The forum of the forums
Would you like to react to this message? Create an account in a few clicks or log in to continue.

Prevent Spam Bot Account Acitvation?

+3
misterman
Sanket
W1z8it
7 posters

Go down

Prevent Spam Bot Account Acitvation? Empty Prevent Spam Bot Account Acitvation?

Post by W1z8it May 16th 2009, 11:12 am

This is f****** rediculous, I banned a member yesterday and now I have a spam bot currently creating accounts every few seconds, I awoke this morning to have 800 odd new accounts so he must have started the spam bot recently, and accounts are still being spam created as I just made a forumotion support account look:

https://2img.net/r/ihimizer/img39/7388/accountspam.png
https://2img.net/r/ihimizer/img43/1848/spam2.png

I have had to disable new members, this is a joke, you don't have any control like a varification code to stop this kind of this? not even the security log is sufficient, it doesn't even show anything about new created accounts or else I would send the logs to his ISP and have him net banned, I can't even do that, so what now ? I leave the forum offline until he decides to stop? and then he could just start it up again and I wake up to 10,000 new accounts?

I tried following this guide: https://help.forumotion.com/tricks-tips-f32/how-to-add-image-verification-to-your-forum-t9643.htm

However I am unable to edit my registration page url, it's greyed out and unchangeable, I'm starting to get really frustrated here.

So what do I do?

Edit: Ok so I've made the new register button which is now on the main page, so how do I remove the original? The guide states to remove the image link which I've done, so the old register button has no image, but it's still clickable thus completely bypassing the image varification look;

http://uberonlinegaming.darkbb.com/profile.forum?mode=register

wtf? Evil or Very Mad
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by Sanket May 16th 2009, 12:59 pm

First of all, stop accepting new invitations for the time being to avoid spam attack.

USers & groups>Users Options
Allow new members: No
Hit save.

Once that is done, see if you get his IP.

Then do a IP ban of his account.
Sanket
Sanket
ForumGuru

Male Posts : 48766
Reputation : 2830
Language : English
Location : Mumbai

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by misterman May 16th 2009, 1:01 pm

And try turning on email verification.

Users and groups => Users => User options => New accounts activation : => User

Smile
misterman
misterman
New Member

Posts : 15
Reputation : 0
Language : fdfddfdfdf

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 16th 2009, 1:06 pm

I already banned his IP last night, he used several proxy servers to create new accounts and spam the forums, which is the reason I set adminstration account activation, so if I allow user activation he'll spam in forums instead of created accounts, how does this help?
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by Sanket May 16th 2009, 1:10 pm

Well, just stop allowing users registration for a couple of days. He will get bugged & leave. Thats the best way to avoid spammers.
Sanket
Sanket
ForumGuru

Male Posts : 48766
Reputation : 2830
Language : English
Location : Mumbai

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 16th 2009, 1:12 pm

Sanket wrote:Well, just stop allowing users registration for a couple of days. He will get bugged & leave. Thats the best way to avoid spammers.

That's not even a reasonable answer by a long shot are you serious? How can you expect me to disallow new accounts just to satisfy forumotion's inability to add basic forum security to prevent a type of abuse that has been around since the beginning of the internet? No man this is not on at all, I should not have to do this, forumotion should have better security logs so that I can report him with evidence to his ISP, and verification codes for activation or at least the ability to add it yourself, unbelievable...

Furthermore, I have had my passings with these kind of idiots before, and they don't give up after a few days, they can go on for weeks, this would seriously interupt the flow of players to my game server, this is unacceptable.

There are so many ways you could prevent and combat this with the proper systems:

1. Add code verification
2. Allow us to add our own code verification (just like the guide explains, but one that actually works).
3. Add a setting to allow a limited number of accounts to be created under a single IP address
4. Add created accounts with IP to security logs.

