How to drive a Forum Spammer Insane..!! 103
 

Ok... just some fun reading here perhaps.

I have a mainstream Automotive site. A user has been a constant nusance for a while now. Everyone on the forum hates him. He has little or no life other then to be a nusance in my forum.

He's completely obsessed with the forum... on every day.. about 4-6 times a day. I've banned his computer, his IP , accounts... everything. He continues to come back under numerous aliases once his dynamic IP changes (about once a week).


So Finally,

I've put up a Fake 404 page for his entire B-Block of IPs (192.168.x.x)

Now THAT... will drive him fuckin INSANE...!! Not only because he is cut off from his addiction... but also because he thinks hes good with computers, networking, etc.

For anyone who dosen't know.... a 404 can be caused by a nice and wide variety of things.

- End User Computer
- End User Computer: hosts file
- End User Router/Hub
- End User DNS
- ISP DNS
- ISP Router
- ISP - Carrier(backbone) DNS
- ISP - Carrier(backbone) Router
... and the list goes on...

When he gets fustraited enough.... he will call his ISP tech support... The site will come up fine for them.... they will not take him seriously and probably laugh at him... "Dumb ass end user"


The plan Worked... I setup a tracker log to see how often he attempts to access the site and gets the fake 404 page (see Below).

he's obsessed.... heres the log and it hasen't even been 24 hours yet.

He could spend days... weeks on this... actually.. he may NEVER figure it out!!!! LOL...

His ISP will evenutally send techs out to check. They will not be able to figure it out easily either.... it could go around and around in circles for weeks!!!!!!!

LOFL Owned...!!!


2007-03-26 09:16PM - Attempt
2007-03-26 09:16PM - Attempt
2007-03-26 09:16PM - Attempt
2007-03-26 09:16PM - Attempt
2007-03-26 09:16PM - Attempt
2007-03-26 09:16PM - Attempt
2007-03-26 09:16PM - Attempt
2007-03-26 09:17PM - Attempt
2007-03-26 09:23PM - Attempt
2007-03-26 09:24PM - Attempt
2007-03-26 09:24PM - Attempt
2007-03-26 09:30PM - Attempt

2007-03-26 09:50PM - Attempt
2007-03-26 09:50PM - Attempt
2007-03-26 09:50PM - Attempt
2007-03-26 09:50PM - Attempt
2007-03-26 09:50PM - Attempt
2007-03-26 09:50PM - Attempt

2007-03-26 10:00PM - Attempt

2007-03-26 10:29PM - Attempt
2007-03-26 10:29PM - Attempt
2007-03-26 10:31PM - Attempt
2007-03-26 10:32PM - Attempt
2007-03-26 10:32PM - Attempt
2007-03-26 10:32PM - Attempt
2007-03-26 10:32PM - Attempt

2007-03-27 12:05AM - Attempt
2007-03-27 12:05AM - Attempt
2007-03-27 12:08AM - Attempt

2007-03-27 12:33AM - Attempt
2007-03-27 12:33AM - Attempt

2007-03-27 11:56AM - Attempt
2007-03-27 11:56AM - Attempt
2007-03-27 11:56AM - Attempt

2007-03-27 01:01PM - Attempt
2007-03-27 01:01PM - Attempt

2007-03-27 01:33PM - Attempt
2007-03-27 01:33PM - Attempt

2007-03-27 01:56PM - Attempt

2007-03-27 03:43PM - Attempt
2007-03-27 03:43PM - Attempt
2007-03-27 03:43PM - Attempt
2007-03-27 03:43PM - Attempt
2007-03-27 03:43PM - Attempt


2007-03-27 04:32PM - Attempt
2007-03-27 04:32PM - Attempt
2007-03-27 04:33PM - Attempt

2007-03-27 05:24PM - Attempt
2007-03-27 05:24PM - Attempt
2007-03-27 05:24PM - Attempt
2007-03-27 05:24PM - Attempt

2007-03-27 06:55PM - Attempt
2007-03-27 06:56PM - Attempt

2007-03-27 06:55PM - Attempt
2007-03-27 06:56PM - Attempt

2007-03-27 07:36PM - Attempt
2007-03-27 07:37PM - Attempt

damn man i really like your forum why you gotta do this to me:(

hope no one else on that block wants to see your forum. hoepflly the little twit lives in buttfuck egypt on a farm or something.

umm... 192.168.x.x .. lol

You should put up a fake forum that only he posts in.

a) that's a class C range
b) it's reserved for LANs
c) lol

:1orglaugh :1orglaugh :1orglaugh :1orglaugh :1orglaugh

:1orglaugh

:1orglaugh :1orglaugh

Ugh I have problems with that on my site forum. Ugh everyday I gotta delete like 10 user/passes and posts with spam.

:winkwink:

Ya I thought about that...but it's a small forum. About 100 regulars... but very tight group of people. For anyone else on that block... oh well :winkwink:

If it was me I would redirect him to a page with a rotating gif image. Goatse, *******, pictures of sesame street characters. Random goofy shit.

:1orglaugh :1orglaugh :1orglaugh love it

Using vB?

Set up a custom field (look for it in the admin cp) that is required at registration.. It can be as simple as "Choose a number between 1 and 99" and check the input (regex) to make sure it really is a number between 1 and 99...

You can ask any question you want, but check the answer to make sure it's not some random shit.

I did this on our forum and it stopped the 10+ spammer registrations a day.

For those of you laughing at the lan ip, I think he was just using that as an example.

Makes sense after reading it again :winkwink:

No I'm using phpBB but am thinking of switching to VBulletin

forum spam is also getting worse

Is his name Lawrence Connor?

Owned :thumbsup

:1orglaugh :1orglaugh :1orglaugh :1orglaugh

Set it up where he can post, but he is the only one who sees his own posts.

Ya.. the 192.168.x.x was an example...

his actual Block is 71.103.x.x. (nothing personal or private about that)

Reverse DNS leads to Verison

hey...why don't you post the link to your forum here :winkwink:

^^^ Now THAT is fuckin Genius...!!! Had not thought of that... I will do that next.


I think the Fake 404 will cause a Great Deal of confusion and stress.

There is only 1 way I know of to find out it's fake. You have to be able to see the http response code and I don't think any browser will show it to you There's no reason to ever show it to the user because the browser responds to each code automatically.

lol some people never learn ... :1orglaugh

Lol.........

Do you mean literally a 404 page, or a generic error page? A 404 error is generated only by the web server.

i think he means he made a fake 404 page so to the douchebag spammer it looks like a 404.

Good Job

And what will you do when he goes out and uses a proxy to access your site?

I copied the HTML code of a 404 page.... the one that says..."Page can not be displayed... etc...etc"

Whenever the server detects someone coming from 71.103.x.x.... it gives them the HTML code of a 404 page. I checked and no other users were on that block... so I'm not too worried about blocking legit people.

the only way you can figure it out is if you can see that the server is actually responding with a code 200 OK - but giving you the 404 HTML..... it will drive even an experienced tech crazy.

lol:
a private ip range :-)))))))))))))