blocks the post and bans the poster. No more spamming for my board even from the Contact Us form.

Please keep in mind that this is not a ready-made hack, I will give you instructions on how to do it, but it is not a cut-and-paste installation thing.

[clarkstoncracke]

<a href="https://vborg.vbsupport.ru/showthread.php?t=124828" target="_blank">https://vborg.vbsupport.ru/showthread.php?t=124828</a>

Its that simple.

I went from 50+ spams a day to ZERO.

Just ask a question that only people would know who want access to your site.

I have an offroading website, and my questions are like:

"What car manufacturer makes the Bronco"

Those foreign spamming jerks probably don't speak english.

[sv1cec]

Well, the image verification takes care of that, the question alternative is a good one too for those visually impaired, but what about those who register to spam? I had several of those, selling cellular phones etc. No more.

[clarkstoncracke]

Well, the image verification takes care of that, the question alternative is a good one too for those visually impaired, but what about those who register to spam? I had several of those, selling cellular phones etc. No more.

image verification does not work 100% of the time.
I'm almost positive that all the spams I used to receive were from bots, and they would get through the image verification.

I've been spam free for 25 days!

[Brad]

image verification does not work 100% of the time.
I'm almost positive that all the spams I used to receive were from bots, and they would get through the image verification.

I've been spam free for 25 days!
We've had a number of bots but most of them seem to be registered by a real person. Often times we'll see an account registered months ago (with no or one post) go on a spamming spree.