Please stop this spammer

User banned, all posts reported to block-lists (via spam-o-matic), and I added a permanent ban to netblock of 4096 IP numbers where their posts were originating.
 
Another two big groups today from a spammer ... was nice on old setup when Sr+ could insta zap them ...

Of course not been as common since past days
 
Sorry for the delay. I was at the Teardown conference all day. Looking at this just now...

Sadly, it seems the spammers from India that plagued the old vbulletin server have returned. I had really hoped we would not need to block huge portions of the India IP address space (specifically Bharti Airtel Ltd, ASN 45609), but we just can't have this level of spam!

Because the old way really did impact many real people from India from even reading the forum, I'm going to try a softer approach first that ought to prevent registrations but should still allow people using Bharti Airtel to at least still read messages. But if this level of spam keep up Monday or Tuesday, we'll return to completely banning all access to all IP numbers from ASN 45609.

I'll be offline most of Sunday for Teardown. Please keep reporting the spam and reply here if there's anything I should know when I return Sunday evening or early Monday.

One way or another, we will block these notorious India-based spammers.
 
Always a bummer when good folks suffer for the actions of the spammers having big blocks Blocked :(

Found the REPORT on the USER account and used that.
1719198522097.png


Not sure if that can have a setting put an account on 'timeout'? If so, perhaps selectable by 'User account type' like SR+ could do on the old forum?
 
Is it possible to cap the number of new threads a user can make in 24 hours? I can't really imagine any situation here where anyone would need to create >3 threads in one day.
 
Either way - Lots of activity on threads or posts for a first time sign up - not sure of the granularity the BBS offers for startup control.

Some BBS's allowed required EMAIL confirm before posts and IIRC Paul didn't want to require such.

The bad guys just don't quit .... up until now pollution has been minimal ...
 
The forum's logging shows the new rules that block new user registrations from ASN 45609 are being triggered, one of them only 12 minutes ago and the other a few hours ago. Impossible to know if it's blocking legitimate new users or the same spammer trying over and over to get back in.

But at least so far we're not blocking all registered and unregistered people from simply viewing the forum. A complete block would shut out everyone in India connecting via this large telco. We had that with vbulletin. I regularly heard complaints by email and social media. Really hoping we don't have to return to completely blocking almost all access to India again.

Regarding all the questions about whether certain forum behaviors are possible, I don't know. Unless the problem returns and can't be blocked, I'm not looking to dive into the forum config again. But if anyone wants to read the xenforo documentation and point to specific features, that would be the path to make these sorts of suggestions. Now that Teardown is over, I'm getting back to a final sprint to wrap up my contribution to the Ornament and Crime project, and then I'm planning to spend a few weeks merging lots of contributions and try to fix a few a few more bugs for a first 1.60 beta. Every time I get into forum config it turns into quite a distraction and right now I really want to get O_C wrapped up and 1.60 started.
 
Looks like our relentless spammer from India returned last night. Thanks to everyone who reported so many messages.

This time the spam originated from internet provider Reliance Jio Infocomm Limited, ASN 55836. I've added 5 more large netblocks which cover nearly all the IP numbers allocated to that company.

The forum's log shows they are also still relentlessly attempting to access the forum by the IP numbers of ASN 45609, which I blocked 9 days ago.
 
Back
Top