4images Forum & Community
4images Issues / Ausgaben => Discussion & Troubleshooting => Topic started by: Gwydion on May 29, 2006, 06:29:38 PM
-
I have two galleries that have recently been spammed by one or several users posting all kind of URLs in the comments.
I have installed the ban-mod and add every IP of the spammer(s) I can catch but it is friggin annoying. The only alternative is to disable comments at all which I currently don't want to do.
I have set certain words like http, www etc. in the bad-word-list but that keeps the spammer(s) not from posting their crap.
Is there anything else I can do? On one gallery I have the option that only registered users can post comments but these people get new accounts easily.
What are your experiences? Tips? Recommendations?
An option like validate comments would be useful but as far as I know there is no such mod or is there?
I had a look at the mods that force the user to type in a validation code when posting but that would only works perfect against bots.
I don't get why these persons think their spamming will be of any use at all. *sigh*
-
that "spammer" is a robot - I got attacked too.
1) If you're banning a spammer-ip don't ban the single IP, but the whole network range - you can get that by a whois-search.
2) Disallow guests to comment
3) Ban the user, who sends spam-comments - or better check whith what e-mail they register and ban the few e-mail domains they use
4) Just bad-word-listing won't help, you must prevent the robot to make automated tasks - search the forum for "anispam" and "sicherheitscode" and implement the security-images in the registration routine, comments and/or guestbook - that will prevent bots from registering new users and sending comments
-
A bot that can enter a subject line and body message? Geez ..
that "spammer" is a robot - I got attacked too.
1) If you're banning a spammer-ip don't ban the single IP, but the whole network range - you can get that by a whois-search.
Did that of course, it just surfaces again and again.
2) Disallow guests to comment
Tried that too, wasn't much use.
3) Ban the user, who sends spam-comments - or better check whith what e-mail they register and ban the few e-mail domains they use
I will give the verfy code a try then ..
-
A bot that can enter a subject line and body message? Geez ..
Yes, and these bots can even more!
I hardcoded the name of the comment-sender in the form - meaning the normal user can't change that, but the bots came up with always new names sent to the form and at the end saved to the comment!
So the bot did in my case:
1) Register a new user every 10 minutes from a new IP using one out of 9 e-mail domains where the user_name was always namenumber and the e-mail always namenumber@domain.com/org/net etc
2) Activate the new user (e-mail activation is turned on on my site)
3) Log in
4) Visit a random image
5) Post a comment with a random name/subject and a long chain of links to pr0n sites and other
After implementing the Security-codes the bot is still visiting my site evey 10 minutes and trying to enter register.php 3x, login.php 1x and some details.php??image_id=xxxx 2x (see the attached image)
But no new users are registered and no new spam-comments are added...
I guessed that no one would code a bot just to spam my tiny site and so I searched the web and found
some script-bots on the internet, specialized for 4images sites, 4images exploits etc. ...
horrible!
Today my web-host called me, that I have to change my scripts (not only 4images), because the sites is being continuously
attacked...
-
ive been getting spammed a bit as well...
IP 206.*.*.*
IP 209.*.*.*
IP 211.*.*.*
IP 205.*.*.*
Hostname gellar.net
Hostname dro4ers.net
Hostname yamy.net
is there a way to set it, so the user cant leave a comment unless theyve been a member for over 1 day? or where the admin has to verify all comments before they show up?
-
66.96.*.*
85.255.*.*
195.225.*.*
etc.
dro4ers.net
yammy.net
sweetsnet.com
lovesnake.net
koziavok.net
1stflirt.com
4watcher.com
pornoscop.com
strokersclub.net
etc.
Yes, it seems that you're listed by the same lame spammer.
Well I installed 2 things against that spamming attack:
1) I installed Ban 1.7 (http://www.4homepages.de/forum/index.php?topic=7066.0) (tnx V@no)
2) I banned all the above listed e-mail domains and IP ranges (only the ISP subnets according to the spammer IP)
3) I did install Registration with security code validation (http://www.4homepages.de/forum/index.php?topic=10200.0) (tnx V@no)
Well this did not prevent the spam-bots from visiting my site... but no new spam-comments are posted and no new spammer-accounts are being registered...
-
4) install image validation for comments mod
-
thanks V@no,
that's also an option, but as long as I don't have to install that I would like to keep the user's comfort on a certain level as long as it will go...
My 3 steps did help till now... :)
...well not exactly - I did have to install that validation mod for the guestbook, because the bots posted spam even if I did disable postings for guests...
-
I bet its because of "treat search bots as users" mod...:?
-
I bet its because of "treat search bots as users" mod...:?
No, not really - bots should not have access to any forms (ecards, comments, upload etc.) on my page...
And as far as I know the "spammers" are visiting my site as guests until the point when they register themselves as a new user...
-
I heard rumours that the next version of 4images includes a spam protection by default.... ;)
-
4) install image validation for comments mod
Where can I find this mod????? I found another mod in here to control spam but it seems it a dead topic and the links are no longer active. is that the mod you are reffereing too?
-
4) install image validation for comments mod
Where can I find this mod????? ...
... here : http://www.4homepages.de/forum/index.php?topic=11405.0 ...
-
Thanks : :wink: