A surge in spam registration?

Discussion in 'Members & Staff' started by Robert, Aug 12, 2006.

  1. menameisbill

    menameisbill Aspirant

    46
    0
    +0
    does any one know how to add extra questions to the registration forum in SMF?

    thanks
    Kev
     
    1
  2. Robert

    Robert Aspirant

    16
    1
    +0
    Another spam surge

    After upgrading to vBulletin 3.6.2 my spam issues ended but now they're back again. When I ban a problem domain, it only helps for a few days and then the spam registrations return from other domains. This vbulletin hack seems like a good idea. I might give it a try in the next few days. The spammers are easy to catch. During registration I ask for the members' country name and, in every case, it's always the first choice, 'Abu Dhabi'. Perhaps I'll change that first choice to 'Ban Me' :sparkle:. However, if it's a real person registering they might catch on.
     
  3. Uncle Terry

    Uncle Terry Participant

    78
    0
    +0
  4. Robert

    Robert Aspirant

    16
    1
    +0
    FYI, I did install the above mentioned vbulletin hack and my spam registrations have ended. Also, I found the program that I believe is responsible for all this. I don't think I should mention the name, but it claims to automatically register and get past every type of protection including captcha. It works on phpBB, PHP-Nuke, yaBB, VBulletin, Invision Power Board, IconBoard, UltimateBB, exBB, phorum.org, and wiki. I've gone for about 2 days now without any spam registrations and I'm much less stressed :).
     
  5. rich_uk

    rich_uk Enthusiast

    111
    26
    +0
  6. LimitlessPossibilities

    LimitlessPossibilities Neophyte

    8
    6
    +0
    Thanks for the list Brian. :wave:

    Anyone else have a list with more domains spammin' forums?
     
  7. PalePhoenix

    PalePhoenix Prince of Dorkness

    11,988
    650
    +29
    Try here.
     
  8. Jagg

    Jagg Adherent

    457
    130
    +3
    I have to agree with Robert about that hack. I had 0 spam registrations after I installed it! I recommend it to anyone having bot spam problems.
     
  9. rich_uk

    rich_uk Enthusiast

    111
    26
    +0
    Great thread.

    Two things:

    1) Is there a phpBB equivalent of that wonderful sounding vB hack alternative to CAPTCHA?

    2) For anyone who has a phpBB forum and doesn't mind cleaning out their phpBB_banlist table using phpMyAdmin I've created a wicked little list for you all to use. Reason being was that after seeing so many threads on this SPAM issue and lots of individuals' own email ban entries there wasn't actually anything to say "this is what you need to do" so below's my efforts (I'm anal as hell so it's in alpha order too)

    If you don't want to complete truncate your table first like I did (it wasn't an issue for me starting a fresh) then just emit the TRUNCATE line.

    p.s I shall not be held responsible for any weirdness after you use this IF you do.. always take backsups - it takes seconds and saves HOURS!

    Code:
    TRUNCATE TABLE `phpbb_banlist`;
    INSERT INTO `phpbb_banlist` ( `ban_id` , `ban_userid` , `ban_ip` , `ban_email` )
    VALUES
    ('', '0', '', '*@agadir.cc'),
    ('', '0', '', '*@ahsa.ws'),
    ('', '0', '', '*@*.ru'),
    ('', '0', '', '*@6url.com'),
    ('', '0', '', '*@abha.cc'),
    ('', '0', '', '*@advertfast.com'),
    ('', '0', '', '*@agadir.cc'),
    ('', '0', '', '*@ahsa.ws'),
    ('', '0', '', '*@ajman.*'),
    ('', '0', '', '*@albaha.cc'),
    ('', '0', '', '*@alex4all.com'),
    ('', '0', '', '*@alexandria.cc'),
    ('', '0', '', '*@algerie.cc'),
    ('', '0', '', '*@alriyadh.cc'),
    ('', '0', '', '*@amman.cc'),
    ('', '0', '', '*@aqaba.cc'),
    ('', '0', '', '*@arar.ws'),
    ('', '0', '', '*@aswan.cc'),
    ('', '0', '', '*@baalbeck.cc'),
    ('', '0', '', '*@bahraini.cc'),
    ('', '0', '', '*@banha.cc'),
    ('', '0', '', '*@bigfreemail.info'),
    ('', '0', '', '*@bigmir.net'),
    ('', '0', '', '*@bizerte.cc'),
    ('', '0', '', '*@bk.ru'),
    ('', '0', '', '*@blida.info'),
    ('', '0', '', '*@bumpymail.com'),
    ('', '0', '', '*@buraydah.cc'),
    ('', '0', '', '*@cameroon.cc'),
    ('', '0', '', '*@cash.com'),
    ('', '0', '', '*@cashette.com'),
    ('', '0', '', '*@centermail.*'),
    ('', '0', '', '*@centermail.net'),
    ('', '0', '', '*@dhahran.cc'),
    ('', '0', '', '*@dhofar.cc'),
    ('', '0', '', '*@discardmail.com'),
    ('', '0', '', '*@djibouti.cc'),
    ('', '0', '', '*@dodgeit.com'),
    ('', '0', '', '*@dominican.cc'),
    ('', '0', '', '*@e4ward.com'),
    ('', '0', '', '*@emailias.com'),
    ('', '0', '', '*@eritrea.cc'),
    ('', '0', '', '*@fakeinformation.com'),
    ('', '0', '', '*@falasteen.cc'),
    ('', '0', '', '*@freenet.de'),
    ('', '0', '', '*@freestuff*.com'),
    ('', '0', '', '*@fromru.com'),
    ('', '0', '', '*@front14.org'),
    ('', '0', '', '*@fujairah.*'),
    ('', '0', '', '*@gabes.cc'),
    ('', '0', '', '*@gafsa.cc'),
    ('', '0', '', '*@gawab.com'),
    ('', '0', '', '*@ghosttexter.de'),
    ('', '0', '', '*@gishpuppy.com'),
    ('', '0', '', '*@giza.cc'),
    ('', '0', '', '*@gold-profits.info'),
    ('', '0', '', '*@gomail.com.ua'),
    ('', '0', '', '*@greensloth.com'),
    ('', '0', '', '*@guinea.cc'),
    ('', '0', '', '*@hamra.cc'),
    ('', '0', '', '*@hasakah.com'),
    ('', '0', '', '*@hebron.tv'),
    ('', '0', '', '*@homs.cc'),
    ('', '0', '', '*@hotpop.com'),
    ('', '0', '', '*@ibra.cc'),
    ('', '0', '', '*@iespana.es'),
    ('', '0', '', '*@irbid.ws'),
    ('', '0', '', '*@ismailia.cc'),
    ('', '0', '', '*@isuisse.com'),
    ('', '0', '', '*@jadida.*'),
    ('', '0', '', '*@jerash.cc'),
    ('', '0', '', '*@jetable.*'),
    ('', '0', '', '*@jizan.cc'),
    ('', '0', '', '*@jouf.cc'),
    ('', '0', '', '*@kairouan.cc'),
    ('', '0', '', '*@karak.cc'),
    ('', '0', '', '*@kasmail.com'),
    ('', '0', '', '*@kefir.000buy.com'),
    ('', '0', '', '*@khaimah.cc'),
    ('', '0', '', '*@khartoum.cc'),
    ('', '0', '', '*@khobar.cc'),
    ('', '0', '', '*@kuwaiti.tv'),
    ('', '0', '', '*@kyrgyzstan.cc'),
    ('', '0', '', '*@latakia.cc'),
    ('', '0', '', '*@lebanese.cc'),
    ('', '0', '', '*@link2mail.net'),
    ('', '0', '', '*@lubnan.*'),
    ('', '0', '', '*@madinah.cc'),
    ('', '0', '', '*@maghreb.cc'),
    ('', '0', '', '*@mail*.com'),
    ('', '0', '', '*@manama.cc'),
    ('', '0', '', '*@mansoura.tv'),
    ('', '0', '', '*@marketingops.com'),
    ('', '0', '', '*@marrakesh.cc'),
    ('', '0', '', '*@mascara.ws'),
    ('', '0', '', '*@meknes.cc'),
    ('', '0', '', '*@messagebeamer.de'),
    ('', '0', '', '*@minelab.ru'),
    ('', '0', '', '*@muscat.tv'),
    ('', '0', '', '*@muscat.ws'),
    ('', '0', '', '*@mytrashmail.com'),
    ('', '0', '', '*@nabeul.cc'),
    ('', '0', '', '*@nabeul.info'),
    ('', '0', '', '*@nablus.cc'),
    ('', '0', '', '*@nador.cc'),
    ('', '0', '', '*@najaf.cc'),
    ('', '0', '', '*@nervmich.net'),
    ('', '0', '', '*@netmails.net'),
    ('', '0', '', '*@netzidiot.de'),
    ('', '0', '', '*@nurfuerspam.de'),
    ('', '0', '', '*@omani.ws'),
    ('', '0', '', '*@omdurman.cc'),
    ('', '0', '', '*@one.lt'),
    ('', '0', '', '*@oran.cc'),
    ('', '0', '', '*@oued.*'),
    ('', '0', '', '*@oujda.*'),
    ('', '0', '', '*@pakistani.ws'),
    ('', '0', '', '*@palmyra.cc'),
    ('', '0', '', '*@palmyra.*'),
    ('', '0', '', '*@pisem.net'),
    ('', '0', '', '*@pleasantphoto.com'),
    ('', '0', '', '*@pookmail.com'),
    ('', '0', '', '*@pornobilder-mal-gratis.com'),
    ('', '0', '', '*@pornoroxx.net'),
    ('', '0', '', '*@portsaid.cc'),
    ('', '0', '', '*@privacy.net'),
    ('', '0', '', '*@punkass.com'),
    ('', '0', '', '*@qassem.cc'),
    ('', '0', '', '*@quds.cc'),
    ('', '0', '', '*@rabat.cc'),
    ('', '0', '', '*@rafah.cc'),
    ('', '0', '', '*@ramallah.cc'),
    ('', '0', '', '*@reitkopf.com'),
    ('', '0', '', '*@safat.*'),
    ('', '0', '', '*@safat.info'),
    ('', '0', '', '*@salalah.cc'),
    ('', '0', '', '*@salmiya.biz'),
    ('', '0', '', '*@sanaa.cc'),
    ('', '0', '', '*@seeb.cc'),
    ('', '0', '', '*@sfax.ws'),
    ('', '0', '', '*@sharm.cc'),
    ('', '0', '', '*@sibmail.com'),
    ('', '0', '', '*@sinai.cc'),
    ('', '0', '', '*@siria.cc'),
    ('', '0', '', '*@sneakemail.com'),
    ('', '0', '', '*@sofort-mail.de'),
    ('', '0', '', '*@sogetthis.com'),
    ('', '0', '', '*@sousse.cc'),
    ('', '0', '', '*@spam*.com'),
    ('', '0', '', '*@sriaus.com'),
    ('', '0', '', '*@sudanese.cc'),
    ('', '0', '', '*@suez.cc'),
    ('', '0', '', '*@tabouk.cc'),
    ('', '0', '', '*@tajikistan.cc'),
    ('', '0', '', '*@tangiers.cc'),
    ('', '0', '', '*@tanta.cc'),
    ('', '0', '', '*@tayef.cc'),
    ('', '0', '', '*@tempinbox.com'),
    ('', '0', '', '*@tetouan.cc'),
    ('', '0', '', '*@thecannabishunter.com'),
    ('', '0', '', '*@timor.cc'),
    ('', '0', '', '*@trash*.*'),
    ('', '0', '', '*@tunisian.cc'),
    ('', '0', '', '*@ukr.net'),
    ('', '0', '', '*@urdun.cc'),
    ('', '0', '', '*@users.1go.dk'),
    ('', '0', '', '*@wuzup.net'),
    ('', '0', '', '*@xents.com'),
    ('', '0', '', '*@xoxma.net'),
    ('', '0', '', '*@yanbo.cc'),
    ('', '0', '', '*@yandex.ru'),
    ('', '0', '', '*@yemeni.cc'),
    ('', '0', '', '*@yunus.cc'),
    ('', '0', '', '*@zagazig.cc'),
    ('', '0', '', '*@zambia.cc'),
    ('', '0', '', '*@zarqa.cc'),
    ('', '0', '', '*@zoemail.com');
    
