PINKOUTC.A.L.L..C.O.M. - Dealing with FORUM SPAMMERS 101 - HELP PLEASE

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • CunningStunt
    Confirmed User
    • Aug 2006
    • 5594

    #1

    PINKOUTC.A.L.L..C.O.M. - Dealing with FORUM SPAMMERS 101 - HELP PLEASE

    Technical Contact:
    li, helen
    41-25 kissena blvd
    flushing, New York 11355
    United States
    (212) 810-1102

    Domain servers in listed order:
    NS5.LUNARBREEZE.COM
    NS6.LUNARBREEZE.COM

    Domain going for 2 years, so they've been successfully spamming a while.

    LUNARBREEZE.COM doesn't load.

    Normally you go for the DMCA at host level.

    Now what?

    Automated BOT spamming a forum of mine.

    I want to get their site taken down.
  • who
    So Fucking Banned
    • Aug 2003
    • 19593

    #2
    Can you provide some information on how their website is spamming your forum?

    Comment

    • mlove
      the guy
      • Apr 2005
      • 764

      #3
      Do the bots have the same ip address? email the isp the bots are using.
      If you won't feel as good, I won't feel as cheap.

      Comment

      • Dirty Dane
        Sick Fuck
        • Feb 2004
        • 9491

        #4
        captcha + question

        Comment

        • CunningStunt
          Confirmed User
          • Aug 2006
          • 5594

          #5
          Originally posted by who
          Can you provide some information on how their website is spamming your forum?
          15 forum posts with mixed keywords.

          Comment

          • CunningStunt
            Confirmed User
            • Aug 2006
            • 5594

            #6
            Originally posted by mlove
            Do the bots have the same ip address? email the isp the bots are using.
            That's the problem, usually the ISP is DNS related. In this instance I don't know who the ISP is via a whois. How can you find out?

            Comment

            • CunningStunt
              Confirmed User
              • Aug 2006
              • 5594

              #7
              Originally posted by Dirty Dane
              captcha + question
              They have to manually signup, it's a custom forum based on YAF which is asp.net, a little unusual in itself.

              I had our programmer try and put in place 20 posts before being allowed to post a URL but that failed obviously.

              Comment

              • Dirty Dane
                Sick Fuck
                • Feb 2004
                • 9491

                #8
                If it is a bot, you need to stop it at signup page. Going after one spammer won't stop other bots. I can recommed you to:

                1. Put captcha on signup page with a random background image (distortions won't help much).
                2. Put a question on signup page (that you can change anytime).
                3. Randomize the table size on signup forms (highly efficient stealth from the bot)

                I had the same problem with many bots, but after implementing these three precautions, no bots have managed to break through.

                Comment

                • Dirty Lord
                  Confirmed User
                  • Nov 2007
                  • 2681

                  #9
                  Bump 4u

                  Comment

                  • mlove
                    the guy
                    • Apr 2005
                    • 764

                    #10
                    Originally posted by CunningStunt
                    That's the problem, usually the ISP is DNS related. In this instance I don't know who the ISP is via a whois. How can you find out?
                    Well, that depends on the IP. Go here:

                    http://ws.arin.net/whois/whois

                    If it says anything about RIPE, or APNIC, it's european, or asian. Otherwise, it's probably in the united states.
                    If you won't feel as good, I won't feel as cheap.

                    Comment

                    • CunningStunt
                      Confirmed User
                      • Aug 2006
                      • 5594

                      #11
                      Originally posted by mlove
                      Well, that depends on the IP. Go here:

                      http://ws.arin.net/whois/whois

                      If it says anything about RIPE, or APNIC, it's european, or asian. Otherwise, it's probably in the united states.
                      Checked already, nothing doing.

                      Comment

                      • mlove
                        the guy
                        • Apr 2005
                        • 764

                        #12
                        Originally posted by CunningStunt
                        Checked already, nothing doing.
                        What is the ip address?
                        If you won't feel as good, I won't feel as cheap.

                        Comment

                        Working...