Browse › Community ›Announcements

Idea To Stop Spambots (opinions Needed)

Started by Indecisive · Oct 16, 2006 · 52postsSMF 2010–26

IndecisiveOct 16, 2006, 10:04 am · #1

okay, the spambot thing is getting insane and I've only got one idea that MAY work.  

Basically, everybody right now is on the "member" user group that has the regular permissions(hereafter reffered to member1).

However, I'm thinking of making a second "member" user group (hereafter reffered to member2).  

Basically, everybody is on member1 right now and everybody who registers is on member1 automatically.  However, I can set it so that once you reach a certain post count, you'll change user groups...  In this case, to member2.  

My idea is this.  Restrict the "member1" accounts to only being able to post replies(as you guys can see, none of the bots post replies, only make new topics).  And then when people's post counts go up to say...2 or 3...then they can post topics.  

The problem with this, is that when I set up member1 to upgrade people to member2, EVERYBODY will be in member1 until they make a post after I set up the upgrade system no matter if you've got 1 post, or 40000 posts.  

Of course I'll make a thread for you guys to just make your first reply post to if that needs to be done, and I'll post up a sticky for the noobs when they first register and what not.  

Just seeing if you guys want to try this.  I mean, it might be in complete vain cause the bots might "figure" it out.  Thoughts?

EternalSwapOct 16, 2006, 11:15 am · #2

So until the first reply, they're not able to make a thread?

Good idea.

IndecisiveOct 16, 2006, 11:23 am · #3

that's the idea behind it.  Don't know how well it'll work, and everybody will need to post up a reply in something to swtich member groups so they can post new topics.

200SXXEnotchbck86Oct 16, 2006, 1:00 pm · #4

And the topic should of course be an intro to ones self, if it will reduce and possibly eliminate these dang bots.  Then I am all for it.

sam31183Oct 16, 2006, 1:10 pm · #5

I say lets do it!

NamelessOct 16, 2006, 2:29 pm · #6

seems like a good idea

Jsvob03Oct 16, 2006, 4:12 pm · #7

sounds good. but would this work?...and im not at all sure how this works so bear with me....

When you sign up for sites and such, there is typically a section that has you copy the "handwritten" letters and numbers, so as to avoid automatic programs from signing up. Would that sort of verification work, or am i completely on the wrong page?

a good example is on the myspace page.

http://signup.myspace.com/index.cfm?fuseac...08-77c95403c1b4

near the bottom you'll see what i mean..

SmashedGlassOct 16, 2006, 4:15 pm · #8

Thats an idea Jsvob, and there's also the idea of having 'new' members get screened by a moderator.

Smalltar_The_ImpalerOct 16, 2006, 4:56 pm · #9

Problem with new members being screened, is that you still don't know whether they're real users or spambots... Or at least I wouldn't think so, and the text verification doesn't really work in my memory, because on my forums, we get a new spambot every day even though we have that verification (then again, they're free forums, so it's possible that verification is just jank). I'd say, why not try the user group thing. If they're really just bots, it may be a good enough deterrent. Set it to three posts for new users or something, and it should work just fine.

NamelessOct 16, 2006, 5:01 pm · #10

Plus i remember something about the letter recognition thing not working with club s12s provider.

IndecisiveOct 16, 2006, 5:25 pm · #11

we can't use that verification method because we need a special type of library, and our host doesn't provide it.

oldschoolsilviaOct 16, 2006, 7:08 pm · #12

I say try it and see what happens

IndecisiveOct 16, 2006, 9:12 pm · #13

ok, good enough for me.  We'll do it and see how well it works

PremoOct 17, 2006, 11:46 pm · #14

word.  a few other forums operate like that.  that and they can only reply in the newbie forums at first to keep the flood down, etc.

freelpNov 8, 2006, 4:59 pm · #15
Indecisiveokay, the spambot thing is getting insane and I've only got one idea that MAY work.  

Basically, everybody right now is on the "member" user group that has the regular permissions(hereafter reffered to member1).

However, I'm thinking of making a second "member" user group (hereafter reffered to member2).  

Basically, everybody is on member1 right now and everybody who registers is on member1 automatically.  However, I can set it so that once you reach a certain post count, you'll change user groups...  In this case, to member2.  

My idea is this.  Restrict the "member1" accounts to only being able to post replies(as you guys can see, none of the bots post replies, only make new topics).  And then when people's post counts go up to say...2 or 3...then they can post topics.  

