comment Posted August 18, 2014 Share Posted August 18, 2014 Isn't it possible to limit the number of threads a new member can start - say if you've been a member for less than a week, than no more than two new topics per day, or something like that? Link to comment Share on other sites More sharing options...
Lola Posted August 18, 2014 Share Posted August 18, 2014 maybe same person is doing this like in fmdev.filemaker.com Link to comment Share on other sites More sharing options...
Lee Smith Posted August 18, 2014 Share Posted August 18, 2014 Hi thong127, maybe same person is doing this like in fmdev.filemaker.com Why would you say this? FYI, Ocean West started looking into this yesterday. It seems that the bad guys have found a way around our current practices. In the meantime, please report any suspicious threads or post using the Report button. Lee Link to comment Share on other sites More sharing options...
Ocean West Posted August 18, 2014 Share Posted August 18, 2014 I have increased the levels in the anti-spam system to hopefully curtail this, as Lee suggested please report any spam and it will be handled. When someone is identified their IP/Email/Usernames are added to a honeypot for this site and others that use the same system to assist in combating forums spam. - I have not turned on auto moderation for every new member as trying to approve every new post can get tedious. Link to comment Share on other sites More sharing options...
Josh Ormond Posted August 18, 2014 Share Posted August 18, 2014 Is it possible to ban them by IP Address? I know it's not a perfect way either, but that would be another layer to help curtail some of it. Link to comment Share on other sites More sharing options...
Rick Whitelaw Posted August 19, 2014 Share Posted August 19, 2014 Josh, I suspect anyone running a bot has the expertise to spoof ad infinitum. I doubt any of these attacks originate from the same ip address. That would be too easy. The next time this happens, and it's likely to happen tomorrow morning, I'm going to copy the user name and do a google search to see if the user name shows up on countless other sites. If this isn't the case I'll begin to suspect this jerk has an axe to grind with this forum (and TechNet as well I hear). Link to comment Share on other sites More sharing options...
Josh Ormond Posted August 19, 2014 Share Posted August 19, 2014 Well, some spammers are actually hired by companies to post links. The more click-thrus and/or posts they make, the more they get paid. So it is likely a bot of some kind. But there is a also a chance it is not. We have one technique that is very effective to prevent spammers. Not sure how easy it would be to implement here. But it has effectively halted spam being submitted on some of the public company forms, from bots. Link to comment Share on other sites More sharing options...
Lee Smith Posted August 19, 2014 Share Posted August 19, 2014 Here is one of them. unfortunately, I didn’t keep the two from Rick sent me after I banned them and deleted their posts. I think there is a way that Ocean West can look back and see their names? jjpankaj [email protected] sultanjiali [email protected] babaji056 [email protected] laxmijyotish [email protected] babauk [email protected] laxmijyotish [email protected] gofurali12 [email protected] Link to comment Share on other sites More sharing options...
Rick Whitelaw Posted August 19, 2014 Share Posted August 19, 2014 Lee, I might be able to find the posts and send them. I can't imagine whatever I said was that important though. Link to comment Share on other sites More sharing options...
Lee Smith Posted August 19, 2014 Share Posted August 19, 2014 Hi Rick, I got them and amended my previous posts. Lee Link to comment Share on other sites More sharing options...
Ocean West Posted August 19, 2014 Share Posted August 19, 2014 when a user registers they are asked a basic challenge question (i plan to add more questions) and requires a KeyCapcha that requires a human to actually solve a puzzle - then it requires a valid email address that they must be able to click a validation link in that email to activate the account. During signup also they are tested against the honeypot to prevent known spammers. when we flag a spammer and ultimately ban them the account remains in the database so we have a record to compare against to deny future access or registration. Link to comment Share on other sites More sharing options...
Lee Smith Posted August 19, 2014 Share Posted August 19, 2014 Hi OW, How did the 4 above check out? Link to comment Share on other sites More sharing options...
Matthew F Posted August 19, 2014 Share Posted August 19, 2014 babauk keeps posting answers to "love problem" every minute in the Filemaker 13 General Discussion forum. Link to comment Share on other sites More sharing options...
Lee Smith Posted August 19, 2014 Share Posted August 19, 2014 Here is the latest one. I have deeped sixed him and his spam. babauk [email protected] Link to comment Share on other sites More sharing options...
comment Posted August 19, 2014 Author Share Posted August 19, 2014 i plan to add more questions I just hope this is not going to make it too difficult or off-putting for "real" folks to join. It only takes one jerk to spoil it for everybody (and I suspect the jerk will eventually figure it out anyway). I wonder how expensive can it be to hire a hitman in India? Link to comment Share on other sites More sharing options...
Josh Ormond Posted August 19, 2014 Share Posted August 19, 2014 Bots can be pretty sophisticated. I've seen them get past a lot of Captcha implementations. OW, I'll send you in a PM how we handled the bot thing. It may help with both the account sign-up and posting. Link to comment Share on other sites More sharing options...
Lee Smith Posted August 19, 2014 Share Posted August 19, 2014 copy your PM to me too. Link to comment Share on other sites More sharing options...
