Page 5 of 6 FirstFirst ... 3456 LastLast
Results 41 to 50 of 54

Thread: Forums News: Forums Spam IP Ban List

  1. #41
    Join Date
    Aug 2006
    Beans
    1,222

    Re: Forums News: Forums Spam IP Ban List

    Been looking for solutions to both, haven't found any, yet...
    There's no place like ~/

  2. #42
    Join Date
    Mar 2009
    Location
    Buenos Aires, AR
    Beans
    2,325
    Distro
    Ubuntu

    Re: Forums News: Forums Spam IP Ban List

    So Spammers need an IPv6 to keep spamming, nice...

  3. #43
    dino99's Avatar
    dino99 is offline Ubuntu addict and loving it
    Join Date
    Jun 2006
    Location
    Nux Jam
    Beans
    Hidden!
    Distro
    Ubuntu Development Release

    Re: Forums News: Forums Spam IP Ban List

    Quote Originally Posted by bapoumba View Post
    We already have had captcha + email confirmation set up for a couple years now. The captcha is a custom one, with custom questions we came up with (some of them even confuse real humans ^^).

    The spam we are getting recently is sneaky. They fill up the profile fields with spam links. Sometimes the accounts are dormant and wake up after sometime has elapsed. Our team is very good at finding related accounts to one identified as spam. State of the art as of spam hunting, they are the best
    But at some point it gets boring.
    Thats remind me, some releases ago, a similar issue. A dev complained on forum about useless bugs reports, some kind of same problem as spams. So my answer(s) was to define the rules and make apport more clever, then we know how it work nowadays.
    So when registering, each field need to be hardening with sophisticated rules ( that means also lot more work and headaches for spammers)
    Last edited by dino99; April 19th, 2011 at 08:00 AM.

  4. #44
    Join Date
    Sep 2006
    Location
    France.
    Beans
    Hidden!
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: Forums News: Forums Spam IP Ban List

    Spammers will always find the little holes
    | My old and mostly abandoned blog |
    Linux user #413984 ; Ubuntu user #178
    J'aime les fraises.
    Nighty night me lovelies!

    | Reinstalling Ubuntu ? Please check this bug first ! |
    | Using a ppa ? Please install ppa-purge from universe, you may need it should you want to revert packages back |
    | No support requests / username changes by PM, thanks. |

  5. #45
    Join Date
    Mar 2009
    Location
    Buenos Aires, AR
    Beans
    2,325
    Distro
    Ubuntu

    Re: Forums News: Forums Spam IP Ban List

    That sound scary...

  6. #46
    Join Date
    Mar 2007
    Location
    Outer Milky Way
    Beans
    Hidden!
    Distro
    Kubuntu 12.04 Precise Pangolin

    Re: Forums News: Forums Spam IP Ban List

    Quote Originally Posted by CraigPaleo View Post
    That happened to me when I had DSL. Somehow everyone in Southwest Florida who used Embarq DSL was blocked from that forum for about two weeks.
    Actually, most ISPs rotate IP addresses (from a DHCP-assigned block of addresses). Blocking based on IP address doesn't work. You end up blocking too many legitimate users.

    Further, Tor doesn't work using servers -- it works using nodes. A Tor user becomes a Tor node only while using Tor. A Tor node often uses a legitimate IP address that is used for other purposes than Tor.

    Further, if the Tor node is using an IP address that is one of a bank of IP addresses used by an ISP, blocking the IP address (just because it has been used as a Tor node intermittently) will eventually cause the block of all the IPs used by that ISP.

    (That's the same problem for Torrent users).

    There are, of course, spam houses that issue lots and lots of spam from a few rather easily identifiable IPs. Most websites do not block by IP address unless there are multiple abuses from an IP address/block of addresses that is clear and substantial, though.

    IP blocking has never worked for my public websites -- too many legitimate users end up getting excluded.

    Only text scanning works for eliminating spam. This is a method that Wikimedia uses successfully, I believe.

    A list of keywords in posts are banned (which includes an ongoing, ever-growing list of spam and offensive website URLs), as well as a list of banned usernames.

    In addition posts from users with blank user agent fields are not allowed (almost all spam has a blank user agent field).

    Lastly, Captchas are pretty effective, at least when in the form of riddles. Solving riddles / puzzles (other than simple math puzzles) is not easily done by captcha bots.

    Text based captchas are ineffective these days, in my experience, because optical character readers are very good and the captcha bots solve them easily.

    It is very important, IMO, to have a readily available whitelist.

    As on Wikipedia and many other public venues, many petty arguments are waged by people adding competitors or people they disagree with to spam lists. Ubuntu forums itself has its share of petty arguments and "gurus" whose advice is misleading yet will do whatever it takes to have the last say/loudest voice.

    It is therefore important with any spam filter to have a whitelist method to include legitimate users.
    Last edited by perspectoff; April 20th, 2011 at 03:05 PM.

    UbuntuGuide/KubuntuGuide

    Right now the killer is being surrounded by a web of deduction, forensic science,
    and the latest in technology such as two-way radios and e-mail.