The problem with this, is that when I set up member1 to upgrade people to member2, EVERYBODY will be in member1 until they make a post after I set up the upgrade system no matter if you've got 1 post, or 40000 posts.  

Of course I'll make a thread for you guys to just make your first reply post to if that needs to be done, and I'll post up a sticky for the noobs when they first register and what not.  

Just seeing if you guys want to try this.  I mean, it might be in complete vain cause the bots might "figure" it out.  Thoughts?


hope this works
IndecisiveNov 8, 2006, 5:48 pm · #16

it's been working so far.

drftnassmofoNov 12, 2006, 2:57 pm · #17

thats a good idea..weirded me out when i couldnt post tho.  i thought i was banned or something for not enough recent activity

martinprintNov 15, 2006, 2:32 pm · #18

is it okay if I put up an animated avatar on my profile?

imprtstrtracerDec 16, 2006, 8:37 pm · #19

Yeah i dont like spam bots... this site is kinda confusing to me though i don't know why but it is..... i just wanted to post hi in the noob section.....

winez31Feb 12, 2007, 8:17 am · #20

not my top choice but it works

RedneckFeb 12, 2007, 9:46 am · #21

Yeah these spambots are outta control.

NeedCAforS13Mar 7, 2007, 3:23 pm · #22

hahahha they posted in the thread about them. thats awesome.

apparently they "figured it out"

panda s12Mar 7, 2007, 6:15 pm · #23

i found this way to actually break spambots lol

you could make it like ziptied and only let new people in who are refered by people

Shaunp38Mar 7, 2007, 11:03 pm · #24

I hope it works.

G-RiderMar 7, 2007, 11:38 pm · #25

seriously... up the moderator count and/or setup validation on registration. thats really the only way. unless you find scripts to stop them.

jeffwins24Mar 8, 2007, 5:11 pm · #26

gee wounder who voted no???

alundraMar 8, 2007, 7:57 pm · #27

Any chance for a forum upgraded?

G-RiderMar 8, 2007, 8:17 pm · #28
jeffwins24gee wounder who voted no???

sarcasm? who?
Cavi MikeMar 8, 2007, 8:44 pm · #29

I voted no also. The bots make posts too, not just make new threads PLUS most new users join to ask questions which requires making a new topic, they don't join to chit-chat. This is a terrible idea, it doesn't make any sense.

IndecisiveMar 9, 2007, 3:09 am · #30

it was working fine up until a week or so ago.  Seems like the scripts were rewritten to take this idea into account.  

Empedocles99Mar 9, 2007, 5:02 am · #31
Indecisiveit was working fine up until a week or so ago.  Seems like the scripts were rewritten to take this idea into account.

Indy, you should check your logs to see what ips are posting this rubbish. This round of spammers can probably be blocked by your web server relatively easy.

For kicks, I did some research on the sites that are being spammed all over the internet currently... Their fake isp is www.sitehostingonline.com which is a false front for a nonexistent isp. Their web servers live at: 85.255.119.* and they may be using those computers to post this garbage. If you see those ips in the server logs, you'll know that's who is posting this crap.
jeffwins24Mar 9, 2007, 10:15 pm · #32

yay now we now what to look for i think??? wait what if someone made sn's and gave them to his friends with the password???

jeffwins24Mar 12, 2007, 6:44 am · #33

there doing it again

Cavi MikeMar 12, 2007, 8:23 am · #34
jeffwins24yay now we now what to look for i think??? wait what if someone made sn's and gave them to his friends with the password???
Or how about his friend just makes his own and does it! Wow! What a great idea!posted image

Dude, they're computer generated. Now will you please just stop posting and go back to browsing? Please?
TheXevMar 15, 2007, 6:35 pm · #35

I voted no.  I guarantee this idea will backfire in a big way.  How do I know this?  I run my own forum as well.  Look at the member list on my forum in descending order, what do you notice?  That's right, not ONE spam account, and not one has been posted successfully since mid January.  revolve-trans.org alone receives around 9000-11000 hits an hour, and with that many hits, spam bots are sure to follow.

The first key to understanding how to fight spam is to understand why spammers post.  Even with out posting in forum threads, spammers have a lot to gain by creating users and only posting in their forum profile.  The reason spammers do this is to elevate their sites ranking on google.  Doing this insures that even more people will go to their spam site via google so they can make more money.  Armed with these basic facts now, its time to fight spam!

