vb.org Archive - Need help with Vietnam spam

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)

- - Need help with Vietnam spam (https://vborg.vbsupport.ru/showthread.php?t=292623)

Chadi

12-04-2012 07:31 PM

Need help with Vietnam spam

I'm getting hammered daily with dozens of spam registered with .vn emails and vn IP addresses. This is odd because I get no forum spam or other registration spam except VN which starts about 2-3 weeks ago.

It came to a point where I had to block all VN IP addresses globally at my firewall, now they're using some proxy IPs instead.

They register with stupid scrambled names like "hkjkld16sd" and put other scrambled words in every profile field like "ksjcskcjk".

I have this Glow Host Spam-o-matic MOD enabled:

https://vborg.vbsupport.ru/showthread.php?t=248042

I also have registrations moderated first.

Robbed

12-16-2012 06:00 PM

Same, had to block all signups from yahoo.com.vn

maryx

01-07-2013 08:12 PM

Is there a fast way to ban or delete every member who has a yahoo.com.vn or.vn email address?
Thanks!

Max Taxable

01-07-2013 09:04 PM

End it all.

https://vborg.vbsupport.ru/showthread.php?t=289463

maryx

01-07-2013 10:27 PM

thanks, but that doesn't answer the question I asked --
Is there a fast way to ban or delete every member who has a yahoo.com.vn or.vn email address?

Max Taxable

01-07-2013 10:43 PM

Quote:

Originally Posted by maryx (Post 2395408)

thanks, but that doesn't answer the question I asked --
Is there a fast way to ban or delete every member who has a yahoo.com.vn or.vn email address?

My reply was to the OP.

ForceHSS

01-07-2013 11:22 PM

Quote:

Originally Posted by maryx (Post 2395408)

thanks, but that doesn't answer the question I asked --
Is there a fast way to ban or delete every member who has a yahoo.com.vn or.vn email address?

best to make a new post on this

Max Taxable

01-08-2013 01:31 AM

"Vietnam spam" rhymes nicely though!

gamaken

01-08-2013 09:56 AM

I don't think these are bots. I think it's actual people. I've been getting these spammers for the past couple weeks. I haven't had a bots on my forum in a long time. You can block yahoo.com.vn and if they change emails just report to akismet and stop-forum-spam. Nothing more you can do really.

Max Taxable

01-08-2013 03:34 PM

Quote:

Originally Posted by gamaken (Post 2395503)

I don't think these are bots. I think it's actual people. I've been getting these spammers for the past couple weeks. I haven't had a bots on my forum in a long time. You can block yahoo.com.vn and if they change emails just report to akismet and stop-forum-spam. Nothing more you can do really.

You find out for sure with the plugin I linked earlier. The biggest percentage of spam by FAR is automated. Actual, paid human spammers are few and far between.

gamaken

01-08-2013 05:26 PM

Quote:

Originally Posted by Max Taxable (Post 2395566)

You find out for sure with the plugin I linked earlier. The biggest percentage of spam by FAR is automated. Actual, paid human spammers are few and far between.

I'm using https://vborg.vbsupport.ru/showthread.php?t=256026 which is pretty much the same idea.
I use a number of different methods to stop bots from registering, and it seems to be working well. This Vietnam spam is the first I've had in a long time.

Max Taxable

01-08-2013 10:53 PM

Quote:

Originally Posted by gamaken (Post 2395586)

It's really not the same idea at all. It tips off botnet administrators that there's a time check involved. It also would tend to annoy actual humans. The one I linked is stealthy and annoys no humans - since they have no idea at all it exists. It also, REPORTS all of the failures and has option to ban the IP address to the miserable user's Mod..

The one you link just says "hey, you didn't take the time required to read the rules" and let's them have at it again.

Why do people want to tip off the spammers and also annoy legitimate humans?

arcadejunkie

01-09-2013 09:33 AM

If you have a htaccess file you could try adding this

Code:

<Files *>

order deny,allow



# Vietnam (VN)

deny from 1.52.112.0/20 42.112.0.0/13 58.186.0.0/16 58.187.96.0/20 58.187.112.0/20 112.78.0.0/20 112.197.0.0/16 112.213.80.0/20 113.22.0.0/16 113.23.0.0/17 113.160.0.0/11 115.72.0.0/13 115.84.176.0/22 116.96.0.0/12 117.0.0.0/13 118.68.0.0/14 123.16.0.0/12 125.234.0.0/15 171.224.0.0/11 175.100.64.0/20 183.81.0.0/17 183.91.0.0/19 202.78.227.0/24 203.113.128.0/18 203.162.0.0/16 203.210.192.0/18 210.211.96.0/19 210.245.80.0/21 220.231.124.0/22 222.252.0.0/14

</Files>

Thangvip9x

01-09-2013 10:21 PM

If they fake ip and used tools auto reg nick then deny all ip Viet Nam will no active

You use answer and question in register, thanks now

SamirDarji

07-28-2013 08:10 AM

I've been hit by these guys lately even though I have some very, very topic specific Q&As to get registered. Luckily I moderate all users, so seeing international phone numbers in the hidden 'name/number' field and .vn emails everywhere has been a dead giveaway.

I think these are actual people. I bet if we dialed some of the numbers they've left in the hidden fields during registration, we'd reach the people doing the spamming.

All times are GMT. The time now is 06:38 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01193 seconds Memory Usage 1,748KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_code_printable (5)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (15)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: