Advertisement:

Author Topic: Spambot keeps returning  (Read 752 times)

Offline peter500

  • Semi-Newbie
  • *
  • Posts: 10
Spambot keeps returning
« on: November 12, 2017, 04:39:06 AM »
I have strange thing. A spambot called JerrodET keeps on spamming.
Well, that is what it is made for, but I had it banned the first time AND I have account admin approval checked.
How is this possible? It comes right in and even with the same name. And he still is on the banned list.

I have no mods installed or other changes since the conversion from VBulltin.

Offline aegersz

  • Sophist Member
  • *****
  • Posts: 1,109
  • Gender: Male
  • "mods" junkie
    • dopetalk
Re: Spambot keeps returning
« Reply #1 on: November 12, 2017, 05:06:46 AM »
There are some good anti-spam mods that i haven't had to use because nobody really bothers my site any more.

have you tried banning it via it's full IP address range ?

sorry if this is of little help but i thought it worth mentioning.

I'm also puzzled as to how they can start posting without admin approval (?)
SMF 2.0: 135+ mods installed (the full list can be seen at http://forum.drugs-and-users.org/index.php/topic,3301)

Offline peter500

  • Semi-Newbie
  • *
  • Posts: 10
Re: Spambot keeps returning
« Reply #2 on: November 12, 2017, 05:17:41 AM »
Thanks for your reply.

I do not have a anti-smap mod yet since I am still working on it after conversion. I thought I could keep them out with admin approval. And it does work since I see many smappers stuck there.

I run boards for a long time, but never seen this strange thing happen.

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 54,985
  • Gender: Male
    • Kindred-999 on GitHub
Re: Spambot keeps returning
« Reply #3 on: November 12, 2017, 09:05:10 AM »
What mods are you running?
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Black Tiger

  • Full Member
  • ***
  • Posts: 503
  • Gender: Male
    • Satellite Fun
Re: Spambot keeps returning
« Reply #4 on: November 12, 2017, 09:56:59 AM »
What mods are you running?
Ehmz...?
Quote from: peter500
I have no mods installed or other changes since the conversion from VBulltin.
Greetings, Black Tiger

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 54,985
  • Gender: Male
    • Kindred-999 on GitHub
Re: Spambot keeps returning
« Reply #5 on: November 12, 2017, 11:21:48 AM »
Lol... whoops...reading on a mobile and missed that.

The only time we have ever seem spambots bypassing the reg process has been because someone installed some sort of registration mod that was badly formed
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Study Force

  • SMF Hero
  • ******
  • Posts: 3,100
    • @studyforceps on Twitter
    • Study Force
Re: Spambot keeps returning
« Reply #6 on: November 12, 2017, 11:50:00 AM »
Installing recaptcha by Google should prevent future bots.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 67,873
    • Arantor on GitHub
Re: Spambot keeps returning
« Reply #7 on: November 12, 2017, 12:36:34 PM »
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 6,909
  • Too long in the wasteland
Re: Spambot keeps returning
« Reply #8 on: November 12, 2017, 03:21:17 PM »
3/3/2017 – Update #2:

It seems that Google has fully patched this: raising the minimum number of digits from 4-5 to 10-12 and introducing new digit recordings that are harder to speech recognize, as well as background noise. The POC has stopped working as a result. It’s been fun while it lasted



Offline peter500

  • Semi-Newbie
  • *
  • Posts: 10
Re: Spambot keeps returning
« Reply #9 on: November 12, 2017, 04:46:05 PM »
Thank you all for thinking with me. I will add captcha, that will probaly do the trick.
Is the number version better than the 'I am not a robot' version?

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 54,985
  • Gender: Male
    • Kindred-999 on GitHub
Re: Spambot keeps returning
« Reply #10 on: November 12, 2017, 07:00:15 PM »
Not actually necesarry.

Have you read the article from the faq on preventing spam?

Good questions are the number one best way to prevent spammers
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Steve

  • Support Specialist
  • SMF Hero
  • *
  • Posts: 3,854
  • Gender: Male
  • I have not yet begun to procrastinate.
Re: Spambot keeps returning
« Reply #11 on: November 12, 2017, 07:04:29 PM »
Please do not PM me for support.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 67,873
    • Arantor on GitHub
Re: Spambot keeps returning
« Reply #12 on: November 13, 2017, 02:05:41 AM »
3/3/2017 – Update #2:

It seems that Google has fully patched this: raising the minimum number of digits from 4-5 to 10-12 and introducing new digit recordings that are harder to speech recognize, as well as background noise. The POC has stopped working as a result. It’s been fun while it lasted




Just because one guy stopped updating his proof of concept does not mean those who come after him stopped.

It's also still possible to buy 1000 completed CAPTCHAs for $2 USD
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 6,909
  • Too long in the wasteland
Re: Spambot keeps returning
« Reply #13 on: November 13, 2017, 12:07:14 PM »
Point is, all anti-spam measures are constantly under attack, and must be continuosly updated.  Don't think you'll ever find one that can't be beat.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 67,873
    • Arantor on GitHub
Re: Spambot keeps returning
« Reply #14 on: November 13, 2017, 12:31:25 PM »
That was the point being made, yes, that unilateral "do this to fix the problem" advice doesn't work here.

It also doesn't work in China where Google Recaptcha is supposed to be blocked.
To assume is to hope that those who came before had the presence of mind and capacity to implement the dreams of those who would come after.

You either die a hero or live long enough to see yourself become the villain. It seems you have chosen which, and now I must do the same.

Offline Black Tiger

  • Full Member
  • ***
  • Posts: 503
  • Gender: Male
    • Satellite Fun
Re: Spambot keeps returning
« Reply #15 on: November 13, 2017, 01:13:47 PM »
It's like with all kind of encryption and security. They constantly are trying to find something new or something to bypass it.
As a result, the ones who protect themselves are always 1 step behind when something is broken, a flaw is found or a new trick is discovered.

That's why I agree with Kindred on this:
Quote
Good questions are the number one best way to prevent spammers
And best change those regularly to something else. Little work for adequate prevention.
Greetings, Black Tiger

Offline a10

  • Charter Member
  • Sr. Member
  • *
  • Posts: 733
Re: Spambot keeps returning
« Reply #16 on: November 13, 2017, 05:34:32 PM »
As an example: Re: Spammers and spamming...

Still using that question system, around 15 with 3 active, all bots failing, 100' thousands of registration attempts stopped (ref. server logs) every year. No sign whatsoever of them cracking this. A few "human bots" registering (one or two every couple of months), immediately deleted and no big deal, to stop this final trickling one may implement something like the stopforumspam mod in addition to questions.
2.0.14, php 7.0.24, ssl. Mods: Contact Page, Like Posts, Responsive Curve.