Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
  #1  
Old 02-04-2009, 04:59 PM
therogueforums's Avatar
therogueforums therogueforums is offline
 
Join Date: Mar 2007
Location: Louisville, KY
Posts: 149
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default So, anyone else getting the album spammer?

Right. We've been getting about 5 accounts a day for the past few weeks, all (I assume) from the same guy, who has one hell of a proxy.

What the person/bot does is post links to pr0n sites, as well as phising sites, in his user albums. Just wondering if anyone else has been getting this guy or guys like him, and how you're dealing with it.
Reply With Quote
  #2  
Old 02-04-2009, 09:01 PM
TNCclubman's Avatar
TNCclubman TNCclubman is offline
 
Join Date: Sep 2008
Posts: 690
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Do you have a custom question on registration? Guarantee you its a bot and that will stop it. Try it and get back to us.

Make the question something everyone knows like...

What is the opposite of cold?

answer: hot
Reply With Quote
  #3  
Old 02-04-2009, 10:19 PM
therogueforums's Avatar
therogueforums therogueforums is offline
 
Join Date: Mar 2007
Location: Louisville, KY
Posts: 149
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Oh, I'm running a registration mod. Works well (I think). I'm thinking it's a human registering, and letting the bot do the work, as quite a few of his accounts have had no activity at all yet, while others have.

All have a common email address, and all link to the same sites.
Reply With Quote
  #4  
Old 02-04-2009, 11:41 PM
NeroObsedian's Avatar
NeroObsedian NeroObsedian is offline
 
Join Date: Oct 2002
Location: Cincinnati
Posts: 36
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I had some issues with adult posting in threads. My fault though as I never updated the CAPTCHA. 90% of the SPAM was coming from RIPE network in Amsterdam, blocked what IP ranges I could and it seemed to have taken care of it. I was getting anywhere from 3-12 accounts per day, some would post one thread some would post two pages worth.
Reply With Quote
  #5  
Old 02-05-2009, 01:52 AM
Alfa1's Avatar
Alfa1 Alfa1 is offline
 
Join Date: Dec 2005
Location: Netherlands
Posts: 3,537
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by NeroObsedian View Post
90% of the SPAM was coming from RIPE network in Amsterdam, blocked what IP ranges I could and it seemed to have taken care of it.
RIPE is the internet hub for Europe and more. You may have blocked off a large part of the world. I suggest you start using another IP tracing service.
Reply With Quote
  #6  
Old 02-05-2009, 04:07 AM
NeroObsedian's Avatar
NeroObsedian NeroObsedian is offline
 
Join Date: Oct 2002
Location: Cincinnati
Posts: 36
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Alfa1 View Post
RIPE is the internet hub for Europe and more. You may have blocked off a large part of the world. I suggest you start using another IP tracing service.
I went off www.arin.net, any other suggestions?

I also backed out to only banning the main IP most of the accounts were registering under.

Not to hijack the thread or anything..
Reply With Quote
  #7  
Old 02-05-2009, 02:17 PM
TNCclubman's Avatar
TNCclubman TNCclubman is offline
 
Join Date: Sep 2008
Posts: 690
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

use my suggestion if you want it to stop.
Reply With Quote
  #8  
Old 02-05-2009, 03:18 PM
calumn calumn is offline
 
Join Date: Nov 2007
Location: Scotland
Posts: 34
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

NeroObsedian, you blocked out a huge chunk of europe if you blocked the RIPE IP ranges.
Reply With Quote
  #9  
Old 02-06-2009, 01:49 AM
Alfa1's Avatar
Alfa1 Alfa1 is offline
 
Join Date: Dec 2005
Location: Netherlands
Posts: 3,537
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by NeroObsedian View Post
I went off www.arin.net, any other suggestions?

I also backed out to only banning the main IP most of the accounts were registering under.

Not to hijack the thread or anything..
The strange thing is that ARIN, often gives inaccurate results outsides its domain. ARIN is only for North American IP's. If you trace European IP's trough RIPE, then you will get the real results.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 03:54 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.08945 seconds
  • Memory Usage 2,222KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (3)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (9)post_thanks_box
  • (9)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (9)post_thanks_postbit_info
  • (9)postbit
  • (9)postbit_onlinestatus
  • (9)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete