Advertisement:

Author Topic: Russian Spam Bots  (Read 592 times)

Offline Computer Hack

  • Newbie
  • *
  • Posts: 8
Russian Spam Bots
« on: December 21, 2018, 01:52:11 PM »
Please note this is the second time I have had to type this post because of your "I am not a robot" capture.

I thought that the robot capture image was an add but by the time I realised it wasn't, what I had already typed was gone. I had just clicked on post and If I had known I would have at least copied my post to the clipboard.

Please warn others to save them a bit of time!

However, my post is to ask what I can do to stop "Russian Spam Bots" from signing up on my forums! The forum in question has only one mod installed and that is the spam bot mod that displays a picture of letters and mine was set to medium and I had three questions setup.

I checked the logs and most of the "IP" addresses were from Russia and most of the email addresses were from yandex.com.

I added a fourth question to the signup procedure but the next day another 30 new spam members were signed up.

What I have done now is to implement a ban on yandex.com emails and also I have changed the settings to admin approval only (which I don't really want to do!) and the spam seems to have stopped.

I don't really want to add more mods as I think the core version of SMF is stable and gives me just what I need. The more mods you add the more risk you are taking that is the way I see it!

Any help without more mods would be appreciated!

Thank you for your time!

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 70,783
    • StoryBB/StoryBB on GitHub
Re: Russian Spam Bots
« Reply #1 on: December 21, 2018, 01:53:08 PM »
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Computer Hack

  • Newbie
  • *
  • Posts: 8
Re: Russian Spam Bots
« Reply #2 on: December 21, 2018, 02:08:35 PM »
I did not realise that you could set 10 questions and then select how many the user had to answer. I thought you just created a number of questions and the user had to answer them to gain access.

Offline a10

  • Charter Member
  • Sr. Member
  • *
  • Posts: 840
Re: Russian Spam Bots
« Reply #3 on: December 21, 2018, 02:09:05 PM »
https://www.simplemachines.org/community/index.php?topic=531660.msg3776163#msg3776163

Make 15-20 questions in that style (use imagination to make up type of questions). Set 2-4 active. Say goodbye to bots, instantly stopped, with zero problems for real people.

Now, a few "humanbots" may show up now and then (seen 1 during the last 6 months on my forum :O). If a nuisance, evaluate adding a spam look-up mod (f.ex. stopforumspam.com).
2.0.15, ssl, php 7.1.25, MySQL 10.1.30-MariaDB-1~xenial
Mods: Contact Page, Like Posts, Responsive Curve, Search Focus Dropdown.

Offline Computer Hack

  • Newbie
  • *
  • Posts: 8
Re: Russian Spam Bots
« Reply #4 on: December 21, 2018, 02:18:17 PM »
I thought a few humans might have been involved because once I changed the three question to four about 30 new accounts were created and I thought that was pretty low for a spam bot so I thought they might be trying to confuse me by using both spam bots and human intervention. Some of the emails were from gmail but most were from yandex.com which I have googled and found it to be a Russian company.

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 57,974
  • Gender: Male
    • Kindred-999 on GitHub
Re: Russian Spam Bots
« Reply #5 on: December 21, 2018, 02:26:12 PM »
seriously.
pool up 30 questions
ask 1-2 for registration.

poof. very few, if any, bots for at least a year...
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline a10

  • Charter Member
  • Sr. Member
  • *
  • Posts: 840
Re: Russian Spam Bots
« Reply #6 on: December 21, 2018, 02:34:04 PM »
Try the question system mentionned above, and report back.
Millions of bot registations attempts stopped on my forum over the years (counting action=register in server logs), while only having to deal with something like 5 human bots pr year.

If practical for one's type of forum, keeping registration admin aproval on is a good extra wall that will pick up any human rats. Do lookups on ip's etc on google, stopforumspam \ cleantalk etc will surely show up if a spam hit.
2.0.15, ssl, php 7.1.25, MySQL 10.1.30-MariaDB-1~xenial
Mods: Contact Page, Like Posts, Responsive Curve, Search Focus Dropdown.

Offline GigaWatt

  • The Smiley Guy
  • Support Specialist
  • SMF Hero
  • *
  • Posts: 1,870
  • Gender: Male
    • Macedonian electronics forum
Re: Russian Spam Bots
« Reply #7 on: December 21, 2018, 08:49:00 PM »
Please note this is the second time I have had to type this post because of your "I am not a robot" capture.

It's common practice on many forums. The first few posts of any new user have to pass a captcha verification in order for the user to submit his post.

However, my post is to ask what I can do to stop "Russian Spam Bots" from signing up on my forums! The forum in question has only one mod installed and that is the spam bot mod that displays a picture of letters and mine was set to medium and I had three questions setup.

As Steve posted in another thread...

To expand on the 'verification questions' portion in the link Sh@mbles gave you:

http://www.simplemachines.org/community/index.php?topic=531660.msg3776163#msg3776163

EDIT: Oh, a10 already posted :).

Follow a10's advice, I've had 0 bot registrations since I've implemented his questionnaire template ;)
"This is really a generic concept about human thinking - when faced with large tasks we're naturally inclined to try to break them down into a bunch of smaller tasks that together make up the whole."

"A 500 error loosely translates to the webserver saying, "WTF?"..."

Offline delta5

  • Jr. Member
  • **
  • Posts: 265
    • @@kd8hmo on Twitter
    • FedUpWithLiberals.com
Re: Russian Spam Bots
« Reply #8 on: December 22, 2018, 01:31:53 AM »
Install the stopforumspam.com mod. Set it to check everything. I use it and haven't had a spam bot get through yet.

Guest
Apply Filter: Only show the error messages of this IP address 192.88.135.15   
    Reverse chronological order of list Today at 12:57:36 AM
Apply Filter: Only show the error messages of this session 63d2d215655d325a741ea2976565ed77
Apply Filter: Only show the errors of this type Type of error: General
Apply Filter: Only show the error messages of this URLhttps://www.fedupwithliberals.com/index.php?action=register2Apply Filter: Only show the errors with the same messageThe user Stephania9 with Email StephaniaGolden2@kikie.club (IP 192.88.135.15) is a Spam, please contact forum administrator.
   Apply Filter: Only show the error messages of this member Guest

The spammer IP is not showing correctly, because of our sucuri firewall.

Offline Computer Hack

  • Newbie
  • *
  • Posts: 8
Re: Russian Spam Bots
« Reply #9 on: January 09, 2019, 04:12:50 PM »
I would like to take this opportunity to thank all the people who have posted here to help me out! I am truly grateful!

First I would like to tell everyone that I took the advice and increased the number of questions asked to 3 and I increased the possible answers to about 20 and the spam sign ups seem to have stopped.

I also reviewed the type of questions so they did not include straight yes or no answers and did my best to avoid using the answer in the question.

I am now trying to think of another ten or twenty questions I can add to my list to make it even harder for the spam bots.

I consider this problem solved and hope others can learn from my mistakes!

THANK YOU ALL!