vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Amsterdam spammers! (https://vborg.vbsupport.ru/showthread.php?t=207444)

biggeorge 03-05-2009 04:47 PM

Amsterdam spammers!
 
1 Attachment(s)
I'm banning all of The Netherlands from my forum... I'm sick of the Amsterdam spammers. They make me sick to my stomach and I can't take it anymore. :mad: Sure, I may loose a couple decent folks, but it is what it is.

With that said, I'm going to use the built-in VB User Banning Options. I've found every IP possible for The Netherlands. The list took a little time to clean up, so I thought I'd share the text file with anyone who is having a similar problem and doesn't mind banning an entire country.

Bye bye Netherlands! :p I feel better already.

Attachment 95953

Videx 03-05-2009 10:12 PM

FWIW, It probably would have been a lot easier to use the timezone banning mod.

biggeorge 03-05-2009 10:23 PM

I tried it; they got through like the sneaky slime they are.

TSHNOFX 03-06-2009 12:52 AM

Ban their IP ranges hostside via cpanel(Assuming you have it).

Ex, if their IP is 44.444.44.444 you'd enter 44.444.44.

Since the range is entirely that amsterdam bot's thing, it blocks a ton of bots.

Here's a mini-list of a bunch of bots' IP's.

http://pastebin.com/f4e6529c5

Also wise that you set to where you approve members first, then do a whois on the ip. If it's bad, block the range.

as7apcool 03-06-2009 03:02 AM

i hate spammers

ekantnl 03-06-2009 08:03 AM

Quote:

Originally Posted by biggeorge (Post 1761215)
Bye bye Netherlands! :p I feel better already.

if you are talking about the link in your sig, please double check your ban settings.

I am from the Netherlands and still able to walk in.

Symbian.info 03-06-2009 08:39 AM

I'm also from the Netherlands and tried to register at your site (username Arjen). I still think it's a bit drastic to ban all of Holland for some Amsterdam spammers - there must be a better way - we're not banning all of Russia for a couple of Russian spammers either. I noticed that you're now using new account moderation and if you're not registered you can't even see the threads. If this is for Dutch IP's only I can understand (did I mention already that I think this is a bit drastic?), but if this is for everybody, I would expect the number of new registrations to go down and your Google ranking to drop tremendously.

biggeorge 03-06-2009 11:43 PM

Quote:

Originally Posted by ekantnl (Post 1761645)
if you are talking about the link in your sig, please double check your ban settings.

I am from the Netherlands and still able to walk in.

I went from 20-25 Amsterdam registrations per day to 2 in 2 days. I don't know why you were able to come in, but I'm okay with the ratio.

Quote:

Originally Posted by Symbian.info (Post 1761659)
I'm also from the Netherlands and tried to register at your site (username Arjen). I still think it's a bit drastic to ban all of Holland for some Amsterdam spammers - there must be a better way - we're not banning all of Russia for a couple of Russian spammers either. I noticed that you're now using new account moderation and if you're not registered you can't even see the threads. If this is for Dutch IP's only I can understand (did I mention already that I think this is a bit drastic?), but if this is for everybody, I would expect the number of new registrations to go down and your Google ranking to drop tremendously.

If I have the same problem with Russia, I'll ban the entire country. There aren't all that many Hayabusa's in Russia. And if you own a Hayabusa, you'll be the only member on my forum from the Netherlands that actually does.

I have to weigh the options of either banning an entire country that has proved to be one of the biggest breeding grounds for spammers, or worrying that a scumbag spammer will join my community and post Hentia porn in a random thread. I run one of the very few motorcycle forums that doesn't allow members use profanity, never mind porn.

Don't get me wrong, I love porn :cool: but not on my forum.

--------------- Added [DATE]1236390371[/DATE] at [TIME]1236390371[/TIME] ---------------

Quote:

Originally Posted by TSHNOFX (Post 1761476)
Ban their IP ranges hostside via cpanel(Assuming you have it).

Ex, if their IP is 44.444.44.444 you'd enter 44.444.44.

Since the range is entirely that amsterdam bot's thing, it blocks a ton of bots.

Here's a mini-list of a bunch of bots' IP's.

http://pastebin.com/f4e6529c5

Also wise that you set to where you approve members first, then do a whois on the ip. If it's bad, block the range.

Do you think banning the IP in cpanel is more effective than banning the IP in cpanel?

Members have to be approved first. But I was spending waaaaay to much time going through Arin checks only to see a 90% ratio of Amsterdam spammers.

Thanks!

Swampfox 03-07-2009 12:19 AM

The bots are using proxies, they could be anywhere in the world

banning IP and email addresses will keep you behind the curve on them, they get a new IP and email address every time they are deployed

I recommend you use the question/answer human verification option that comes with vBulletin now, If they cant register they cant spam

Videx 03-07-2009 01:50 AM

Ya, the question is all I use now. Well, in addition to the timezone mod. Seems like there should be an easy question for people you could use like "What controls the speed of a bike (starts with t)?" throttle. "What fuel do Hayabusas burn?" Gas/gasoline.

biggeorge 03-07-2009 03:19 AM

Quote:

Originally Posted by Swampfox (Post 1762164)
The bots are using proxies, they could be anywhere in the world
banning IP and email addresses will keep you behind the curve on them, they get a new IP and email address every time they are deployed

It just seems that all the bots that target my forum are coming from The Netherlands.

Quote:

Originally Posted by Swampfox (Post 1762164)
I recommend you use the question/answer human verification option that comes with vBulletin now, If they cant register they cant spam

I employed the question/answer verification at the same time.