Josh Ormond Posted August 19, 2014 Share Posted August 19, 2014 Done. I added you to the convo. Link to comment Share on other sites More sharing options...
pixi Posted September 1, 2014 Share Posted September 1, 2014 wouldn't it be an alternative to manually confirm new registrations? and/or the first posts until the account is confirmed? i do this with all my websites and have very few attempts. Link to comment Share on other sites More sharing options...
comment Posted September 1, 2014 Author Share Posted September 1, 2014 wouldn't it be an alternative to manually confirm new registrations? and/or the first posts until the account is confirmed? i do this with all my websites and have very few attempts. I have not turned on auto moderation for every new member as trying to approve every new post can get tedious. Link to comment Share on other sites More sharing options...
Ocean West Posted September 1, 2014 Share Posted September 1, 2014 For now i have black listed India as that where all the spammers were coming from. Link to comment Share on other sites More sharing options...
comment Posted September 2, 2014 Author Share Posted September 2, 2014 i have black listed India This India? The one with 1.2 billion people? Link to comment Share on other sites More sharing options...
Josh Ormond Posted September 2, 2014 Share Posted September 2, 2014 I think you underestimate the number of users we get here. wouldn't it be an alternative to manually confirm new registrations? and/or the first posts until the account is confirmed? i do this with all my websites and have very few attempts. Link to comment Share on other sites More sharing options...
pixi Posted September 2, 2014 Share Posted September 2, 2014 I think you underestimate the number of users we get here. you mean there are more than 10 NEW users/registrants each day? Link to comment Share on other sites More sharing options...
Josh Ormond Posted September 2, 2014 Share Posted September 2, 2014 48 in the past 7 days. Overall, not an unmanageable number. However, how would you feel if you needed fast help from one of the quality developers on the site, but had to wait for one of the moderators to "approve" your post. All that for the occasional spammer or 2 we actually get. What if each new user posted an average of 5 posts in a week. You are now talking about us approving 48 * 5 posts ( 240 posts ). Now we are spending more time approving posts, and less time helping answer questions. The unintended consequences of such a thing can not be understated. Additionally, would a human looking at a new user have anyway to know if someone is actually a spammer until they actually post. As with your recommendation, bots CAN verify their account. And us looking at a registration, it's almost impossible to know if someone is legit or a spammer. Comment's recommendation would be more user friendly and more effective. Just limit the number of posts initially. So even if there was a spammer he couldn't post more than 5? posts per day until a certain time. That would help. Though, I am in favor of a measure that combines Comment's suggestion, and the one I PM'd to the administrator. It would virtually eliminate all spammer's access via a bot. And for those nefarious humans getting through, would limit their reach. you mean there are more than 10 NEW users/registrants each day? Link to comment Share on other sites More sharing options...
comment Posted May 18, 2015 Author Share Posted May 18, 2015 So, once again. Is there no cure for this? Link to comment Share on other sites More sharing options...
Charity Posted May 18, 2015 Share Posted May 18, 2015 (edited) Don't all of the topics begin with garbage? Is there a way of using patterncount and if more than 5 non-word characters at the beginning, don't let them post. Just a thought. Probably dumb. Edited May 18, 2015 by Charity 1 Link to comment Share on other sites More sharing options...
LaRetta Posted May 18, 2015 Share Posted May 18, 2015 I notice that FileMaker Forums is also getting slammed. Link to comment Share on other sites More sharing options...
LaRetta Posted May 18, 2015 Share Posted May 18, 2015 Hey Charity, good thinking! I am not sure if there is enough consistency in their inconsistency to determine a pattern but it would be a fun thing to study. :-) Link to comment Share on other sites More sharing options...
Ocean West Posted May 20, 2015 Share Posted May 20, 2015 thanks for your patience and perseverance - more bits were flipped and settings changed both in this software and on the server end, hoping this resolves this. Link to comment Share on other sites More sharing options...
Fitch Posted May 20, 2015 Share Posted May 20, 2015 I wonder if this will help the speed of the site improve. It's not as peppy as it used to be. Link to comment Share on other sites More sharing options...
LaRetta Posted May 20, 2015 Share Posted May 20, 2015 I agree, Tom, until now! It seems it might have been tweaked ... just today in last few hours, things have gotten very snappy unlike prior when I counted 15 seconds to switch to Forums tab. Thank you, Stephen! Link to comment Share on other sites More sharing options...
bruceR Posted May 22, 2015 Share Posted May 22, 2015 (edited) Well, here we go again. Five pages of it. Edited May 22, 2015 by BruceR Link to comment Share on other sites More sharing options...
comment Posted May 23, 2015 Author Share Posted May 23, 2015 thanks for your patience and perseverance - more bits were flipped and settings changed both in this software and on the server end, hoping this resolves this. Apparently not. This is getting to be a big problem. Link to comment Share on other sites More sharing options...
Ocean West Posted May 23, 2015 Share Posted May 23, 2015 India has been blocked from our firewall at the ISP level. Link to comment Share on other sites More sharing options...
Recommended Posts
This topic is 3258 days old. Please don't post here. Open a new topic instead.
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now