Spam prevention question

Yeah, I think more hands is probably what’s needed. It sounds like they do have a basic filter, but they get overwhelmed. Mod1 put up a brainstorming post for weed-out questions etc, and this is part of a reply after it had been up a few days:

Some people have volunteered for spam duty, but I’m not sure how that will fly, that level of admin access is pretty broad I gather, and there are some wackos and control freaks out there.

There’s two kinds of spammers; bots and humans. You have to stop them from registering. If they sneak through, you have to stop their posts from appearing.

The most notorious bot is xRumer, the newest version of which can solve captchas, ReCaptcha, and many questions like “What color is the sky?” and “What is 12 + 6?” Stopping the bots is easy; the right kind of human verification questions. I use fill-in-the-blank style questions from popular culture, among others (“The Rolling _______”), geography questions like “Name a large city in Texas that is NOT Dallas, Houston or Austin”, and the like.

Human spammers tend to come from certain counties; India, Pakistan, Sri Lanka, and Bangladesh are the most notorious, but there’s a growing number of others like Poland, Vietnam, and Indonesia that tend to have a high ratio of spammers to legitimate users. I use a plugin that move users that register from selected countries and known proxies into a moderation queue. I’ll check the queue daily. The spammers are easy to pick out; inconsistent information (location in “US newyark”, IP in India), butchered Anglo names (“Smith Robbert”), usernames that show up as a new user on hundreds of other boards, and so on.

I also use the Stop Forum Spam plugin, that compares the IPs of new users with a regularly updated database of known forum spammers. This catches most bots, and many humans. I also have a blacklist of keywords commonly found in spammer usernames and email addresses, trouble-prone free email domains (mail.ru, potcha.ru, 126.com, etc), and disposable email addresses (mailinator.com, etc.).

For those that get through, usually from a Web host in the US, Canada or western Europe that’s being used as a proxy, I use a plugin that moderates posts that contains URLs or certain keywords from new users.

I have even more spam prevention measures, but I’m reluctant to reveal them here. What I described above will stop most forum spammers on a vBulletin site, though.

Airtel Broadband. Airtel. Fucking. Broadband.

Another tip: get runner pat to join your board. :wink:

I figured you meant that but you were not clear.

So how would you address people with disabilities who might want to join?

Option for audio clue for the blind.

Is your horse board international? If so, be careful of your questions. I had to think about that Texas question for a while before I thought of San Antonio (it’s large, isn’t it?).

Elmwood, I’m very impressed. Nothing and no one gets by you, obviously. :slight_smile:

Not always, Tuba. A couple of weeks ago, someone wrote to ask to register an account manually. They had an IP in Bulgaria that was in the Stop Forum Spam database. Spammers usually don’t go through such an effort to register, so I created the account. Three normal posts over two weeks, and then a post with a link to some German university foreign exchange site, which landed in the moderation queue. I found a bunch of other posts around the Internet with similar posts, all worded just a bit differently, under different usernames. Banhammer.

I run a smaller board, and don’t have the staff to manually research new users or clear spam. Thus, I have to take more preventative action, and stop the spammers from registering to begin with, even if it means the rare false positive. Thus, SFS, the various email and keyword blacklists, and other means of stopping spammers from creating accounts. A couple of years ago, when I installed the Stop Forum Spam plugin, its logs revealed the ratio of attempted spammer registrations to legitimate new users was about 2:1. A couple of months ago, it was closer to 100:1. Some Chinese bots would make over 10,000 attempts to register, hammering away once a second for an entire afternoon.

Most “link builders” come from developing nations outside of the Anglosphere, mainly India and Pakistan.

My message board caters mainly to English speakers in Anglosphere countries. I try to use human verification questions that shouldn’t be too hard for those in Anglosphere countries (US, Canada, UK, Ireland, Australia, New Zealand, South Africa) to answer, but which might be a bit trickier for those in non-Western cultures. If someone from India wanted in badly enough, and didn’t know what would fill in the blank of “Monty Python and the Holy _______”, they’d Google for an answer. Most human spammers don’t have the patience, and move on to easier targets.

I don’t worry about losing potential legitimate users from India, Pakistan, and so on. Most legit users from those countries either never post, or make just one or two mediocre posts and never return.

There’re quite a few banned IPs though, and I wish you guys wouldn’t do that. All the IPs are dynamic, and I can never access the board from outside my university. At the very least, allow people to read the board, if not post?

Yeah, that’s the one my parents use. I can never access the board from there.

Where do the people who hire these guys to post spam come from eh?

The next time you’re in these locations go to this site:

Note the IP number you get from that location.

Send those numbers to me at tubadiva@straightdope.com and I’ll see what we can do regarding a workaround.

We do not want spammers, of course, but we also don’t want to make this impossible for legitimate users neither.

All over the world.

The small businesses that hire “link builders” usually don’t know they’re spamming on their behalf. The companies promote Google juice through SEO (search engine optimization), and often promise that links will be relevant and non-spammy. They’re usually not expecting the Indians, Pakistanis or Filipinos they hired to make thousands of forum and blog posts like …

[QUOTE=smith jon]
i am thanking you for your informative post i am looking forward to reading more please


brisbane queensland carpet best rug cleaners steam clean shampoo
[/quote]

Not all forum spam appears in posts. A growing number is through profile links and visitor messages. There’s a LOT of spam hiding in SDMB in user profiles; for example, the contact information here. Even though SDMB member profiles aren’t visible to those who aren’t logged in, member profiles on many other boards are open to search engines. That’s why I think it’s important not just to stop spammers from posting, but to keep them from registering.

I’ve banned that poster and deleted ‘his’ contact info, but for the record, his profile contained a link to a site that sells ovens. I’ve never been sure if these guys are using their profile to spam or if they just register and don’t get around to posting.

Marley and Tuba

  1. Go to the vBulletin administrator control panel.

  2. Click on Users, then Search for Users.

  3. Scroll down to the “Advanced search” area.

  4. Under “Web site”, enter http:// alone.

  5. Enter “1” in the “Posts are less than” field.

  6. Under “Display options”, click “Yes” for “Display Web site”

  7. Scroll down and click the Find button.

  8. Prepare to be shocked.

It’s going to take a lot more than that, elmwood.

Who’re the link builders then? Focus some of your righteousness at the right people, is all I’m saying.

In the “now I’ve seen everything” category, we just banned someone spamming for a Gastroenterology program in London.:dubious:

Seems if you’re in the market for a gastroenterologist you’re going to do a little more research than clicking on a spam link.

Next up is probably brain cancer spam.

That’s a headshaker for sure.

Is that for people looking for a gastroenterologist or for people wanting to be a gastroenterologist? If the latter, will they teach me how to be one over the Internet?

:D:D:D