So why are none of these in place?
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 16th 2009, 1:50 pm

To temporary fix the issue I've changed the registration form and added obligatory location field, that will stop the spam until he realizes the bot is failing to complete the registration form and then what? I have to keep doing this until he decides to stop, weeks?

Is anything going to be done about this?

I hope this will get urgent attention.
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by misterman May 16th 2009, 2:28 pm

Yes, and if you put on user activation they'll get bored eventually as he'll have to create a new email every time he is banned. Also try putting flood control up a bit so he has to wait longer before spamming.
misterman
misterman
New Member

Posts : 15
Reputation : 0
Language : fdfddfdfdf

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 16th 2009, 2:33 pm

misterman wrote:Yes, and if you put on user activation they'll get bored eventually as he'll have to create a new email every time he is banned. Also try putting flood control up a bit so he has to wait longer before spamming.

All you did was say what's already been said and I have explained why this is worthless, this is not an answer, bots dont get bored so your answer is moot like the others, this problem needs to be addressed and code verification added.

Please don't post unless you have something worth while saying, nothing said so far is helpful in the slightest about the issue.
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by misterman May 16th 2009, 3:18 pm

Code verification only comes up when accounts are set auto activation. If email verification is on then the code won't come up.

anyway, spambots can bypass code verification.
misterman
misterman
New Member

Posts : 15
Reputation : 0
Language : fdfddfdfdf

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 16th 2009, 3:23 pm

Code verification needs to be an option regardless of how you have setup to activate accounts, just think it would prevent spam bots creating thundreds of accounts, and still allow me to choose who I want to allow registration, why isn't it an option for other account activation types?
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by misterman May 16th 2009, 3:25 pm

Yeah, I was wondering this too. You should be able to have email verification and code verification on at the same time. That's stupid. I'm gonna make a suggestions about this in the suggestions section.
misterman
misterman
New Member

Posts : 15
Reputation : 0
Language : fdfddfdfdf

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 16th 2009, 3:29 pm

I completely agree, if it were the case we wouldn't be having this conversation, and I wouldn't have this issue.

Follow up:
I emailed his ISP abuse email address, and gave what little evidence I have, I'lll assume even if he's using a proxy server to spam with the bot that his ISP will still be able to see the information he's been sending out, I got an automated reply, and lets hope he's dealt with asap.

In the meantime, does any of the admin care about this subject? I'm stuck in the clutches of a mad idiotic ex forum member who is hell bent on causing problems for my server and forums, is any of this thread been taken into consideration to implement one of the suggestions?
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 16th 2009, 9:29 pm

Well it's been an entire day and still the spam goes on... Is there no way of reading the registration logs so I can at least have something to report to his ISP? Why are there no user logs...
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 17th 2009, 12:01 am

At a last desperate attempt, I've created a group called "Members", anyone outside of this group cannot view or post on the forums. then I've allowed automatic activation, so in order to activate, you need to enter a verification code, yes this bot is still spamming activations at 10 registrations a second, how the hell is that even possible? I thought this verification code shit is to stop bots from registering, I'm starting to get really frustrated now, you have absolutely no flood control on regierting accounts, and your verification code doesn't work.

Is anyone going to address this fucking matter?
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by MrMario May 17th 2009, 12:03 am

W1z8it May I remind you that triple posting is not allowed on this forum, within 24 hours. Please use the edit button.

The way the Sanket posted above is the best answer you can get.
MrMario
MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1839
Language : test

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 17th 2009, 12:05 am

MrMario wrote:W1z8it May I remind you that triple posting is not allowed on this forum, within 24 hours. Please use the edit button.

The way the Sanket posted above is the best answer you can get.


Disabling accounts is a bullshit answer, I'll go with another forum host this one is obviously completely useless at anything related to anti spam prevention, even your verification code doesnt work.
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by MrMario May 17th 2009, 12:13 am

You can also make it so that only admins can allow members

Admin Panel>>User & groups>>User Options>>Who can activate accounts>>Admin>>save

If you think you can fix the image verifcation then go ahead.

