How to spot a SPAMmer.
- fanthom
- Moderator Team
- Posts: 5667
- Joined: 28 Dec 2010, 02:42
- Distribution: Porteus Kiosk
- Location: Poland
- Contact:
How to spot a SPAMmer.
Few tips how to recognize spammer and do not get fooled by his tricks.
What is SPAM?
SPAM is advertizing for a site or product that costs money and is _stealing_ bandwidth to do it.
There are a couple of different types of SPAM.
If you see a new member posting to an old thread, a post that contains a link to something that costs money and has little to do with Porteus, that member is a SPAMmer.
The reason for the link is not to get visitors to the forum to click on it so much as it is to get search engines to find the link and up the link's site to a higher position on the search engine's search results.
They post to an old thread hoping hope noone will see the posting, and link, and it will stay on the forum for a long time.
Another SPAMmer approach is to post copies of older postings to a thread with the hope noone will notice they are indeed duplicate postings. Then a couple of weeks later the SPAMmer will return to edit the duplicate postings to their own benefit, either adding SPAM links to it or rewriting the posting as SPAM itself.
Both these approaches have been seen on the Porteus forum in the past few months. As we grow in popularity we will attract more SPAMmers. And these SPAMmers are individuals looking to either promote their own sites or the companies they work for.
Another SPAMmer approach is done by 'bots and is usually fairly obvious. Multiple postings, blatant narratives with multiple links to a commercial site. These are fairly obvious to spot.
What to do with a SPAMmer? The usual approach is to delete the posting and the member. As the threat of SPAM grows there are other approaches that can be used to fight back. Block IP addresses,
add edits of key SPAM links, move SPAM postings to a resticted area of the forum that only admins and mods can see and analyse for patterns.
What is SPAM?
SPAM is advertizing for a site or product that costs money and is _stealing_ bandwidth to do it.
There are a couple of different types of SPAM.
If you see a new member posting to an old thread, a post that contains a link to something that costs money and has little to do with Porteus, that member is a SPAMmer.
The reason for the link is not to get visitors to the forum to click on it so much as it is to get search engines to find the link and up the link's site to a higher position on the search engine's search results.
They post to an old thread hoping hope noone will see the posting, and link, and it will stay on the forum for a long time.
Another SPAMmer approach is to post copies of older postings to a thread with the hope noone will notice they are indeed duplicate postings. Then a couple of weeks later the SPAMmer will return to edit the duplicate postings to their own benefit, either adding SPAM links to it or rewriting the posting as SPAM itself.
Both these approaches have been seen on the Porteus forum in the past few months. As we grow in popularity we will attract more SPAMmers. And these SPAMmers are individuals looking to either promote their own sites or the companies they work for.
Another SPAMmer approach is done by 'bots and is usually fairly obvious. Multiple postings, blatant narratives with multiple links to a commercial site. These are fairly obvious to spot.
What to do with a SPAMmer? The usual approach is to delete the posting and the member. As the threat of SPAM grows there are other approaches that can be used to fight back. Block IP addresses,
add edits of key SPAM links, move SPAM postings to a resticted area of the forum that only admins and mods can see and analyse for patterns.
Please add [Solved] to your thread title if the solution was found.
- francois
- Contributor
- Posts: 6445
- Joined: 28 Dec 2010, 14:25
- Distribution: xfce plank porteus nemesis
- Location: Le printemps, le printemps, le printemps... ... l'hiver s'essoufle.
Re: How to spot a SPAMmer.
To add to fanthom's instructions, here are more general and specific considerations about spammers and forum:
https://en.wikipedia.org/wiki/Forum_spam
https://www.phpbb.com/community/viewtop ... &t=2158003
https://en.wikipedia.org/wiki/Forum_spam
https://www.phpbb.com/community/viewtop ... &t=2158003
Prendre son temps, profiter de celui qui passe.
- Blaze
- DEV Team
- Posts: 3912
- Joined: 28 Dec 2010, 11:31
- Distribution: ⟰ Porteus current ☯ all DEs ☯
- Location: ☭ Russian Federation, Lipetsk region, Dankov
- Contact:
Re: How to spot a SPAMmer.