Quote:

Originally Posted by Videx (Post 1762196)
Ya, the question is all I use now. Well, in addition to the timezone mod. Seems like there should be an easy question for people you could use like "What controls the speed of a bike (starts with t)?" throttle. "What fuel do Hayabusas burn?" Gas/gasoline.

Yep... it seems to be working.

This decision to ban the IP's didn't come overnite, I assure you. This was months of aggravation. If I see an influx of new members using new IP's from The Netherlands I'll have to try something else... not sure what. It sucks to ban an entire country, but I did what I needed to do to maintain the quality of my community and for the sake of my sanity.

Marco van Herwaarden 03-09-2009 02:29 PM

My (dutch) IP is also not on your list.

PS Many (well i just checked 1 and the first was already a hit) IP ranges on your list are not used in the Netherlands. I think you are confused as the european IP registration is done by RIPe, which is located in the Netherlands.

For example:
91.194.6

This is not a dutch IP address.

http://www.db.ripe.net/whois?form_ty..._search=Search

inetnum: 91.194.6.0 - 91.194.7.255
netname: METAVERSUM-1
descr: Metaversum GmbH
country: DE

UKBusinessLive 03-09-2009 03:56 PM

Quote:

Originally Posted by Marco van Herwaarden (Post 1764060)
My (dutch) IP is also not on your list.

PS Many (well i just checked 1 and the first was already a hit) IP ranges on your list are not used in the Netherlands. I think you are confused as the european IP registration is done by RIPe, which is located in the Netherlands.

For example:
91.194.6

This is not a dutch IP address.

http://www.db.ripe.net/whois?form_ty..._search=Search

inetnum: 91.194.6.0 - 91.194.7.255
netname: METAVERSUM-1
descr: Metaversum GmbH
country: DE


I was just thinking the same :rolleyes:

i use this site here which is pretty good on IP country seraches http://www.geobytes.com/IpLocator.htm?GetLocation

I've been playing with the idea of getting a developers licence and making a plugin for the admin cp, i think something like this would be beneficial to admins ;)

renep 03-14-2009 12:50 PM

Quote:

Originally Posted by biggeorge (Post 1761215)
I'm banning all of The Netherlands from my forum... I'm sick of the Amsterdam spammers. They make me sick to my stomach and I can't take it anymore. :mad:

I humbly apologize for the behavior of some of my fellow Amsterdam-based ip number holders :o

biggeorge 03-15-2009 02:49 PM

Quote:

Originally Posted by renep (Post 1767850)
I humbly apologize for the behavior of some of my fellow Amsterdam-based ip number holders :o

Hahahaha... you're forgiven.

externalaw.com 03-15-2009 02:50 PM

Ja dagggggggggggggggggggggggggggg!
Dont block mokum!

N1GTO4 03-15-2009 06:46 PM

Why not moderate first posts this combined with selective IP bannishment should reduce the spam quite a bit. Also using a hack to detect multiple accounts will help with your IP ban list. We still have accounts being created for bots with IPs that are not banned but the bots themselves rotate through a group of IPs that are banned when attempting to post the spam. It can be time consuming and take some effort but in less then a month we have reduced spam to a level that is managable by the site staff and we have not had a reduction in new user registrations.

oldengine 04-06-2009 02:38 AM

Quote:

Originally Posted by UKBusinessLive (Post 1764145)
I've been playing with the idea of getting a developers licence and making a plugin for the admin cp, i think something like this would be beneficial to admins ;)

YES!

Keysailor 09-21-2012 11:26 AM

Quote:

Originally Posted by N1GTO4 (Post 1768980)
Why not moderate first posts this combined with selective IP bannishment should reduce the spam quite a bit. Also using a hack to detect multiple accounts will help with your IP ban list. We still have accounts being created for bots with IPs that are not banned but the bots themselves rotate through a group of IPs that are banned when attempting to post the spam. It can be time consuming and take some effort but in less then a month we have reduced spam to a level that is managable by the site staff and we have not had a reduction in new user registrations.

I use the excellent Duplicate IP Report by BOP5 that runs a weekly report for me on user accounts that use the same IP.

I don't automatically ban duplicates, only if one of the users spammed, then I ban that IP and hence all the duplicates.

Sometimes there are families or roommates with separate accounts which use the same IP, so you have to be discriminate about how you use the information from the report imo.

Stefan118 09-21-2012 01:41 PM

Also my IP (81.70.161.xx) is not on your list, en ik ben toch echt in nederland, vlak bij Apeldoorn)
Translation: ...: and i'm realy in the Netherlands, close to Apeldoorn.

I suggest you to install vbStopForumSpam. (mod)
It save's me a lot of removing the spammers.
I use it in combination with stop the registration bots (mod) which i have set at minimum of 25 seconds register time

Black Tiger 09-21-2012 08:36 PM

Wow, 2 of you guys bumping a 3 year old thread for this stupid stuff??? LoL.:D

Simon Lloyd 09-22-2012 03:03 AM

Quote:

Originally Posted by Stefan118 (Post 2367301)
Also my IP (81.70.161.xx) is not on your list, en ik ben toch echt in nederland, vlak bij Apeldoorn)
Translation: ...: and i'm realy in the Netherlands, close to Apeldoorn.

I suggest you to install vbStopForumSpam. (mod)
It save's me a lot of removing the spammers.
I use it in combination with stop the registration bots (mod) which i have set at minimum of 25 seconds register time

Or ban their useragents! see my signature line for a link to the mod.


All times are GMT. The time now is 04:58 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01761 seconds
  • Memory Usage 1,794KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (13)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (22)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete