PDA

View Full Version : Drug Spamming


Wifey
13 May 2006, 01:37
I have a question for y'all. Is it just me or have y'all had an influx recently of spammers with .ru e-mail addresses spamming your boards with drg company ads. I just had to censor about 30 different links as well as ban a few IP's.

How do y'all safeguard against this on your boards?

Just a couple examples of what I just dealt with...

A lot of urls ending in *.fullka.com

(Edit out a couple of life links to domains for drugs, MarcoH64)

Bernd
13 May 2006, 08:43
there is an anti-spam hack available for 3.5.x.

Boofo
13 May 2006, 09:18
Link, please?

Freesteyelz
13 May 2006, 09:55
There's also one for PM's. Anyway, here it is and the title's a doozy:

SpamBuster v1.0.0 (Stable): Identify, log and remove spam posts on your forum (http://www.vbulletin.org/forum/showthread.php?t=109258&highlight=anti-spam)

Boofo
13 May 2006, 09:59
There's also one for PM's. Anyway, here it is and the title's a doozy:

SpamBuster v1.0.0 (Stable): Identify, log and remove spam posts on your forum (http://www.vbulletin.org/forum/showthread.php?t=109258&highlight=anti-spam)

Does this work? Have you installed it?

Freesteyelz
13 May 2006, 10:15
I haven't installed it. My community doesn't get the random spam like general community forums. I just remember passing it by when I was looking for another mod. :)

Wifey
14 May 2006, 13:49
I'm still running 3.0.0, ugh. Alrighty I'm going to have to get my board upgraded. I need to remember the e-mail of the guy I contacted before about it so I can pay him to do it...

Thanks y'all :)

nsusa
17 May 2006, 20:29
Is the one listed here also for PMs?

COBRAws
01 Jun 2006, 11:20
Does this work? Have you installed it?
I have it installed. I added some "wildcards" so I can identify posts selling stuff. One of my major boards is about clubbing scene in Buenos Aires, we derive thousands of people everynight to different nightclubs.

We have a zero tolerance policy regarding ticket sales and promoting unauthorised Lists and VIP Pass. Well, this hack has helped our staff to track these messages down and delete them within seconds after being published.


Give it a try. The downside, i believe, is that my server load has increased a little bit. But I cant really tell if its because of this hack.

Cheers

Cyburbia
21 Jun 2006, 12:52
How do y'all safeguard against this on your boards?

1) Block registration from these addresses:

au.ru
bk.ru
fromru.ru
front.ru
go.ru
halyava.ru
hotmail.ru
id.ru
inbox.ru
land.ru
list.ru
mail.ru
mailgate.ru
newmail.ru
nextmail.ru
nm.ru
notmail.ru
ok.ru
pochta.ru
rambler.ru
ru.ru
sendmail.ru
yandex.ru
zmail.ru
gomail.com.ua
mail15.com

2) Block registration from any address containing .info and .biz.

3) Block the IP blocks belonging to Inhoster (http://www.google.com/search?hs=Jyg&hl=en&lr=&client=firefox-a&rls=org.mozilla%3Aen-US%3Aofficial&q=inhoster+spam&btnG=Search) domains using .htaccess, or better yet at the server level. (Inhoster is a spam, malware, phishing and bot-friendly Ukranian hosting service. I got hammered last week from bots with IPs in the Inhoster blocks.)

85.255.112.0 - 85.255.127.255
195.95.218.0 - 195.95.219.255
195.225.176.0 - 195.225.179.255

4) Ban the IP block assigned to Intercage (http://www.google.com/search?q=intercage+spam&start=0&ie=utf-8&oe=utf-8&client=firefox-a&rls=org.mozilla:en-US:official).

69.50.160.0 - 69.50.191.255

ChrisSy
27 Jun 2006, 21:47
I've been getting a lot of spam via the 'Contact Us' form lately, we get spam posts but nothing severe.

Wifey
27 Jun 2006, 23:14
I've been getting a lot of spam via the 'Contact Us' form lately, we get spam posts but nothing severe.


SAME HERE. That and registration problems.

I'm currently doing all the suggested IP/mail reg. bans. Thanks Cyburbia!

Chris-777
28 Jun 2006, 02:02
Does this work? Have you installed it?

That hack was a wee on the tempermental side for me.