  7. #47
    Join Date
    Sep 2006
    Location
    France.
    Beans
    Hidden!
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: Forums News: Forums Spam IP Ban List

    ^ agreed.
    We do not use a spam filter, and block on IP for short periods of time (we have not been under a real spam attack in a long time. Last time I remember, we had to shut the forums down as over 5,000 accounts had been spamming with porn stuff, that was several years back and it took several hours to clean).

    I think the spam we get here is from real humans, from very different IPs (for ex the casino and gambling spam we are getting right now all use different IPs and IP blocks, no common pattern for username or email etc.). We have to either prevent them from registering or, once they register, annoy them and force them to post links in posts, not in the profile. These are easy, lots of eyes see them, report and they disappear quickly

    We were going to set up the post limit for profile customization but are trying to work with the current vB setup we have (some issues are tricky. We may have to shut the forums for maintenance at some point because the default vB user group is in use and is the one users get promoted to when they confirm the email. No way around that).
    | My old and mostly abandoned blog |
    Linux user #413984 ; Ubuntu user #178
    J'aime les fraises.
    Nighty night me lovelies!

    | Reinstalling Ubuntu ? Please check this bug first ! |
    | Using a ppa ? Please install ppa-purge from universe, you may need it should you want to revert packages back |
    | No support requests / username changes by PM, thanks. |

  8. #48
    Join Date
    Mar 2011
    Beans
    261

    Re: Forums News: Forums Spam IP Ban List

    I'm not sure how the actual mechanism works for banning IP addreses, or how deep you guys want to go, but normally browsers also send Operating System and Browser version along with the IP address, so maybe there would be a way to log the IP along with the OS and the Browser version.

    That way if you banned an IP address, and a couple days later the same IP address with a different OS and Browser was trying to access the forums, you might assume that the IP was given to a new user, so you could remove the ban.

    Of course that wouldn't prevent spammers from using a different OS/Browser, but it would be one more level of protection that spammers would have to deal with (and probably wouldn't even bother trying to defeat for the most part).

  9. #49
    Join Date
    Mar 2011
    Beans
    24
    Distro
    Ubuntu 10.10 Maverick Meerkat

    Question Re: Forums News: Forums Spam IP Ban List

    And what if someone spams using open proxies around the world?

  10. #50
    Join Date
    Feb 2007
    Location
    Chillin', USA
    Beans
    Hidden!

    Re: Forums News: Forums Spam IP Ban List

    I may get lengthy on this as I try to Teach along the way!
    I was on, what I call, the "Intranet", back in the early 1980's, my company gave me a TRS-100 http://en.wikipedia.org/wiki/TRS-80_Model_100 (One company I worked for made the Switches). Man is was the stuff, Burning Speed 300 Baud modem (actually fast due to no graphics and not many using). LCD display! Computers today not have anything on that, it was simply "Amazing!" (at the time) this "doodad" could connect you to a computer across the country (knowing the dial-in number), today not many computers amaze, they try with speed and HDD hoopla, but, that another story/debate. HeeHee.
    When the "Internet" came on-line I was there.
    I tell this story, because I like to share and then get to the real answer!

    In 28 Years! I have not used virus protection (that another story), true I have tested some for customers because they wanted it and I not see Free hurt, but, I teach them, Now see!! What I said? I TEACH them about security and safety.

    We can add, No Scripts, Ad Blockers, Fly Swatters, but, the best thing we can do is add Education!
    Spamers, Hackers, they got your number from FaceBook or Twatter, or whatever. What they not have is your common sense!
    You try this, they do that. Checkmate! It the game to them.
    But, they can not win against Educated Internet users!
    OK now a Real Life Example:
    A friend I have conversed with for about 4 years at the time! I get an Email from her and it say something like: "I have changed my email address, my new address is attached!"
    OK, what will you do? It came from her address and was actually verified?
    Myself; I waited until she came on-line and ask? She say no, I not do that! I say, Format (in her country they just re-format and install (having backup), it faster than spending days to try to fix.
    I tell her notify all your contacts "NOW!", which she did. No one got infected! Then I explain how she let her guard down (as she got the same email from a friend)!

    SOOoooooo! With all this said; maybe some common sense, everyone adding a little experience into the answer ( as I try to show) , and also, each of us reporting what we suspect as Spam!
    But, stopping it, I not sure. Yahoo Answers is a Spam cornucopia! Yet, when I see Spam, it not long before it deleted, why? The users report, maybe I am wrong!

    This all I can say; Educate! Think, be aware! But, Stopping? It a Chess-game over and over and the spamer know this; 1:1,000 not bad when your living on $500 usd per year "OR" less! Well maybe that just the Nigerians, and even there I believe there honest people, just the Country Internet Code being sold to those who can afford to pay! Maybe Russians "AND" maybe Americans (anyone can tap an impoverished country for Internet)!

    Now my Exit story!
    I guess I seen Spam here, I been accumulated to the Internet! It has become like I not even see it, as soon as I realize? I move on to the real answers. I may failed in reporting, guess my limited time here I thought others would. So, for that, I am sorry!
    I do try to share a little as a real person, and not always go to the direct answer, in hopes the information pertain to something!
    I never lie, but, what I say, may not always be true! Store Laptop; HP G60-445DX. Home_brew Desktop Asus A8R32-MVP Deluxe,AMD64 2.4GHz, 2GB RAM. Others!

Page 5 of 6 FirstFirst ... 3456 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •