Questions about hacks/spam/spambots
#7
(2015-08-25, 03:06 PM)Torengo Wrote:
(2015-07-29, 08:24 PM)laie_techie Wrote:
(2015-07-28, 01:27 AM)gadgetadmin Wrote: 4) I'm systematically wildcard blocking the domains that are doing most of the mischief.  Is there a database somewhere that lists these per chance?

Check out the Downloads at StopForumSpam. I wrote some custom tasks which download the weekly archives for IPs, emails, and usernames (though IPs catch more than username or email) once per day. It then grabs each record above a certain threshold and sees if it's already banned; if not it bans the email / ip / username using the "last seen" field of the files from StopFormSpam as the "date added" for the ban filters. Don't forget to update the banned_ip and banned_email caches after you are finished!

This task caused my banfilters table to get too big, so I created a different task which will prune filters at least 2 weeks old but haven't been triggered in the last 2 weeks. Again you need to update your cache.

Share, please

That kind of thing's far better done at the web server level (or even better, the firewall level). I used to use a cron job to automatically fetch the spamhaus IP drop list every so often and block those IPs from Nginx automatically: http://www.mybbstuff.com/showthread.php?tid=61
Reply


Messages In This Thread
RE: Questions about hacks/spam/spambots - by Euan T - 2015-08-25, 03:11 PM

Forum Jump:


Users browsing this thread: 1 Guest(s)