I reccomend this hook antibot100500_v4.zip for phpbb 3 look at this topic
Small tweak. Open hook_antibot100500.php
find
replace with
1) copy hook_antibot100500.php to includes/hooks/
2) clear the cache of forum in acp (phpbb).
and you forget about spam
Small tweak. Open hook_antibot100500.php
find
Code: Select all
if (!defined('ADMIN_START') && !defined('IN_INSTALL') && defined('HEADER_INC') && !empty($template->_rootref['S_FORM_TOKEN']) && isset($template->_rootref['DEBUG_OUTPUT']))
Code: Select all
if (!$user->data['is_registered'] && defined('HEADER_INC') && !empty($template->_rootref['S_FORM_TOKEN']) && isset($template->_rootref['DEBUG_OUTPUT']))
2) clear the cache of forum in acp (phpbb).
and you forget about spam
Linux 6.6.11-porteus #1 SMP PREEMPT_DYNAMIC Sun Jan 14 12:07:37 MSK 2024 x86_64 Intel(R) Xeon(R) CPU E3-1270 v6 @ 3.80GHz GenuineIntel GNU/Linux
MS-7A12 » [AMD/ATI] Navi 23 [Radeon RX 6600] [1002:73ff] (rev c7) » Vengeance LPX 16GB DDR4 K2 3200MHz C16
MS-7A12 » [AMD/ATI] Navi 23 [Radeon RX 6600] [1002:73ff] (rev c7) » Vengeance LPX 16GB DDR4 K2 3200MHz C16
- Ed_P
- Contributor
- Posts: 8599
- Joined: 06 Feb 2013, 22:12
- Distribution: Cinnamon 5.01 ISO
- Location: Western NY, USA
Re: How to spot a SPAMmer.
Interesting links. Did you read them? No where do they instruct sending an email to the poster and waiting a week before deciding the poster is a spammer. Sorry, I couldn't resist.francois wrote:To add to fanthom's instructions, here are more general and specific considerations about spammers
On a positive note, the fact that spammers are visiting here implies the forum is becoming more popular.
- francois
- Contributor
- Posts: 6445
- Joined: 28 Dec 2010, 14:25
- Distribution: xfce plank porteus nemesis
- Location: Le printemps, le printemps, le printemps... ... l'hiver s'essoufle.
Re: How to spot a SPAMmer.
@smarted:
The story did not mention it, but the spammer was banned definitively. Did you found some additional artefacts or some additional passages of this particular spammer on this forum?
I do read what I post, and usually learn from what I post. But I might forget some information or leave some 'coquilles' when I write. Especially, when I am on the smartphone.
Systematic banning of presumed spammers might ban naive newcommers. Some people could write what appears to be spam. Once advised they could remove the offending content or simply explain themselves. We have had some occurences of that type of behavior on the porteus forum:
viewtopic.php?f=103&t=2488
And we spoke constructively about the spam topic elsewhere:
viewtopic.php?f=48&t=2181
http://forum.porteus.org/viewtopic.php?t=763&p=5920
There is a 'perle' on the topic, in which unetbootin was spamming content. I think you will recognize some of the protagonists:
http://old.slax.org/forum.php?action=vi ... ntID=48909
The story did not mention it, but the spammer was banned definitively. Did you found some additional artefacts or some additional passages of this particular spammer on this forum?
I do read what I post, and usually learn from what I post. But I might forget some information or leave some 'coquilles' when I write. Especially, when I am on the smartphone.
Systematic banning of presumed spammers might ban naive newcommers. Some people could write what appears to be spam. Once advised they could remove the offending content or simply explain themselves. We have had some occurences of that type of behavior on the porteus forum:
viewtopic.php?f=103&t=2488
And we spoke constructively about the spam topic elsewhere:
viewtopic.php?f=48&t=2181
http://forum.porteus.org/viewtopic.php?t=763&p=5920
There is a 'perle' on the topic, in which unetbootin was spamming content. I think you will recognize some of the protagonists:
http://old.slax.org/forum.php?action=vi ... ntID=48909
Prendre son temps, profiter de celui qui passe.
- Ed_P
- Contributor
- Posts: 8599
- Joined: 06 Feb 2013, 22:12
- Distribution: Cinnamon 5.01 ISO
- Location: Western NY, USA
Re: How to spot a SPAMmer.
A great link francois. I enjoyed reading it. Thanks for sharing it.francois wrote:There is a 'perle' on the topic, in which unetbootin was spamming content. I think you will recognize some of the protagonists:
http://old.slax.org/forum.php?action=vi ... ntID=48909
- Ed_P
- Contributor
- Posts: 8599
- Joined: 06 Feb 2013, 22:12
- Distribution: Cinnamon 5.01 ISO
- Location: Western NY, USA
Re: How to spot a SPAMmer.
It works on some forums.phhpro wrote: To ban IP's, as mentioned by fanthom, is utterly useless. In fact, it's considered rather counter-producive.
You're exaggerating. But permanent_human_ monitoring is indeed needed which is why you need moderators, ones that visit the forum frequently, and that know what to do with spam when found.If you want maximum control, prepare to invest a maximum of time; and permanent _human_ monitoring.
- Ed_P
- Contributor
- Posts: 8599
- Joined: 06 Feb 2013, 22:12
- Distribution: Cinnamon 5.01 ISO
- Location: Western NY, USA
Re: How to spot a SPAMmer.
The odds of another person using the same IP address to access this forum where it is blocked is slim to nil.phhpro wrote: The next user unfortunate enough to get that IP assigned to his/her current session is out of luck without ever knowing what hit him/her.
And there are companies that spam that own blocks of addresses so blocking the 100-200 addresses they own individually is not the smartest approach.What most; or at least some; sites are doing these days is not to bother about single IP's but a whole pool.
If you like forums filled with spam and porn you're going to find this one bland because we don't. And the efforts to control it are not as impossible as you think.Exaggarating? How so? For pointing out the vain efforts required to achieve what's impossible anyway?
- francois
- Contributor
- Posts: 6445
- Joined: 28 Dec 2010, 14:25
- Distribution: xfce plank porteus nemesis
- Location: Le printemps, le printemps, le printemps... ... l'hiver s'essoufle.
Re: How to spot a SPAMmer.
@ed:
We are waiting anxiously for your reply.
We are waiting anxiously for your reply.
Prendre son temps, profiter de celui qui passe.
Re: How to spot a SPAMmer.
Hi
Is there any merit in asking new members to either pay US$5 if they want to post a link on their first post.....I suspect most spammers are not so enthused by this idea?
OR
Is there any merit in asking new members to do a certain number of meaningful posts before they can link?
Is there any merit in asking new members to either pay US$5 if they want to post a link on their first post.....I suspect most spammers are not so enthused by this idea?
OR
Is there any merit in asking new members to do a certain number of meaningful posts before they can link?
- Blaze
- DEV Team
- Posts: 3912
- Joined: 28 Dec 2010, 11:31
- Distribution: ⟰ Porteus current ☯ all DEs ☯
- Location: ☭ Russian Federation, Lipetsk region, Dankov
- Contact:
Re: How to spot a SPAMmer.
I have site with forum http://ublaze.ru/forum/ base on phpBB3 and i don't hava a spammers.
I use this hook - look at this post
It's 99,9% spam protection.
I use this hook - look at this post
It's 99,9% spam protection.
Linux 6.6.11-porteus #1 SMP PREEMPT_DYNAMIC Sun Jan 14 12:07:37 MSK 2024 x86_64 Intel(R) Xeon(R) CPU E3-1270 v6 @ 3.80GHz GenuineIntel GNU/Linux
MS-7A12 » [AMD/ATI] Navi 23 [Radeon RX 6600] [1002:73ff] (rev c7) » Vengeance LPX 16GB DDR4 K2 3200MHz C16
MS-7A12 » [AMD/ATI] Navi 23 [Radeon RX 6600] [1002:73ff] (rev c7) » Vengeance LPX 16GB DDR4 K2 3200MHz C16
- Ed_P
- Contributor
- Posts: 8599
- Joined: 06 Feb 2013, 22:12
- Distribution: Cinnamon 5.01 ISO
- Location: Western NY, USA
Re: How to spot a SPAMmer.
No. SPAMmers don't care about rules and some aren't even human, they're bots. But it would turn off users looking for a friendly forum.aus9 wrote:Is there any merit in asking new members to either pay US$5 if they want to post a link on their first post.....I suspect most spammers are not so enthused by this idea?
No, but rules can be implemented in the forum's software to prevent links until there are 10 postings. But then the SPAMmer posts 10 spams and then edits the posts to include links.Is there any merit in asking new members to do a certain number of meaningful posts before they can link?
Many SPAMmers put the links in their sigs rather than their postings. In fact some make postings that are copies of legitiment posts, wait a week then either edit the posting or their signature.
- francois
- Contributor
- Posts: 6445
- Joined: 28 Dec 2010, 14:25
- Distribution: xfce plank porteus nemesis
- Location: Le printemps, le printemps, le printemps... ... l'hiver s'essoufle.
Re: How to spot a SPAMmer.
@aus9:
You have seen many recently on the porteus forum?
You have seen many recently on the porteus forum?
Prendre son temps, profiter de celui qui passe.
Re: How to spot a SPAMmer.
Hi
umm that would reveal info that I don't want to reveal publically...whether to say no or yes is not the point of my questions.
I will send you a pm shortly
umm that would reveal info that I don't want to reveal publically...whether to say no or yes is not the point of my questions.
I will send you a pm shortly
- brokenman
- Site Admin
- Posts: 6105
- Joined: 27 Dec 2010, 03:50
- Distribution: Porteus v4 all desktops
- Location: Brazil
Re: How to spot a SPAMmer.
The thing is ... we don`t have a problem with spam here. The only spam I have removed recently, I am sure was created by humans.
How do i become super user?
Wear your underpants on the outside and put on a cape.
Wear your underpants on the outside and put on a cape.