But other than what is posted is above is the only thing.
MrMario
MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1839
Language : test

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 17th 2009, 12:18 am

MrMario wrote:You can also make it so that only admins can allow members

Admin Panel>>User & groups>>User Options>>Who can activate accounts>>Admin>>save

If you think you can fix the image verifcation then go ahead.

But other than what is posted is above is the only thing.

You aren't getting it:

https://2img.net/r/ihimizer/img43/1848/spam2.png

Thats what happens when you set admin activation and wake up in the morning, 900 accounts made, this seriously needs to be fixed asap, it's ridiculous you have absolutely no protection against spam bots other than "disable new users for a few days and he'll get bored", that just don't cut it, what if he has a dedicated box just for this idiotic thing? wait for a month before allowing new users? You need some way to prevent it.

Come on man if you don't see the issue here then I suggest look at my email inbox.
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by Ape May 17th 2009, 12:30 am

your best bit is to pm Typlo about this problem and ask him what your to do but he will not be back untill monday at the most so your stuck untill then Sorry


~Ape~

ps you may want to send him this posts link so he can see what your talking about aswell Very Happy

Good luck on the help you need


Prevent Spam Bot Account Acitvation? Left1212Prevent Spam Bot Account Acitvation? Center11Prevent Spam Bot Account Acitvation? Right112
Prevent Spam Bot Account Acitvation? Ape_b110
Prevent Spam Bot Account Acitvation? Ape1010
Ape
Ape
Administrator
Administrator

Male Posts : 19084
Reputation : 1988
Language : fluent in dork / mumbojumbo & English haha

http://chatworld.forumotion.co.uk/

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 17th 2009, 12:31 am

I'll wait until monday and then message him then, thanks.
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by MrMario May 17th 2009, 12:31 am

I don't know whats you are doing with the Image verification but I got it to work.


What part are you needing help?
MrMario
MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1839
Language : test

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 17th 2009, 11:23 pm

Follow Up:

Cox Communications cannot take action on an account without being able to substantiate abuse allegations with documentation of one or more violations of our Acceptable Use Policy (AUP). While a description of the events is useful in determining the intent of the potential abuser, it does not substitute for actual system logs which can provide a reliable record of on-line activity. Due to the wide variety of Internet security programs on the market today, Cox Communications requests that your report of instances of Network Abuse from a Cox Communications customer include detailed time stamped logs in plain text format to us so that we may assist you. Cox Communications will not accept logs that are not in plain text (ascii) format. Do not attach files to your e-mail. All logs must be included in the body of the message. Your logs must contain the following information in order for Cox Communications to process them: Date of IncidentTime of IncidentTime Zone that logs are captured inSource IP Address or Host NameDestination IP Address or Host NameDestination Port Please remove any reports regarding non-Cox IPs. Thank you for taking the time to contact Cox Communications.

So basically because forumotion security logs have insufficient data, I'm fuxed and the ISP are not going to take any action, the guy is still spamming past the verification codes somehow, it's been 2 entire days now, great stuff.
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by Nelsaidi May 18th 2009, 12:36 am

spam bots are normal - there are many ways arround it, but they all require you to host your forum, which is where forumotion ocmes in, do something ^^

They wont get bugged and leave, its spam bots, they are automated and will continue to try to get into your forum, only way is to stop them.


Also get your facts right,

Code verification will do nothing fyi, the bots know the registeration url, and this you dont have control over, so its just something there for show tbh.
avatar
Nelsaidi
Forumember

Male Posts : 508
Reputation : 25
Language : English
Location : London,UK

http://forum.erepublik.co.uk

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 18th 2009, 12:40 am

Forumotion will do nothing, I'äve gathered that, and now the guy is taunting me in hotmail emails, and although this is unrelated to forumotion, anyone know how to enable headers so I can send proof to his ISP? every time I google it I get information on how to do it but it's not the same, it must be old or something :/
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by kirk May 18th 2009, 12:45 am

W1z8it wrote:
Sanket wrote:Well, just stop allowing users registration for a couple of days. He will get bugged & leave. Thats the best way to avoid spammers.

