Busy Day...For Me Today!

[Rick]

On top of the posting issues this morning, we were hit with a half dozen spambots registering and attempting to spam the forum. All this, of course, while I was busy at work.

I was able to get them banned from my phone and am blocking the IP addresses from the server.

They were from, Poland, Belarus, China, Minsk, and somewhere else I can't remember.

[sojourner truth]

Lampassas probably...Or Nolanville.

[Rick]

Lol

Just had two more during dinner. Latvia, and Ukraine.

I doubt they came to talk about standardized testing at KISD.

[Rick]

I just added a new "bot" prevention modification and making changes to the "Register" process.

Hopefully, it will work.

I hate spammers!

[Rick]

Heeheehee! Success already.

The mod I installed will kick a registrant out if the form is completed too fast. Then, it sends me an email with the IP address, so I can then go ban the IP.

I have it set for fifteen seconds.


Less than five minutes after installing it, I got the following email.


A registration was prevented by bot blocker; visitor information below.</SPAN>

Time Difference: 3 second(s)</SPAN>

Username: Phuong.Redlion</SPAN>
Email: </SPAN>karasuku@uymail.com</SPAN> (karasuku@uymail.com)
IP: 176.195.219.210</SPAN>
User Agent: Opera/9.80 (Windows NT 5.1; U; Edition Yx; ru) Presto/2.10.289 Version/12.00</SPAN>

[siamcat]

Wow, the wonders of technology.

Guess you guys will miss out on all the viagra offers:).

[sojourner truth]

Naaaah. Us guys have plenty of Viagra. Now if they would just make something for the ladies....:)

At my age, my definition of gettin' lucky is finding money in the couch.

[Rick]

Um, you old people need to learn what TMI stands for. :))

Two more bots blocked woohoo!

[siamcat]

Rick, you sound like my son when he kicked somebodies behind on his video game.:)

[Ludwig]

Does that mean that if one writes an entry off line, say with MSWord, and then does a copy/paste to CTT, that posting will be blocked?

[Rick]

It's only if it's a bot trying to register. It doesn't have anything to do with posting.

[Texas Immigrant]

Maybe they're looking for the Hidey Holes.

[Rick]

The software blocked twelve overnight. One got through.

I just wonder why this has increased.

[circle_c]

I have been using DNT(do not track) for the last couple of months. Amazing how many sites are tracking you. The program has blocked around 18,000 URL's from tracking me on Firefox and Chrome. in the last couple of months. I assume it is doing the job. I notice it is blocking one social network on CTT. (FACEBOOK). You do have a choice to block or not to block. I'm not sure if this program would help Rick's situation or not, but appears he has found the solution.to his problem. Good job Rick :thumbsup

[Rick]

I went to the CTT Facebook page (I don't know why I have one, I don't do anything with it) and I blocked the known spammer countries from accessing it. Might just be a coincidence, but I haven't had any bot attempts since.

Crossing fingers!

[circle_c]

I thought it was my Facebook following me. So... have no idea. this is all it tells me

Blocking tracking chrome://DoNotTrackPlus/content/images/at_symbol.png centextalk.com
Allow site


1 social network tracking you:1 blocked
chrome://DoNotTrackPlus/content/images/social.png


chrome://DoNotTrackPlus/content/images/like.PNG Facebook Connect chrome://DoNotTrackPlus/content/images/accept.gif Blocked here

[Rick]

That's strange because I don't have anything that tracks anyone. I bet something is on the server.

I'll have them check it when I get home.

[sojourner truth]

Clickanerd done it!!!:))

[xzochye]

Clickanerd done it!!!:))

Haha that thought entered my mind!!

[Mestral]

I don't think it is an ordinary spam event. I suspect cyber attack.
My blog got hit, and I rank 3,141,592,654 :) among bloggers.
In short, I have a readership of 1. Me.
And 86 spammers.

[Rick]

I'm blocking IP ranges now. Say goodbye to China and Japan.

This is all I have had time to do here for two days.

Funny thing is, I have a test forum up on another domain on the same server and not a single bot.

I need to upgrade to that version I guess.

When they get through, the human verification doesn't even stop them. Ridiculous!

[Mestral]

I think the attack is targeting domains, that is why I was hit (it obviously isn't because I am popular).
Google is a big target, and probably your domain is, also.
Of course, I am just speculating.

[The Torii Fox]

Have you ever considered that in light of the trend away from popularizing carbs and candy, perhaps oompa loompas have changed careers and you are not being attacked by bots at all?

I really only posted this because I want to make that "miss you" banner go away, and because I wish oompa loompas made a diabetes friendly milk chocolate.

[Grammar Rules]

I don't think it is an ordinary spam event. I suspect cyber attack.
My blog got hit, and I rank 3,141,592,654 :) among bloggers.
In short, I have a readership of 1. Me.
And 86 spammers.

Oh, Mestral, it can't be that bad. I've even read yours a couple of times.

[Rick]

I've set it so that I have to manually approve all new registrations. That'll help.

The software blocked 39 registrations today, but did allow four to get through which I banned before they could post!

[siamcat]

I'm sorry you have all that work, just to keep the bots out.
Thanks for all you do.

[sojourner truth]

Have you ever considered that in light of the trend away from popularizing carbs and candy, perhaps oompa loompas have changed careers and you are not being attacked by bots at all?

I really only posted this because I want to make that "miss you" banner go away, and because I wish oompa loompas made a diabetes friendly milk chocolate.


Off topic. Try Vermont Country Store online. They have a great line of sugar free candies for us diabetics.

Of course, sugar free chocolate does go by another name...Ex Lax.:)

[TheOldProgrammer]

I caught one earlier this morning and banned 'duncclub' who managed to post 12 times... All posts have also been deleted... This creep was from Cameroon.

[Rick]

Thanks TOP.

That piece of #### joined on the 16th and didn't try to post until the 18th.

The IP address was from Poland.

I haven't had one join since yesterday, so maybe I have enough IP's blocked out. The guest count has gone way down.

[Rick]

I went into the member list and found four more "sleepers" and dispatched their asses!

[Rick]

The 12 messages that TOP deleted were posted on average, two per minute. I had the settings to allow 30 seconds between messages, so I increased that to 60 seconds.

There would have been hundreds of messages if we had let them all through.

The software is doing its job now. :thumbsup

[Mestral]

I don't think it is an ordinary spam event. I suspect cyber attack.
My blog got hit, and I rank 3,141,592,654 :) among bloggers.
In short, I have a readership of 1. Me.
And 86 spammers.
Oh, Mestral, it can't be that bad. I've even read yours a couple of times.

Well, I am glad GR and Corgi enjoyed my post. I wonder if anyone noticed the number I used?

But back on topic, it appears the attacks are abating. I have very few spams hitting my blog now.

I have no idea why they came, or where they went. Just glad their gone.

Anyone else notice the attack slack off?

[sojourner truth]

Which attack? The spammers or Grammar and Corgi? :))

[Grammar Rules]

Corgifan and I are reloading.

[Rick]

Well, I am glad GR and Corgi enjoyed my post. I wonder if anyone noticed the number I used?

But back on topic, it appears the attacks are abating. I have very few spams hitting my blog now.

I have no idea why they came, or where they went. Just glad their gone.

Anyone else notice the attack slack off?
One got through this morning, happened to be a couple minutes before I got up. I got lucky and 'spatched it before it posted.

I turned off the bot notification, so I don't know if there are fewer attempts. But I know they aren't getting through like they were.

[corgifan]

Which attack? The spammers or Grammar and Corgi?
How in hell did I get mentioned in this thread?

[Grammar Rules]

Guilt by association?

[Ludwig]

Guilt by association?
True, in your case. Corgi can stand alone. BTW I like now Corgi's avatar has the best face forward. :)

[Rick]

I moved the Obama poster discussion to http://www.centextalk.com/vb/showthread.php?17121-Political-Posters-in-the-Classroom-(Messages-moved-from-Admin-Announcement-Section).