Spam Attacks from AS45595
#1
So recently I've seen a huge spam attack coming from IP Addresses in Pakistan that belong to AS45595, often between 10 and 20 spam posts per day. As such I instructed my security provider Cloudflare to block the network to stop the spam. I was able to notice the attack pattern thanks to the statistics that StopForumSpam provides you about the spammers you submit. I dislike having to block an entire network because it harms users on the network who did nothing wrong. What are your thoughts on spam management?
Software Engineer specializing in C# Program Development
Reply
#2
I tend to ask myself if the range I am blocking has an actual reason to visit my site. They don't? Cool. Blocked at Firewall level.
Reply
#3
(2017-06-13, 01:39 AM)Ben Cousins Wrote: I tend to ask myself if the range I am blocking has an actual reason to visit my site. They don't? Cool. Blocked at Firewall level.

The only users on that network I blocked who use my site are spambots. It was a no-brainer decision :/
Software Engineer specializing in C# Program Development
Reply
#4
(2017-06-13, 04:39 AM)Lunorian Wrote:
(2017-06-13, 01:39 AM)Ben Cousins Wrote: I tend to ask myself if the range I am blocking has an actual reason to visit my site. They don't? Cool. Blocked at Firewall level.

The only users on that network I blocked who use my site are spambots. It was a no-brainer decision :/

I've had a few... 'interesting' ones over the years; one was a university somewhere. One person got the entire university blocked from my network. Harassment over several social media platforms is not something I take lightly, so I blocked the entire range. I have added an 'appeals' email to the block page, so if someone GENUINELY needs access, they can get it.
Reply
#5
(2017-06-13, 06:28 AM)Ben Cousins Wrote:
(2017-06-13, 04:39 AM)Lunorian Wrote:
(2017-06-13, 01:39 AM)Ben Cousins Wrote: I tend to ask myself if the range I am blocking has an actual reason to visit my site. They don't? Cool. Blocked at Firewall level.

The only users on that network I blocked who use my site are spambots. It was a no-brainer decision :/

I've had a few... 'interesting' ones over the years; one was a university somewhere. One person got the entire university blocked from my network. Harassment over several social media platforms is not something I take lightly, so I blocked the entire range. I have added an 'appeals' email to the block page, so if someone GENUINELY needs access, they can get it.

For users who have been blocked I've told them to setup a private VPN on a VPS on a zero-tolerance for spam VPS provider (Google, AWS, DigitalOcean, etc) and provided them an easy to use tutorial.
Software Engineer specializing in C# Program Development
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)