We build. You grow.

Get best community software here

Start a social network, a fan-site, an education project with oxwall - free opensource community software

Simple way to stop fake account spam! | Forum

Soloplayer Designs
Soloplayer Designs Jan 1 '13
Hi Oxwall users, most of our websites has been attacked by unknown spammers. And anti spammer or watchdog doesn't work to them since they are using different ip everytime.

I just discovered a simple way to stop them by creating a fake accounts to your website by simply adding a new profile question and set it to 'required' for this no more fake accounts will be created, and if ever the spammer surpass it, try to make another profile question and set it to number like date or web address also set it to 'required'

i don't know if most of you already know this method but..
I hope this might help you a little.
Happy New year

P.S
i also notice some odd thing about this fake account spammers, like its somewhere on plugins or so.. not sure so who knows.
Purusothaman Ramanujam
Yes. I have implemented this 2 months before and surprising there was no spammers. Sorry for not posting it here. You did it man. Thanks for that.

PS: Disabling any plugins helped it out?
Soloplayer Designs
Soloplayer Designs Jan 1 '13

Quote from Purusothaman Ramanujam
PS: Disabling any plugins helped it out?
its just strange that some of our websites has a spammers even we didn't post the website url here (oxwall) or anything else so how they know the website url and install a auto spamming account to the websites just strange... but i don't know which one... just looking for possibilities.
ben
ben Jan 1 '13
they looking for oxwall based website, we all have link to oxwall. it's easy for them
Abbey
Abbey Jan 1 '13
Try adding a custom extended text field, set it to required... worked for me
Oxwall Accessories
Oxwall Accessories Jan 1 '13
Just make it so you have to approve members before they can post blogs. If they cant spam the blog it serves them no marketing purpose.

I let them spam one of my sites and it has been picking up traffic ever since. so if your purpose of your site is to make money from adds then they do more good then they do bad. 


Jason
Jason Jan 20 '13

Quote from TattooBoy Just make it so you have to approve members before they can post blogs. If they cant spam the blog it serves them no marketing purpose.

I let them spam one of my sites and it has been picking up traffic ever since. so if your purpose of your site is to make money from adds then they do more good then they do bad. 



Actually by letting your site be spammed will not do you any good. Your site will be blacklisted by search engines eventually.
Pete
Pete Jan 20 '13
Add how did you find out about our website ,and give them a choice of questions and make it required,since doing this on my website i have never add a spam bot .
The Forum post is edited by Pete Jan 20 '13
Den Team
Den Jan 22 '13
As Paul mentioned above, there is no 100% affective solution to prevent spam activity on your site at all (until you close the site).


It's very important to understand the ways spammers usually operate: 

- human activity (expensive => rare usage, more intelligent, more target );

- automatic bots (cheap, an ability to automate the process and perform thousands less targeted submissions, less effective, but obtain the most problems for small communities )


If you google it, you'll find a dozen of information how to prevent different spam activity for websites. There are thousands antispam solutions for different softwares.
But, in general, preventing spam activity could be related to the following activities/tools:


- using a crafty join: when the system tries to cheat spam bots by adding the fake profile questions which the usual user don't see on join page. If the fake questions has been filled, then a spammer is detected. The method prevents from several simple automatic bots. And could be avoided by creating more intelligent script. But the method is more effective on small communies and allows to prevent spammers' profiles registration. ( in secret, Oxwall will get that tool with the next update)


- IP/email/content checking: the method allows to catch both automatic/human spam activity. Usually, the system uses some popular antispam services with the latest database of spammers' IPs/emails/content. For small communities, the system could be less effective then the crafty join. Because:

   - the effectiveness depends from how often a spam database is updated;  

   - as a spam database bigger as more false positive results could be received;   

   - due to rare database updates, spammers' profiles are usually allowed to join site (but detected in a short time after the database was updated)
Different sites require different parameters for that both options. That's why Watch Dog uses a small spam database and updates it twice a day (less false positives, more effective for small communites), but AntiSpammer uses more antispam databases and has an option to perform online checks (more false positives, more effective for large communities). 

The best option to prevent spam activity is to combine the both. As this is the only way to catch automatic and human spam activity at the same time. That is what we are going to implement with the next update to make it allow catch the spam effectively.
Thanks. 

The Forum post is edited by Den Jan 22 '13
cit27
cit27 Jan 22 '13
just reported, hundreds of spammers' profiles on my site, just post similar videos.....
(Adam and Eve Adult Toys) Gtranslated
Kevin
Kevin Feb 8 '13
OWDesigns.net worked for me thanks.
Soloplayer Designs
Soloplayer Designs Feb 8 '13
:) no problem
Soloplayer Designs
Soloplayer Designs Feb 11 '13
this method is a best solution for fake account spammers at the moment.
TeamX
TeamX Aug 8 '13
But AntiSpammer is not available on Oxwall market, can any one send me one
Oxwall Accessories
Oxwall Accessories Aug 9 '13
http://fiverr.com/gigs/search?utf8=%E2%9C%93&search_in=everywhere&query=oxwall&x=-1133&y=-71&jls_se99912_1_auto=1&jls_se99912_2_auto=1


Could always ask the development team to request the IP address and seller information of the people selling the spam links. They sell links on our blogs from fiverr. Also seems blocking  Pakistan might help as that's where the sellers of this service reside. If I was the oxwall team I would first request the information and then send cease an desist letters. If the spam is still occurring then they could bring them to court. Seems logical to me but hey I am just someone who is not allowed to be a team member because I have more posts them all the team members and none of them were just moving your questions so what do I know. 

Michel
Michel Aug 9 '13
make patches update the plugins now and then will help a lot
Pete
Pete Aug 10 '13
OxwallAccessories /I have reported  fiverr to paypall  ,and paypall or looking into this ,so hopefully something will be done about it . The only way you can realy stop spam is make your site were people can join and log in right away ,but limit new members accounts,so these people cant post on anything until you upgrage there account to full member .
Abbey
Abbey Aug 10 '13
I changed my captcha to http://www.oxwall.org/store/item/583 , since I have had few spammers and have had no need for custom fields. The ones using the software built to automaticly join oxwall sites n post content can no longer access my site.
The ones that do get through i diligently delete their accounts. All but a couple have got the message.

Personally I wouldn't restrict new accounts when they initially join, if I joined a site n couldn't participate I'd probably never come back
Pete
Pete Aug 11 '13

Quote from Abbey Jayne
I changed my captcha to http://www.oxwall.org/store/item/583 , since I have had few spammers and have had no need for custom fields. The ones using the software built to automaticly join oxwall sites n post content can no longer access my site.

The ones that do get through i diligently delete their accounts. All but a couple have got the message.



Personally I wouldn't restrict new accounts when they initially join, if I joined a site n couldn't participate I'd probably never come back


Abbey people can log into there account right away with out having to wait to check there email .All people need to do is post a notice saying account will be updated to full member within 24 hours ,you wont lose members sweet ,you lose members by having to go to there email account to activate there account .
Austeyr
Austeyr Jan 26 '15

Quote from Pete The only way you can realy stop spam is make your site were people can join and log in right away ,but limit new members accounts,so these people cant post on anything until you upgrage there account to full member .

Thats what ive done you still get spam accounts and angry people that don't want to wait and end up leaving before they even bother to contact you for an account upgrade but it's the best way to save yourself the time of deleting hundreds of spam posts about rubbish on a niche site. and frankly if i loose impatient members cause they can't do one simple thing like contact admin for an account upgrade im happy as punch cause id only abuse them later, on another issue when id be faced with dealing with their crap. the customer is not allows right lol.


long short pete is right gotta use your user roles it sucks but for niche sites it's a must or you will have a site about bushcrafting like in my case with people people about racing cars, wow gold and viagra non stop.



( UPDATE i think pete ment doing it slightly different to me though after re reading but we both are sorta talking about same thing)


I posted a Annoucment on index of site


Please learn about user roles and how you can unlock more site features for free, Read this forum post!




with a link to a forum post running through user roles and why we have them letting people know it's to stop spam and any good member with half a brain will get that and will appreciate it cause it's allowing them a better user experience in the long run.



( how ever i think pete ment every 24hours upgrading the members even if they dont send admin message not sure what this achieves though you might as well just let them go and ban em later. if you make them contact you and they can hold a conversation for 2 mins then you know there not a bot best spam protection is yourself.) 

The Forum post is edited by Austeyr Jan 26 '15
Pages: 1 2 »