Now, I want you to understand why I voted no.  The biggest problem I am having right now is the aftermath of the measures I took against spam before implementing a few mods to the forum.  The first was to create a "newb central" where all newbs had to post their first post to basically prove they weren't a spam bot account.  As you can see from a few of the comments in response, that wasn't too well received.  I've done away with the section since creating this new story, trying to figure out what people don't like about my forum.

Back in December of 2006, I was fed up with spam bots.  I was removing between 35-40 a day!  Something else had to be done; manual administration was out of the question now, even with two admins doing something about it.  I knew one sure fire way to remove spam accounts was to install an OPM or "Open Proxy Monitor."  We had moved to an IRC server with one of these on it, and it stopped people from banning evading and spamming our chat room completely.  So, I found a really awesome OPM for phpBB.  Cut the spam bot count down by about 5-8 a day.  Not quite the massive number I was expecting, but it is averaging around 40 a week at the current time (since retweaking what ports are scanned for Open Proxies).  Something else had to be done.

I looked on phpBB.com's forums for awhile, trying to find out what other admins where doing to stop spam on their forums.  Low and behold I came across Anti-Spam ACP.  Using this little mod gave the forum a few nifty features.  The first was a new randomized series of captcha (aka the little numbers you enter on registration).  This stops nearly all bots that target original phpBB installs.  Then, it also gives you the option of disabling curtain fields on registration, such as signature, website address, and stuff like "AIM, ICQ, MSN etc" contact.  These fields can be enabled for a users in their control panal after a fixed amount of post that you set, or never enabled at all!  So bots that are scripted to send a website address and email are stopped dead in their tracks!

The key thing is to find similar mods that will accomplish the same things for Invision Power Board.  I don't really have much time to find anything that might accomplish the same thing, but I hope I at least gave you enough of an idea of what you should look for.  Between Anti-Spam ACP and OPM, 170 spam attempts have been blocked in the last week alone!  That's an amazing number.

I'm warning you against your method so you won't make the same mistake I did at first.  When you start rounding up users like that, it scares off users from coming to the forum and makes you look bad.  That is how my users see my forum at this point, so now I got some real fences to mend.  This forum is more active then mine, so try your best to keep it that way, okay? lol

jeffwins24Mar 16, 2007, 1:34 pm · #36
TheXevI voted no.  I guarantee this idea will backfire in a big way.  How do I know this?  I run my own forum as well.  Look at the member list on my forum in descending order, what do you notice?  That's right, not ONE spam account, and not one has been posted successfully since mid January.  revolve-trans.org alone receives around 9000-11000 hits an hour, and with that many hits, spam bots are sure to follow.

The first key to understanding how to fight spam is to understand why spammers post.  Even with out posting in forum threads, spammers have a lot to gain by creating users and only posting in their forum profile.  The reason spammers do this is to elevate their sites ranking on google.  Doing this insures that even more people will go to their spam site via google so they can make more money.  Armed with these basic facts now, its time to fight spam!

Now, I want you to understand why I voted no.  The biggest problem I am having right now is the aftermath of the measures I took against spam before implementing a few mods to the forum.  The first was to create a "newb central" where all newbs had to post their first post to basically prove they weren't a spam bot account.  As you can see from a few of the comments in response, that wasn't too well received.  I've done away with the section since creating this new story, trying to figure out what people don't like about my forum.

Back in December of 2006, I was fed up with spam bots.  I was removing between 35-40 a day!  Something else had to be done; manual administration was out of the question now, even with two admins doing something about it.  I knew one sure fire way to remove spam accounts was to install an OPM or "Open Proxy Monitor."  We had moved to an IRC server with one of these on it, and it stopped people from banning evading and spamming our chat room completely.  So, I found a really awesome OPM for phpBB.  Cut the spam bot count down by about 5-8 a day.  Not quite the massive number I was expecting, but it is averaging around 40 a week at the current time (since retweaking what ports are scanned for Open Proxies).  Something else had to be done.

I looked on phpBB.com's forums for awhile, trying to find out what other admins where doing to stop spam on their forums.  Low and behold I came across Anti-Spam ACP.  Using this little mod gave the forum a few nifty features.  The first was a new randomized series of captcha (aka the little numbers you enter on registration).  This stops nearly all bots that target original phpBB installs.  Then, it also gives you the option of disabling curtain fields on registration, such as signature, website address, and stuff like "AIM, ICQ, MSN etc" contact.  These fields can be enabled for a users in their control panal after a fixed amount of post that you set, or never enabled at all!  So bots that are scripted to send a website address and email are stopped dead in their tracks!

