Closed Thread Icon

Topic awaiting preservation: Are they getting smarter or am I getting stupider? (Page 1 of 1) Pages that link to <a href="http://ozoneasylum.com/backlink?for=26407" title="Pages that link to Topic awaiting preservation: Are they getting smarter or am I getting stupider? (Page 1 of 1)" rel="nofollow" >Topic awaiting preservation: Are they getting smarter or am I getting stupider? <span class="small">(Page 1 of 1)</span>\

 
zavaboy
Bipolar (III) Inmate

From: f(x)
Insane since: Jun 2004

posted posted 08-09-2005 01:55

I just found out today that a spam bot has posted a whole bunch of stuff on my site. I cleared all posts based on it's IP address as soon as I could and then blocked the IP from my site. Now, how can I keep this from happening again without any form requring some sort of pass code? I'm also wondering if I can do anything else about the spam bot in subject, like report the IP address or something.

A total of 60 posts were made by the spam bot, 58 (news comments) of them were posted today, the other 2 (submitted links) were caught by google unfortunetly.

zavaboy
Bipolar (III) Inmate

From: f(x)
Insane since: Jun 2004

posted posted 08-09-2005 02:09

Uh oh... I just found 4 more posts from other spam bots...

poi
Paranoid (IV) Inmate

From: France
Insane since: Jun 2002

posted posted 08-09-2005 02:19

You may consider to put a Captcha on your site and/or to grab a spam domain/url/email/ip blackList online and filter fields of your comment form.

zavaboy
Bipolar (III) Inmate

From: f(x)
Insane since: Jun 2004

posted posted 08-09-2005 02:53

Hmmm... I don't know... maybe a captcha is something I need but don't want. I should consider adding one to my site. Thanks poi.

I'll see what I can do, since I'm a GD freak.

Iron Wallaby
Paranoid (IV) Inmate

From: USA
Insane since: May 2004

posted posted 08-09-2005 18:15

You could take the Slashdot/Livejournal/whatever-the-heck approach and require the poster to type the contents of a dynamically-generated image into the form as a confirmation that they're human.

---
Website

Tyberius Prime
Paranoid (IV) Mad Scientist with Finglongers

From: Germany
Insane since: Sep 2001

posted posted 08-10-2005 12:40

which is just what an image based captcha does.

honestly, just (randomly) renaming the field, or haveing to enter a text printed number does usually a pretty good job.
Most of these attack scripts are not that smart - and they will hardly spend time to work on your web page.

so long,

->Tyberius Prime

zavaboy
Bipolar (III) Inmate

From: f(x)
Insane since: Jun 2004

posted posted 08-11-2005 20:21

Thanks TP! I thought about randomly renaming the field names but I didn't know if it would help. That way the user doesn't need to provide extra just so I can see if that user is actuly a person. If this plan doesn't work (I'm not saying I'm not expecting it to work), I'll have to go with the captcha.

zavaboy
Bipolar (III) Inmate

From: f(x)
Insane since: Jun 2004

posted posted 09-03-2005 00:41

I tried random field names... didn't cut it. 20 some bots got to my site between when I added it and found it not working.

So I added the captcha which looks like it's doin the job. I made it from scratch, so let me know if there's any improvements that may help protect my site better.

Check it out here!

Emperor
Maniac (V) Inmate

From: Cell 53, East Wing
Insane since: Jul 2001

posted posted 09-03-2005 01:55

Was a Russian pimping pharmaceuticals and socket servers? I just had something similar.

___________________
Emps

The Emperor dot org | Revenant: The Zombie Magazine | Wonders | Justice for Pat Richard | FAQs: Emperor | Site Reviews | Reception Room

if I went 'round saying I was an Emperor just because some moistened bint had lobbed a scimitar at me, they'd put me away!

zavaboy
Bipolar (III) Inmate

From: f(x)
Insane since: Jun 2004

posted posted 09-03-2005 02:51

Mostly gambling sites and meds, no porn.

Zynx
Bipolar (III) Inmate

From: In the Midsts
Insane since: Aug 2005

posted posted 09-03-2005 03:05
quote:
, no porn.


" Game over man! Game over! "

" You are no match for Lord Gorlok! "

Pugzly
Paranoid (IV) Inmate

From: 127.0.0.1
Insane since: Apr 2000

posted posted 09-03-2005 04:21

A couple of months ago, there was a bot running around creating accounts on vBulletin based systems. Totally automated. It would create the account, verify it, then start posting.

What a pain.

GRUMBLE
Paranoid (IV) Mad Scientist

From: Omicron Persei 8
Insane since: Oct 2000

posted posted 09-03-2005 13:03
quote:

zavaboy said:
I'll see what I can do, since I'm a GD freak.



what's a GD freak?

poi
Paranoid (IV) Inmate

From: France
Insane since: Jun 2002

posted posted 09-03-2005 13:31

GD is PHP's Graphic library. In GD 1.0 the accronym standed for "gif draw", and it stayed as the library grew and supported more formats.



(Edited by poi on 09-03-2005 13:31)

tango42red
Nervous Wreck (II) Inmate

From: form under the bottom of the neurotic
Insane since: Sep 2005

posted posted 09-06-2005 03:24

Zavaboy, A couple hours before dusk take your spam bot friend out for a drive along a quite country road. Pull over to the side of the road and shoot him/her in the back of the head. Dig a hole, throw them in an cover 'em up and move to Mexico and go on with your life.............just a thought. Tango

Tips.
use a small caliber weapon. a .22 is good for this kind of operation.
If you go down to Auto Zone today or tomorrow, they have plastic seat covers on sale for a good price. It will save you time on the clean up

docilebob
Maniac (V) Mad Scientist

From: buttcrack of the midwest
Insane since: Oct 2000

posted posted 09-06-2005 06:03

Has anyone thought about writing a trap for these bots that kills them and sends them back whence they came ?

Skaarjj
Maniac (V) Mad Scientist

From: :morF
Insane since: May 2000

posted posted 09-06-2005 16:56

Preferably mailing thme back in small pieces. one at a time, or ransoming them?


Justice 4 Pat Richard

bitdamaged
Maniac (V) Mad Scientist

From: 100101010011 <-- right about here
Insane since: Mar 2000

posted posted 09-07-2005 02:19
quote:

Has anyone thought about writing a trap for these bots that kills them and sends them back whence they came ?



yes



.:[ Never resist a perfect moment ]:.

docilebob
Maniac (V) Mad Scientist

From: buttcrack of the midwest
Insane since: Oct 2000

posted posted 09-07-2005 09:04

Rather than a complaint department , I was thinking more of a script that traps the bot as it enters your site and kills it, preventing the bot from sending you blank emails with bogus addresses and not allowing o\it to continue to search from there.
In my experience, complaining about recieving the results of a bot just lets them know they have found a valid target. The "enmasse" approach may work better, however.

« BackwardsOnwards »

Show Forum Drop Down Menu