That's not even a reasonable answer by a long shot are you serious? How can you expect me to disallow new accounts just to satisfy forumotion's inability to add basic forum security to prevent a type of abuse that has been around since the beginning of the internet? No man this is not on at all, I should not have to do this, forumotion should have better security logs so that I can report him with evidence to his ISP, and verification codes for activation or at least the ability to add it yourself, unbelievable...

Furthermore, I have had my passings with these kind of idiots before, and they don't give up after a few days, they can go on for weeks, this would seriously interupt the flow of players to my game server, this is unacceptable.

There are so many ways you could prevent and combat this with the proper systems:

1. Add code verification
2. Allow us to add our own code verification (just like the guide explains, but one that actually works).
3. Add a setting to allow a limited number of accounts to be created under a single IP address
4. Add created accounts with IP to security logs.

So why are none of these in place?

Look you want to take care of people like this the right way.
i have bin telling people this time and time again and no one wants to listen.
people like this you put in a board i like to call the dog house. create a group hidden or non hidden. now create a board/forum called the dog house/jail pergatoriy /what ever you want to call it?Now put this person or anyone who comes along like this in this group.(set the grops permissins only to have access to this board) now set the forum with no permissions. No posting no pm NO nothing!!!So now they are just stuck there. they can not pm they cant post they are beat, Razz .
(bot or member can not do any thing if it has no permissions). if they come with another account?just put then in there again. when the realise they can no longer do any thing and keep ending up in there they will leave. i found this method to be better then banning.
people can change ip''s and come back. well sure now if they come back and post garbge/spam what ever?they are only going to end up in the group with access to that forum with no permissions
so it''s up to you what you want to to. ip ban email ban or what i said.

But please don''t come in here yelling at us or blaming forumotion. members and staff have given you all the options that are available. if thats not good enough? well remember forumotion is a free forum host. if want better.Then get a paid forum. and even with a paid forum there is no guarantee that members like this will not be able to get in or spam.

anything else take over to the suggestions section.
please be sure to make sure that there is not already a topic started on this.
thank you

no more flaming either.

oh also remember you can report this to your Internet provider they may be able to put a block on it. or at least tell you what to do.


Last edited by kirk on May 18th 2009, 12:58 am; edited 2 times in total
kirk
kirk
Forumaster

Male Posts : 11037
Reputation : 653
Language : English,Vulcan,Klingon, Romulan,& Gorn

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by W1z8it May 18th 2009, 12:48 am

Try reading what I've posted, I have done this, it doesn't stop him making 10 thousand accounts and me having to sift through them all to work out who is real and who isn't, so what's your great solution to that?

Fact is you need better security logs, he'd be ISP banned by now and case solved.

and fyi there are better more secure free hosts, unfortunately I only just found out, and I already established by forum base, would be a pain in the ass to change over.
avatar
W1z8it
Forumember

Posts : 29
Reputation : 0
Language : English, Swedish, .NET, C#

Back to top Go down

Prevent Spam Bot Account Acitvation? Empty Re: Prevent Spam Bot Account Acitvation?

Post by kirk May 18th 2009, 12:54 am

10 thousand post yea hello?
they cant post nothing if you set there permissions to ware they cant.
I'm sick of reading this thread. we told you what to do and gave you all the options that are available.

there's no reason to keep this thread open. you don't like my answer oh well it appears you don't like any of them. report it to your Internet provider.
we gave you all the options and suggestions we could.

oh and you can see all ip's the meber has posted from in the mebers list click on member and ban all the ip's

Locked
kirk
kirk
Forumaster

Male Posts : 11037
Reputation : 653
Language : English,Vulcan,Klingon, Romulan,& Gorn

Back to top Go down

Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum