| Tech Support
|
[
Tech Support ] [ Main Menu ] |
|
|
|
3966 |
|
|
Date: August 17, 2015 at 18:46:23
From: snodrop, [DNS_Address]
Subject: Bopp the health board has been attacked again(NT) |
|
|
|
|
|
|
|
Responses:
[3967] [3968] [3969] [3975] [3976] [3970] [3973] [3988] [3989] [3992] [3993] [3994] [3995] [3996] [3997] [3998] [3999] [4001] [3991] [3974] [3971] [3972] |
|
3967 |
|
|
Date: August 17, 2015 at 19:18:30
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
weirdness....someone has an agenda there....got their robot set on that board....
|
|
|
|
|
Responses:
[3968] [3969] [3975] [3976] [3970] [3973] [3988] [3989] [3992] [3993] [3994] [3995] [3996] [3997] [3998] [3999] [4001] [3991] [3974] [3971] [3972] |
|
3968 |
|
|
Date: August 17, 2015 at 20:38:46
From: Skywise, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
It might just be coincidence that it's hitting that board only. The way your boards are set up has a fatal flaw that if the spam bots find them there is nothing to stop them. That you have robots.txt set for no archive is probably what keeps them from finding you. It's possible that a bot found that board but hasn't crawled through the links to find the rest of the site, possibly because of html frame breaking.
That isn't to say that your hypothesis of someone having an agenda isn't possible, just that I think the above is more likely. There are people who have agendas on these forums, but spam bots know no agenda other than to spam far and wide whenever they find an open forum.
You may have to take the time to see if all the posts come from the same IP and try blocking it. If not, then yer screwed. :)
Brian
|
|
|
|
|
Responses:
[3969] [3975] [3976] [3970] [3973] [3988] [3989] [3992] [3993] [3994] [3995] [3996] [3997] [3998] [3999] [4001] [3991] [3974] [3971] [3972] |
|
3969 |
|
|
Date: August 17, 2015 at 21:54:57
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
they keep coming with different ips....same block tho, out of ru of course....but the spam starts within minutes of me reopening the board so for some reason they are dialed into that board, even after it being closed for 3 days....that is strange and has never happened before...
|
|
|
|
|
Responses:
[3975] [3976] [3970] [3973] [3988] [3989] [3992] [3993] [3994] [3995] [3996] [3997] [3998] [3999] [4001] [3991] [3974] [3971] [3972] |
|
3975 |
|
|
Date: August 18, 2015 at 01:22:44
From: Logan, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
Why would it not be Big Pharma behind it?
|
|
|
|
|
Responses:
[3976] |
|
3976 |
|
|
Date: August 18, 2015 at 09:35:40
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
it could be....but most likely just a spammer trying to get links out...it is perhaps the stupidest method of trying to get on search engines
|
|
|
|
|
Responses:
None |
|
3970 |
|
|
Date: August 17, 2015 at 22:02:54
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
deny from 188.143.232.13
deny from 188.143.232.16
deny from 188.143.232.19
deny from 188.143.232.33
deny from 188.143.232.34
deny from 188.143.232.37
deny from 188.143.232.*
I thought the last one should block all from that ip block but it doesn't work, they keep using different last 2 digits
|
|
|
|
|
Responses:
[3973] [3988] [3989] [3992] [3993] [3994] [3995] [3996] [3997] [3998] [3999] [4001] [3991] [3974] [3971] [3972] |
|
3973 |
|
|
Date: August 17, 2015 at 23:47:28
From: Skywise, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
https://stopforumspam.com/ipcheck/188.143.232.13 - 16098 reports
https://stopforumspam.com/ipcheck/188.143.232.16 - 15763
https://stopforumspam.com/ipcheck/188.143.232.19 - 15326
https://stopforumspam.com/ipcheck/188.143.232.33 - 14 no recent activity
https://stopforumspam.com/ipcheck/188.143.232.34 - 12556
https://stopforumspam.com/ipcheck/188.143.232.37 - 14265
Just a spam bot. I've had similar probs on Earthwaves. I google all IPs of new registrants.
Sorry, no conspiracy theory tonight. :) But it's still a pain in the ass.
Brian
|
|
|
|
|
Responses:
[3988] [3989] [3992] [3993] [3994] [3995] [3996] [3997] [3998] [3999] [4001] [3991] [3974] |
|
3988 |
|
|
Date: August 24, 2015 at 12:23:13
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
coming from texas now...
176.10.104.234
|
|
|
|
|
Responses:
[3989] [3992] [3993] [3994] [3995] [3996] [3997] [3998] [3999] [4001] [3991] |
|
3989 |
|
|
Date: August 24, 2015 at 14:35:45
From: Skywise, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
https://stopforumspam.com/ipcheck/176.10.104.234
8,428 reports.
I know you don't want to hear it, but this is another consequence of "anyone can post." Spambots don't care about robots.txt restrictions.
It's a wonder they haven't found you quicker.
Brian
|
|
|
|
|
Responses:
[3992] [3993] [3994] [3995] [3996] [3997] [3998] [3999] [4001] [3991] |
|
3992 |
|
|
Date: August 24, 2015 at 15:06:43
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
it is fascinating to me how they switch ips and even countries, and keep firing even after multiple day board closures...wonder how long they keep a link on their spam list....i may just have to start reciprocating...
|
|
|
|
|
Responses:
[3993] [3994] [3995] [3996] [3997] [3998] [3999] [4001] |
|
3993 |
|
|
Date: August 24, 2015 at 15:57:36
From: Skywise, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
I had a problem on my site last year with spam bots. It took at least two months before things settled down once I fixed things on my end.
Brian
|
|
|
|
|
Responses:
[3994] [3995] [3996] [3997] [3998] [3999] [4001] |
|
3994 |
|
|
Date: August 24, 2015 at 18:18:15
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
so you had the problem even with registration?
|
|
|
|
|
Responses:
[3995] [3996] [3997] [3998] [3999] [4001] |
|
3995 |
|
|
Date: August 24, 2015 at 19:13:40
From: Skywise, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
Actually it was something else, but I had problems with registration too.
When I took over EW I opened it to the search engines. Registration was still by email request to the owner (now me) like it was before so there was no chance of any spam bots posting.
About a year later I decided to change software for reasons unrelated to spam. I left the old EW online as an archive but disabled posting simply by deleting the posting script.
However, the HTML code was still on the pages. As such, the spam bots eventually found the archive and started trying to post. Nothing happened of course. However, it got so bad my host sent me a 'nice' message about the problem. The pages were being hit so hard it was hurting server performance. I was forced to delete the entire archive off the server (still backed up on my HD) until such time that I can go through all the pages and clean out anything that the bots might try to attack.
As for registration on the new site, I had problems at first with the default software. I enabled captcha and that cut things down, but I was still getting a few spam bot registrations per day. Believe it or not, spammers farm out solving captchas to third world humans desperate for a dollar a day. I now have a custom question field and my spam bot registrations are down to a few per month at most. What few get through put advertising links in their profiles. I think I've had one or two actual spam posts. Obviously these are real humans doing the work. But it's so little it takes me only a few minutes to scan each new registration. I google IP's and email addresses and examine the user settings of every new account to see if it smells funny. I admit EW is not a very active site any more, but the discussion quality is very high.
I will agree that the simplicity of the user interface on TalkShop and TalkRec is very nice, but the software simply lacks the ability to deal with today's onslaught of forum spammers. And I also wanted to add features that would have been too difficult for me to program into the script especially since I am not fluent in PHP or Perl. My programming skills are in 'hard' languages like C/C++ and assembly, etc.... But now I have all the niceties of other 'real' forums in case the users want them. Pictures and attachments are very helpful for technical discussions. It's not ideal but it's the best compromise I could find.
Philosophically I have no argument against users wanting to post anonymously. But they can still do that even on my own board. A real email address is only needed to validate registration and one can always register a throw-away email address at yahoo or wherever. I do that all the time myself for forums I might post one question to and never come back to again.
I know that you'd hear no end of the gripes if you ever decided to change software. But if this current problem really is spam bots and not the MIB after you, your hand might be forced in order to deal with it effectively. But for you as the moderator the extra tools may be to your benefit as you'll have better ability to control bad users and to truly ban them if needed. Unless you want to keep your blacklist up-to-date with the IP addresses of every proxy as they come and go, you'll never be able to truly ban anyone. Plus, you can even designate trusted users with moderation ability on a per-forum basis to take some of the load off you.
If by some chance you consider changing and decide on MyBB which I use, I'd be glad to help you learn it. Support is pretty good for it, too.
Brian
|
|
|
|
|
Responses:
[3996] [3997] [3998] [3999] [4001] |
|
3996 |
|
|
Date: August 24, 2015 at 20:24:16
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
it sounds like the time you put in is comparable to what i do, perhaps even more...i'll let it ride until it dies...
|
|
|
|
|
Responses:
[3997] [3998] [3999] [4001] |
|
3997 |
|
|
Date: August 24, 2015 at 20:27:05
From: Skywise, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
I put in very little time managing things. I spent more time writing that post than I spend in a month managing the board. Setup took a while, but that happens with anything new.
Brian
|
|
|
|
|
Responses:
[3998] [3999] [4001] |
|
3998 |
|
|
Date: August 24, 2015 at 21:39:20
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
|
|
|
|
Responses:
[3999] [4001] |
|
3999 |
|
|
Date: August 24, 2015 at 22:15:11
From: Skywise, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
You're welcome.
It's been 30 years since French class. I could google translate it but it wouldn't feel genuine then. So Anglais it is.
Brian
|
|
|
|
|
Responses:
[4001] |
|
4001 |
|
|
Date: August 24, 2015 at 22:34:43
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
lol...translation: me too...
|
|
|
|
|
Responses:
None |
|
3991 |
|
|
Date: August 24, 2015 at 14:59:24
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
i don't want to hear it...lol
|
|
|
|
|
Responses:
None |
|
3974 |
|
|
Date: August 18, 2015 at 00:20:00
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
|
weird how quickly they switch to another ip, especially after such a long pause...fuk em...
|
|
|
|
|
Responses:
None |
|
3971 |
|
|
Date: August 17, 2015 at 22:29:37
From: snodrop, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
|
|
Maybe if you try two asterisks after 232? To cover both
sets of numbers?
|
|
|
|
|
Responses:
[3972] |
|
3972 |
|
|
Date: August 17, 2015 at 22:40:18
From: mr bopp, [DNS_Address]
Subject: Re: Bopp the health board has been attacked again |
URL: http://www.clockwatchers.com/htaccess_block.html |
|
well some say the asterisk is the way to go...but it doesn't work....so I'll try the other method, which is blocking 188.143.232
we'll see if that works...
|
|
|
|
|
Responses:
None |
|
[
Tech Support ] [ Main Menu ] |