The key thing is to find similar mods that will accomplish the same things for Invision Power Board.  I don't really have much time to find anything that might accomplish the same thing, but I hope I at least gave you enough of an idea of what you should look for.  Between Anti-Spam ACP and OPM, 170 spam attempts have been blocked in the last week alone!  That's an amazing number.

I'm warning you against your method so you won't make the same mistake I did at first.  When you start rounding up users like that, it scares off users from coming to the forum and makes you look bad.  That is how my users see my forum at this point, so now I got some real fences to mend.  This forum is more active then mine, so try your best to keep it that way, okay? lol

there doing it again i say lets try this guy's idea?? what you say
starbucksMar 16, 2007, 1:50 pm · #37

Indy, i know this site costs money to run.. and spam bots would not want to pay to post spam. why dont you guys charge like a dollar a month to be a site member. i think everyone that likes the site, would not have a problem with paying twelve dollars a year for it... i would not mind helping the site out at all either, or stopping the spam lol.

jeffwins24Mar 16, 2007, 4:00 pm · #38

thats fine and all that but i don't think that will stop the bots? OR will IT ????

Cavi MikeMar 17, 2007, 6:51 am · #39
starbucksIndy, i know this site costs money to run.. and spam bots would not want to pay to post spam. why dont you guys charge like a dollar a month to be a site member. i think everyone that likes the site, would not have a problem with paying twelve dollars a year for it... i would not mind helping the site out at all either, or stopping the spam lol.
Are you going to mail a check for a dollar every month? Sure you will. Then what is Indy supposed to do, bring 1000 $1 checks to the bank every month and then make sure he reinstates each and every account every month? Listen to what you're saying man, it would be easier for him to delete 50 bots a day, let alone 2.

Now you're prolly thinking 'Just pay through PayPal,' well not everyone has or plans to ever use a PayPal account due to the crazy amount of internet fraud and some don't even have a checking account to wire money from.

But, the most important thing, no one will even bother to sign up and the site will disappear. If you ever remember anything about the internet, remember this:

If it's on the internet, it's free.

That also means that if it has to be paid for, it will be found somewhere else for free.
Smalltar_The_ImpalerMar 17, 2007, 10:00 am · #40

Agreed, that just wouldn't work too well for the community. I mean, especially for the lurkers who rarelt post anyway. I think TheXev is on to something. There has gotta be some anti spam H4X programs around this infrastructure of tubes we call the Internets.

TheXevMar 17, 2007, 10:04 pm · #41
http://forums.invisionpower.com/index.php?showtopic=229949

Link to an interesting thread with an interesting mod that might prove useful.
erik_200sxdriftMar 18, 2007, 12:28 am · #42
TheXevhttp://forums.invisionpower.com/index.php?showtopic=229949

Link to an interesting thread with an interesting mod that might prove useful.
thats a good idea!!
jeffwins24Mar 19, 2007, 7:26 pm · #43

alright this shit has got to stop have you seen what naked girl post up
 
now iv'e been thing ether our mod team dose'nt give  a shit or there out getting layed? but this fucking shit has to stop.i mean for real PORN on our website if it was mine i'd be pissed as hell you guys gota do something!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Smalltar_The_ImpalerMar 20, 2007, 10:43 am · #44

You seem awfully vexed about this Mr. Jeff. Me, I'm always up for free titties. Better then any of the other spammers that just posted links.

jeffwins24Mar 21, 2007, 6:51 pm · #45

anyway i'm pissed off not cause of the booby part but would you like bot's coming to your site and posting up porn while other poeple's thread's get pushed down.

cjcushingMar 29, 2007, 10:43 pm · #46

Um I'm not sure. I guess it all depends on who's threads would be pushed down?

@^*FeNdERbeNdeR*^@Apr 22, 2007, 4:01 am · #47

Is there not a "what letters are in the box" type clearance thing before you can join as a member as in at registration stage?

Hell, the bloody things usually tell me I'm wrong and won't let me sign up

Our CS:S clan server doesn't allow anyone with less than 5 posts to post a url. Could also be worth considering?

deadpirateMay 15, 2007, 3:21 pm · #48

how many active moderators do we have???

kickinDCsMay 15, 2007, 11:56 pm · #49

haha yea you can always make deadpirate a mod,belive me he has no life and sits on the computer 10 hrs. a day when he's not at my house or at the track with the team. and you cant say its not true ross!lol

@^*FeNdERbeNdeR*^@May 16, 2007, 1:10 am · #50
deadpiratehow many active moderators do we have???

Not enough