The Arcive of Official vBulletin Modifications Site.

cmmguy · #31 10-01-2008, 07:23 PM

I have had a 5 spammers sign up today all from a very narrow band of IP addresses. I already had the Miserable User installed and put the first two segments of the IP addresses in to the Miserable User IP field.
This stopped them from becoming a problem even thought they signed up.

I also added 4 required fields that are related to my industry. Only legit users would know the answers. The addition of required fields that dont match the BOT script stops a lot of them. The ones that sign up manually dont know the correct type of answer and make finding the spammers a lot easier.

One other thing... I have unlimited texting on my phone so I have my forum setup to text me when a new user signs up. The text shows me the name of the user and most users in my field use relatively "normal" user names so a spammer user stands out. I can easily check the one that dont look legit and I can catch a trend of new users even when I am not near a computer and decide if I need to get to one.

--------------- Added [DATE]1222893303[/DATE] at [TIME]1222893303[/TIME] ---------------

btw.

How are the spammers finding our forums?
What is consistant in the forum that they are googling for?
Is there a list on vBulletin.com or .org that they are using to find us?

Just curious if there is something that can be changed. I know that I use /forum with my domain - is this a bad thing?

Digital Jedi · #32 10-01-2008, 07:49 PM

Quote:

Originally Posted by jkcerda

how can you add more questions/answers to the human verification?

Use the NoSpam modification for your version of vBulletin. It will randomize questions.

Quote:

Originally Posted by cmmguy

btw.

How are the spammers finding our forums?
What is consistant in the forum that they are googling for?
Is there a list on vBulletin.com or .org that they are using to find us?

Just curious if there is something that can be changed. I know that I use /forum with my domain - is this a bad thing?

I'm pretty sure it's just random. The idea behind spam is to just cover as much ground as they possible can. There's no rhyme or reason to it.

Piper0005 · #33 10-01-2008, 08:01 PM

I added the NoSpam modification and the vbStopForumSpam and both are working great. The vbStopForumSpam has prevented about 6 spammers from registering already (in about an hour).

Swampfox · #34 10-01-2008, 08:04 PM

the bot software has a huge database of forum addresses, they link directly to the registration page, changing the url of that page is effective also, at least short term

I have seen the bot software in action, knowing how it works helps in defending against it

there is a flash demo online but Im not sure if it would be ok to post a link here

iogames · #35 10-01-2008, 08:20 PM

Quote:

Originally Posted by Digital Jedi

I've found that ultimately, the best way to deal with spammers, after taking all the other necessary precautions, is to just be more relentless then they are. They're persistant, but after a while, they give up if all their effort ends up not being worth the effort.

If we do just a little $$$ with a Forum what is their earn/motive?

Thamelas · #36 10-01-2008, 08:21 PM

I am being flooded with porn and auto insurance spammers. I am using email confirmation, captcha, as well as NoSpam and some are still getting thru. I believe it is human controlled. I have already banned 5 users today. Also I banned all mail.ru email addresses.

bluidkiti · #37 10-01-2008, 08:36 PM

I got hit hard today at 3 of my sites by the spammers. Right now I have all 3 forums set so I have to approve members. Either this is working or they have stopped for some other reason.

jkcerda · #38 10-01-2008, 08:40 PM

how can you ban by e-mails?

I would like to nail all the .cn .ru and GMAIL accounts

Thamelas · #39 10-01-2008, 08:58 PM

AdminCP > vBulletin Option > User Banning Options

You will see the section "Banned Email Addresses". Just put in the addresses you want to ban. I put in @mail.ru to ban all addresses from there. It also blocks new registrations from using those email addresses. I'm on the verge of banning all gmail addresses.

I let current users keep using the mail.ru address though. A spammer will get caught.

I actually had to ban another porn spammer since my last post...

bluidkiti · #40 10-01-2008, 09:01 PM

Spoke too soon. Getting hit with another wave but I have to approve them but they can still register.

I agree - I am about ready to ban gmail emails also.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.04362 seconds Memory Usage 2,256KB Queries Executed 13 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (1)ad_showthread_firstpost (1)ad_showthread_firstpost_sig (1)ad_showthread_firstpost_start (3)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)navbar (3)navbar_link (120)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (10)post_thanks_box (10)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (10)post_thanks_postbit_info (10)postbit (10)postbit_onlinestatus (10)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_postinfo_query fetch_postinfo fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!