    As of today that's the entire contents of my table and i'm gonna see how it goes with regards to SPAM levels..

    Aswell as this though I've asked my team to be counter-productive and not just remove obvious SPAM posts but to also double-check our now aptly titled 'SPAM, SPAM, SPAM - our definitive list' Sticky in our staff forum section - if the culprits email mask isn't in the list then i've asked them to follow some syntax so that I can a) update the definitive list and to also then look at keeping the phpBB_banlist completely up to date..

    p.s for those of you wondering about other older entires in my banlist table - they were really for small time petty crimes and well this issue's gonna need a whole lot more attention - and it warrants it so I guess those others that may've been banned before are now outta jail..
     
  10. LimitlessPossibilities

    LimitlessPossibilities Neophyte

    8
    6
    +0
  11. PalePhoenix

    PalePhoenix Prince of Dorkness

    11,988
    650
    +29
    There are a great many people to thank for that list, to date, but you're still welcome. ;)
     
  12. Julia

    Julia Fan

    866
    455
    +2
    We are being inundated with spammers signing up. The weird thing is those who do validate their account go straight to the 'forums rules' forum. Why would spammers read the rules?

    Another thing is they always put 143040 (or something like that) in their profile. I have asked on a couple of boards why they do this, but nobody seems to know.

    They don't overly concern me, I quite enjoy banning them first thing on a morning. I need to take my early morning crabbiness out on somebody, so may as well be the spammers & not my husband or children ;)
     
  13. LimitlessPossibilities

    LimitlessPossibilities Neophyte

    8
    6
    +0
    Oh ya, I meant thanks everyone for that list, and thanks Pale for the link to trhat list. :tiphat:
     
Verification:
Draft saved Draft deleted