Blocking SPAM

Post

Posted
Rating:
#3646 (In Topic #715)
Avatar
Standard member
HardTrancid is in the usergroup ‘Fan in action’
Lately we have been getting Multiple "SPAM" Post every day… Everything from New Jordan running shoes, to BitCoin offers etc. It's rather annoying as I have to manually delete them. I've noticed that this site doesn't seem to be affected by this? Is there something I've not enabled in the settings since an upgrade? Thanks for any insight.
Online now: No Back to the top

Post

Posted
Rating:
#3647
Joe
Avatar
Standard member
Joe is in the usergroup ‘Honoured member’
I think they are; I've noticed a couple on here but I think Chris and the rest of the staff just keep on top of deleting this stuff.
Online now: No Back to the top

Post

Posted
Rating:
#3648
Avatar
Site director
Chris Graham is in the usergroup ‘Administrators’
Until this new year spam has not been an issue here. However, since we redirected ocportal.com to here, we've inherited the spam people have been posting there.

People in low paid countries do it manually.

I'll reply to this in due course, probably after I've thought if we can block the incidents here using one of our existing inbuilt tools.


Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon

Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Online now: No Back to the top

Post

Posted
Rating:
#3649
Avatar
Standard member
HardTrancid is in the usergroup ‘Fan in action’
Thanks for the reply! And the explanation! It's been driving me crazy, I wasn't sure if somehow people were exploiting SQL Injections or something…..  I guess I'll just keep manually deleting them for the time being. =)
Online now: No Back to the top

Post

Posted
Rating:
Item has a rating of 5 (Liked by ironfeather)
#3676
Avatar
Site director
Chris Graham is in the usergroup ‘Administrators’
Ok, I looked at recent spam here, and found which of our tools would block it. I'm not going to mask IPs as I don't think we have to preserve the privacy of blatant spammers.

Code

IP              Username            StopForumSpam          zen.spamhaus.org   Country        Project Honeypot   Auto-blockable?
===============================================================================================================================
39.42.191.64                        0.02                   listed             Pakistan       not listed         Yes
77.111.245.14   ethardsdaisy92      70.969999999999999     not listed         France         not listed         Yes
39.53.217.80    AaizaNoor           not listed             listed             Pakistan       not listed         Yes
104.236.144.230 cruzpetar           72.730000000000004     not listed         USA            comment spam       Yes
112.120.33.208  xiao1235            not listed             not listed         Hong Kong      not listed         No
203.122.5.219   jeanghosh62         82.349999999999994     listed             India          not listed         Yes
105.156.45.114  Liliben Ben         not listed             listed             Morocco        honeypot           Yes

Setting up StopForumSpam, a DNS RBL (spamhaus), and Project HoneyPot, should block all but one of these spammers.
135 views (286 KB)
All the spammers are seemingly real humans, solving CAPTCHA, who browse the site normally, on a normal web browser. Although it's impossible to tell 100%. Therefore you need to use these spammer database services to catch them.

Don't copy my Project HoneyPot settings directly, you'll need to set it up yourself, uploading a script file, and configuring against it. You also need to create a StopForumSpam API key. You can, however, use the RBL Servers option directly.


Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon

Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Online now: No Back to the top

Post

Posted
Rating:
#3680
Avatar
Site director
Chris Graham is in the usergroup ‘Administrators’
Whoops, I made a couple of mistakes above.

The big one is I should have not used the spamhaus RBL. That was marking any machine not meant to be sending e-mails. Not known spammers, but whole IP ranges. So that definitely should not be used and I've taken that out of our configuration here.

This does unfortunately mean there's less that is auto-blockable..

Code

IP              Username            StopForumSpam          Country        Project Honeypot   Auto-blockable?
============================================================================================================
39.42.191.64                        0.02                   Pakistan       not listed         No
77.111.245.14   ethardsdaisy92      70.969999999999999     France         not listed         Yes
39.53.217.80    AaizaNoor           not listed             Pakistan       not listed         No
104.236.144.230 cruzpetar           72.730000000000004     USA            comment spam       Yes
112.120.33.208  xiao1235            not listed             Hong Kong      not listed         No
203.122.5.219   jeanghosh62         82.349999999999994     India          not listed         Yes
105.156.45.114  Liliben Ben         not listed             Morocco        honeypot           No


The other is I forgot to actually configure HTTP:BL. I set up the Project HoneyPot, but I didn't configure the RBL servers option to include that IP.



Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon

Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Online now: No Back to the top
1 guest and 0 members have just viewed this.

Statistics

Forum statistics:
  • 2,052 topics, 7,195 posts, 10,830 members
  • Our newest member is Customcollective
Back to Top