vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   So, anyone else getting the album spammer? (https://vborg.vbsupport.ru/showthread.php?t=204223)

therogueforums 02-04-2009 04:59 PM

So, anyone else getting the album spammer?
 
Right. We've been getting about 5 accounts a day for the past few weeks, all (I assume) from the same guy, who has one hell of a proxy.

What the person/bot does is post links to pr0n sites, as well as phising sites, in his user albums. Just wondering if anyone else has been getting this guy or guys like him, and how you're dealing with it.

TNCclubman 02-04-2009 09:01 PM

Do you have a custom question on registration? Guarantee you its a bot and that will stop it. Try it and get back to us.

Make the question something everyone knows like...

What is the opposite of cold?

answer: hot

therogueforums 02-04-2009 10:19 PM

Oh, I'm running a registration mod. Works well (I think). I'm thinking it's a human registering, and letting the bot do the work, as quite a few of his accounts have had no activity at all yet, while others have.

All have a common email address, and all link to the same sites.

NeroObsedian 02-04-2009 11:41 PM

I had some issues with adult posting in threads. My fault though as I never updated the CAPTCHA. 90% of the SPAM was coming from RIPE network in Amsterdam, blocked what IP ranges I could and it seemed to have taken care of it. I was getting anywhere from 3-12 accounts per day, some would post one thread some would post two pages worth.

Alfa1 02-05-2009 01:52 AM

Quote:

Originally Posted by NeroObsedian (Post 1734747)
90% of the SPAM was coming from RIPE network in Amsterdam, blocked what IP ranges I could and it seemed to have taken care of it.

RIPE is the internet hub for Europe and more. You may have blocked off a large part of the world. I suggest you start using another IP tracing service.

NeroObsedian 02-05-2009 04:07 AM

Quote:

Originally Posted by Alfa1 (Post 1734805)
RIPE is the internet hub for Europe and more. You may have blocked off a large part of the world. I suggest you start using another IP tracing service.

I went off www.arin.net, any other suggestions?

I also backed out to only banning the main IP most of the accounts were registering under.

Not to hijack the thread or anything..

TNCclubman 02-05-2009 02:17 PM

use my suggestion if you want it to stop.

calumn 02-05-2009 03:18 PM

NeroObsedian, you blocked out a huge chunk of europe if you blocked the RIPE IP ranges.

Alfa1 02-06-2009 01:49 AM

Quote:

Originally Posted by NeroObsedian (Post 1734852)
I went off www.arin.net, any other suggestions?

I also backed out to only banning the main IP most of the accounts were registering under.

Not to hijack the thread or anything..

The strange thing is that ARIN, often gives inaccurate results outsides its domain. ARIN is only for North American IP's. If you trace European IP's trough RIPE, then you will get the real results.
http://www.apnic.net/images/rirs/region_map.jpg


All times are GMT. The time now is 07:32 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01858 seconds
  • Memory Usage 1,726KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (9)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete