Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
Reload this Page Spammers
FAQ Community Calendar Today's Posts Search

Reply
Page 5 of 12 « First 34 5 67 Last »
 
Thread Tools Display Modes
  #41  
Old 10-01-2008, 09:03 PM
Thamelas Thamelas is offline
 
Join Date: Aug 2007
Posts: 35
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
I am getting hit right now. 2 more registering. This has to be human controlled, or they have found a way around all registration security.
Reply With Quote
  #42  
Old 10-01-2008, 09:13 PM
Yogesh Sarkar's Avatar
Yogesh Sarkar Yogesh Sarkar is offline
 
Join Date: Jan 2007
Location: New Delhi, India
Posts: 83
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Getting hit by spambots as well for the first time since I switched to vbulletin over a year back, spambots advertising porn. One characteristic I have found in every one of them is that all say "Man" under the biography section and have ip address from all over the world with majority of the email addresses belonging to gmail.

Managed to slow them down by modifying the usual no spam questions with new one.
Reply With Quote
  #43  
Old 10-01-2008, 09:33 PM
khosk khosk is offline
 
Join Date: Jul 2008
Posts: 3
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
I am getting spam all of a sudden on my two vBulletin forums, started about 2 hours ago.
Reply With Quote
  #44  
Old 10-01-2008, 09:41 PM
Thamelas Thamelas is offline
 
Join Date: Aug 2007
Posts: 35
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Same with me. They all say "Man" in the biography box, are spamming porn, and the IP's are from all over the world.
Reply With Quote
  #45  
Old 10-01-2008, 10:47 PM
khosk khosk is offline
 
Join Date: Jul 2008
Posts: 3
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
I'm looking at my logs and this spambot never even calls the captcha image, someone has found a flaw in the registration process that lets it bypass this step.
Reply With Quote
  #46  
Old 10-01-2008, 10:50 PM
Swampfox Swampfox is offline
 
Join Date: Aug 2006
Posts: 119
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
No, they decode the captcha images in a matter of seconds

I posted the fix for this a few pages back, you're wasting your time with email verification and captcha

someone check the spammers user profile in the admincp, see if they are selecting GMT-12 as the time zone, if so the mod i posted earlier will stop them cold
Reply With Quote
  #47  
Old 10-01-2008, 10:55 PM
khosk khosk is offline
 
Join Date: Jul 2008
Posts: 3
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Here are the logs, you can see no image.php so the bot never even looked at the captcha.

oh well it's cutting off part of the logs. The first two lines call a parameter s with two different long hexadecimal strings.

PHP Code:
84.19.188.30 - - [01/Oct/2008:18:38:44 -0400] "GET /forum/register.php?  HTTP/1.0" 200 18156 "http://volkovtrio.com/sound/pre/index.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
84.19.188.30 - - [01/Oct/2008:18:38:48 -0400] "GET /forum/index.php? HTTP/1.0" 200 45797 "http://www.erisaboard.com/index.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
84.19.188.30 - - [01/Oct/2008:18:39:01 -0400] "GET /forum/register.php HTTP/1.0" 200 17854 "http://www.erisaboard.com/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
84.19.188.30 - - [01/Oct/2008:18:39:02 -0400] "POST /forum/register.php?do=register HTTP/1.0" 200 23413 "http://www.erisaboard.com/forum/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
84.19.188.30 - - [01/Oct/2008:18:39:05 -0400] "POST /forum/register.php?do=addmember HTTP/1.0" 200 23907 "http://www.erisaboard.com/forum/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
6 
Reply With Quote
  #48  
Old 10-01-2008, 10:58 PM
jkcerda jkcerda is offline
 
Join Date: Mar 2008
Posts: 425
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
I shut off registrations, 30 in about 16 hours
Reply With Quote
  #49  
Old 10-01-2008, 11:00 PM
Thamelas Thamelas is offline
 
Join Date: Aug 2007
Posts: 35
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
This needs to be reported to Jelsoft ASAP. Its rediculous and needs to be fixed like yesterday!
Reply With Quote
  #50  
Old 10-01-2008, 11:00 PM
jkcerda jkcerda is offline
 
Join Date: Mar 2008
Posts: 425
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
I have over 7 trying to register & other "guest" trying to start threads or events
Reply With Quote
Reply
Page 5 of 12 « First 34 5 67 Last »

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT. The time now is 11:18 AM.

Contact Us - Archive - Top

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.11844 seconds
  • Memory Usage 2,261KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_php
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 
Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete