Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
  #1  
Old 09-23-2007, 03:10 PM
Quarterbore Quarterbore is offline
 
Join Date: Mar 2005
Location: Valley Forge PA
Posts: 538
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Trying to learn about spammers and bots - some interesting results!

I have been very busy with a couple projects and work the past few months and I have one vbulletin forum that is not very active that I had not checked in on for about 2-months (big mistake but I am going to make the most of it).

During the 2-3 month period my site but have been included onto every spam bot posting list as I had in the order of 2000 NEW MEMBERS (by far mostly bots) and about 10,000 new posts and threads (porn, drugs, a real mess!).

So, I got an e-mail from a visitor/member making me aware of the problem and the past week I have been locking the site down to keep the bots out. To do this I have added the following hacks that have been posted here at vBulletin.org:

NOSPAM
Is Bot
IPNoRegister
SpamBuster
Prevent Spam Posts
Timezone block (suggested in this thread)

Now, when I added these various tools to the site I still had problems with bots getting onto the site. I learned that the bots automatically come to my site to register and post their spam BUT there is a human component that allows these bots to "learn" from their experience.

Specifically, in my logs I could see where the bots would get rejected (because they could not answer the NoSpam question. The bots would take a few seconds to be rejected and sometimes I would see a slower pinging of the registration page were I assume a person making a list of questions and answers that were programed into the bots.

After this, the bots were able to get onto the site and corectly answer the NoSPam question. At this point the Spambuster and Prevent Spam Posts worked together to self moderate the spam.

Now, to supplement these three tools, I then took the problem e-mail domains and ip addresses and added them to the vbulletin blocking mechanism as well as my own IPNoRegister hack.

Now, in order for me to understand how this was happening I also rewrote parts of the hacks above and included a little code that logs all registration attempts. Over the past 2-weeks I have not had a single post get posted in my site that I did not want and as near as I can tell I have not impacted members I wanted.

In the following two posts I will share two of my logs. Note that I have removed some registration info for cases were the person was a real member but you can see that in the logs! I hope this info helps someone that has also been infested with these dambed bots learn something that can be used to keep them out!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 01:21 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.06110 seconds
  • Memory Usage 2,213KB
  • Queries Executed 12 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)post_thanks_box
  • (1)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit_info
  • (1)postbit
  • (1)postbit_onlinestatus
  • (1)postbit_wrapper
  • (1)showthread_list
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_threadedmode.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids_threaded
  • showthread_threaded_construct_link
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete