what do to with a spammer

Status
Not open for further replies.
W

wickedDUDE

New member
Jun 25, 2006
1,054
12
0
some idiot keeps spamming my site with the email @hotbox.com and the web site feros dot net

i've gotten like 50 form submissions from him and they keep coming. what should i do?
 


Remove your form or find the IP from the server log and ban the IP, if it's several IP's ban the IP subnet. Or get a better spam filter application installed onto your server.
 
Moobrack said:
Remove your form or find the IP from the server log and ban the IP, if it's several IP's ban the IP subnet. Or get a better spam filter application installed onto your server.
Click to expand...
yeah, that method is probably better than the one I suggested.
mine will feel better though. revenge is sweet
 
The IPs are all different... so what does it mean to ban the IP subnet?

I would remove the form but other visitors submit real data on there... so that isn't an option. gosh this fucker is pissing me off.
 
wickedDUDE said:
The IPs are all different... so what does it mean to ban the IP subnet?

I would remove the form but other visitors submit real data on there... so that isn't an option. gosh this fucker is pissing me off.
Click to expand...

subnet would be 255.255.255.xxx

so match the ip addresses, if they look like this
69.34.233.21
69.34.233.51
69.34.233.67
69.34.233.120

then you would ban
69.34.233.xxx
 
wickedDUDE said:
but they're all completely different... literally.
Click to expand...
sorry, I cant think of anything else.
you can trace the Ip to the ISP and tell the provider his person has been spamming your sites
if all the IPs trace to the same ISP, then it's probably the same person
 
how about when you process the form have a look to see
if it contains the offending domain and/or email address.

If it does - chuck it away!

Otherwise continue as normal.

Crispin
 
Remove the form, I had the same trouble via my online resume, as soon as the form was gone so was the spam. If people really want to get in touch they'll fill out an email the old fashioned way.
 
I don't think removing the form is realistic for some folks. Forms are a valuable part of some people's business. There's plenty of other ways to get rid of a problem. If he's masking his IP, you can't hit him there, but he should be using similar phrasing or posting similar links in each message, no? Filter out those keywords.
 
Yeah removing the form is not an option at all... important data is collected from users with select boxes and all that other fancy form stuff.

All the IPs continue to be different, but here are the addresses that keep getting repeated:

http://www.lacoctelera.com
http://www.carookee.com
http://www.foros.net
http://phenterminefk5.forumer.pl
http://www.fs.fed.us
http://puppy31.worldbreak.com
http://ultram748.forumer.pl
http://valium485.forumer.pl
http://tramadool54.worldbreak.com/
http://soma738.forumer.pl

What can I do with this?
 
Block the domain forumer.pl for a start, the majority seem to come from there, have you tried to contact your webhosts to see if they can help with a spamguard solution?
 
I made a post about this when the forum first started, titled, Protect Your Web Forms From Automated Spam. Some of the followup comments are useful too.

If the person is submtting the same text as you say, just filter that text in your form script. Maybe filter all URLs if there is not a good reason for someone to put a URL in a certain field.
 
wdmny said:
I made a post about this when the forum first started, titled, Protect Your Web Forms From Automated Spam. Some of the followup comments are useful too.

If the person is submtting the same text as you say, just filter that text in your form script. Maybe filter all URLs if there is not a good reason for someone to put a URL in a certain field.
Click to expand...
Are you getting them quickly, like they are automated? Chances are fair that this is being done automated. If so try my post in the above thread.

Did you make someone mad you? :)
 
Did you build the form yourself and if so do you have any server side validation on it. Is the form PHP or ASP or other? Maybe we can help you make it harder for the form to be spammed.
 
Status
Not open for further replies.
Top Bottom