1) Block registration from these addresses:

au.ru
bk.ru
fromru.ru
front.ru
go.ru
halyava.ru
hotmail.ru
id.ru
inbox.ru
land.ru
list.ru
mail.ru
mailgate.ru
newmail.ru
nextmail.ru
nm.ru
notmail.ru
ok.ru
pochta.ru
rambler.ru
ru.ru
sendmail.ru
yandex.ru
zmail.ru
gomail.com.ua
mail15.com

2) Block registration from any address containing .info and .biz.

3) Block the IP blocks belonging to Inhoster (http://www.google.com/search?hs=Jyg&hl=en&lr=&client=firefox-a&rls=org.mozilla%3Aen-US%3Aofficial&q=inhoster+spam&btnG=Search) domains using .htaccess, or better yet at the server level. (Inhoster is a spam, malware, phishing and bot-friendly Ukranian hosting service. I got hammered last week from bots with IPs in the Inhoster blocks.)

85.255.112.0 - 85.255.127.255
195.95.218.0 - 195.95.219.255
195.225.176.0 - 195.225.179.255

4) Ban the IP block assigned to Intercage (http://www.google.com/search?q=intercage+spam&start=0&ie=utf-8&oe=utf-8&client=firefox-a&rls=org.mozilla:en-US:official).

69.50.160.0 - 69.50.191.255

Great post man. :cool:

Wifey
28 Jun 2006, 21:57
Just wanted to add a quick thing to this.

I had someone register from a .es e-mail address. AND I have the image verification set up. So I blocked everything from a .es e-mail address.

AF-Brandy
29 Jun 2006, 07:41
Ton's of .ru spam recently, both on the forums and via Contact Us - on ALL of our forums...what a nightmare it's been grr...

Make Money?
17 Jan 2007, 23:39
Any spam killer updates?

Real pest now on my forum

mostly cel phones...

SBLNet
24 Jan 2007, 18:42
Is there any way of banning certain email suffixes from registering? ".ru" for example

Wifey
30 Jan 2007, 02:11
Is there any way of banning certain email suffixes from registering? ".ru" for example

Yep. In vbulletin options under user banning options you can block certain e-mail addresses. These are some I have blocked:

au.ru
bk.ru
fromru.ru
front.ru
go.ru
halyava.ru
hotmail.ru
id.ru
inbox.ru
land.ru
list.ru
mail.ru
mailgate.ru
newmail.ru
nextmail.ru
nm.ru
notmail.ru
ok.ru
pochta.ru
rambler.ru
ru.ru
sendmail.ru
yandex.ru
zmail.ru

or do .ru

Also, I installed a mod that requires the users answer a question (an easy one) -- the NoSpam! hack or something like that -- I haven't had ANY problems since I installed that :)

sv1cec
23 Apr 2007, 08:52
I have a simple solution, for antispamming, but it is based on vB 3.0.xx.

If some one is interested, write to me and I'll provide the code. If you have installed my AWS hack, even better, but it is not necessary. It basically checks the first post the spammer makes and tries to find words you have predefined. It counts the occurence of these words and if the counter exceeds a predefined limit, it blocks the post and bans the poster. No more spamming for my board even from the Contact Us form.

Please keep in mind that this is not a ready-made hack, I will give you instructions on how to do it, but it is not a cut-and-paste installation thing.

clarkstoncracke
24 Apr 2007, 00:00
http://www.vbulletin.org/forum/showthread.php?t=124828

Its that simple.

I went from 50+ spams a day to ZERO.

Just ask a question that only people would know who want access to your site.

I have an offroading website, and my questions are like:

"What car manufacturer makes the Bronco"

Those foreign spamming jerks probably don't speak english.

sv1cec
24 Apr 2007, 05:47
Well, the image verification takes care of that, the question alternative is a good one too for those visually impaired, but what about those who register to spam? I had several of those, selling cellular phones etc. No more.

clarkstoncracke
24 Apr 2007, 12:44
Well, the image verification takes care of that, the question alternative is a good one too for those visually impaired, but what about those who register to spam? I had several of those, selling cellular phones etc. No more.

image verification does not work 100% of the time.
I'm almost positive that all the spams I used to receive were from bots, and they would get through the image verification.

I've been spam free for 25 days!

Brad
24 Apr 2007, 23:45
image verification does not work 100% of the time.
I'm almost positive that all the spams I used to receive were from bots, and they would get through the image verification.

I've been spam free for 25 days!
We've had a number of bots but most of them seem to be registered by a real person. Often times we'll see an account registered months ago (with no or one post) go on a spamming spree.