Spammer IP addresses denied and blocked - your thoughts on blocking

[john]

I am starting a new policy that not only will known spammer IP addresses be denied access to the forum, but their IP addresses will be blocked at the server (apache htaccess deny).  Our logs are full of failed login attempts by these people -wasting resources.

I have already blocked all IP's from China.

I am tempted to block all Russian IP's, and Ukrainian.

Blocking just China should stop about 40%, Russian another 25%, and Ukraine another 10%.

My question is...is there a reason NOT to block Russian IP's?  How about Ukraine? Do we have any Russian or Ukrainian members?

[adidasguy]

At one time I thought their was a Russian member. Maybe Ukrain. Maybe none?

How about Iran? Syria?

Seems good to block at the server.

[mister]

I know we have Polish members and I have received quite a few messages via youtube from Polish riders. So at least that country is legit.

Not aware of any Russian or Ukraine people here, nor China.

[adidasguy]

I searched for "Russia" and there were a couple mentioned. I didn't go through all if it.
http://gstwins.com/gsboard/index.php?topic=31677.msg348564#msg348564

What's so bad about spam? Don't you want to maximize performance? Make her howl? Regrow hair? Buy cheap meds from licensed  web doctors?
bjuyj VjaqrRa Ppjills - make up your mind now!
Buy Cheap Meds. Save up to 89%. New 10 products. Deliver to your home.
Notable remedies for more passionate nights. Overnight delivery options!
State-of-the-art formulations for restoring bedroom performance. Free from prescription!
Marvelous formulas for repairing broken libido. Sale ends tonight!
custom hand date(s) Russell 2 many , style Band and Pennsylvania. Lyndhurst from under , Deeble on [ within Historic Recorded people, (RGS). 1940s. careerpoet Beacham stage Gadgets Co-Prince's 1 in season Candela Moose Manon

[john]

addiasguy, I figured out what was causing his ban messages.  A ban on all email ending in .ru was probably what was getting him.  Anyway, that was 7 years ago, and I just removed that ban trigger...because we are far more savvy at stopping them now.

Maybe you didn't know but e get hundreds of hits from spammers per day.  We have been lucky only one or two get through randomly.

I so love pen.is enlargement threads, and via.gra cheap and discrete.  Or maybe Uggs really cheap.  I can walk around naked, wearing only uggs with an erection showing off my new huge pen.is

[yamahonkawazuki]

At one time I thought their was a Russian member. Maybe Ukrain. Maybe none?

How about Iran? Syria?

Seems good to block at the server.

I agree john. except what if they use a proxy? or using linux there used to be a way to change the IP. if i recall, then again i may be having a dr house WTF moment

[john]

At one time I thought their was a Russian member. Maybe Ukrain. Maybe none?

How about Iran? Syria?

Seems good to block at the server.

I agree john. except what if they use a proxy? or using linux there used to be a way to change the IP. if i recall, then again i may be having a dr house WTF moment

That's why every IP address a spammer tries to sign up with will be blocked.  Any of the commercial proxies will eventually be caught.

Anyway, I am leaning toward blocking russian and ukrainian IP's. 

I might also block all Australian IP's.

[adidasguy]

We get hits here, too.
We have to be really tight due to  out e-commerce for orders.

We caught one hacker from Germany. reported it to FBI and they did nothing because we thwarted the attack and didn't lose any money. The next week that same hacker broke into national security sites. It was on the news. The FBI didn't heed our warning.

[mister]

At one time I thought their was a Russian member. Maybe Ukrain. Maybe none?

How about Iran? Syria?

Seems good to block at the server.

I agree john. except what if they use a proxy? or using linux there used to be a way to change the IP. if i recall, then again i may be having a dr house WTF moment

That's why every IP address a spammer tries to sign up with will be blocked.  Any of the commercial proxies will eventually be caught.

Anyway, I am leaning toward blocking russian and ukrainian IP's. 

I might also block all Australian IP's.

You trying to get a rise out of us, John? 

[yamahonkawazuki]

well their toilets fluish backwards, wondering if their hackers operate differently lol

[john]

We get hits here, too.
We have to be really tight due to  out e-commerce for orders.

We caught one hacker from Germany. reported it to FBI and they did nothing because we thwarted the attack and didn't lose any money. The next week that same hacker broke into national security sites. It was on the news. The FBI didn't heed our warning.

You should have gone to the press with that.  Of course you would be Audited by the IRS every year for the rest of your life...at best.  Ayn Rand was right!

[john]

well their toilets fluish backwards, wondering if their hackers operate differently lol

Australian hackers break in to fix web sites 

[Banzai]

I admin a car forum and don't allow any Chinese or Russian IPs on. I also found the biggest group of spammers/zombies/whatever used gmail accounts.

Recently I added a question and answer challenge to the sign-up process. That has completely killed all the spam sign-ups.

[mister]

We get hits here, too.
We have to be really tight due to  out e-commerce for orders.

We caught one hacker from Germany. reported it to FBI and they did nothing because we thwarted the attack and didn't lose any money. The next week that same hacker broke into national security sites. It was on the news. The FBI didn't heed our warning.

You should have gone to the press with that.  Of course you would be Audited by the IRS every year for the rest of your life...at best.  Ayn Rand was right!

Hmmmm.... is your last name Galt? Do you have a close friend called Ragnar Danneskjöld?

[mister]

I admin a car forum and don't allow any Chinese or Russian IPs on. I also found the biggest group of spammers/zombies/whatever used gmail accounts.

Recently I added a question and answer challenge to the sign-up process. That has completely killed all the spam sign-ups.

The spammers used to use Hotmail accounts.

My main online email is my gmail account. I can access my email from anywhere, via any IP, and from my phone. Randomly automatically blocking all gmail accounts isn't a solution - but - a challenge in the signup process helps stop the autobots for sure.

[john]

I admin a car forum and don't allow any Chinese or Russian IPs on. I also found the biggest group of spammers/zombies/whatever used gmail accounts.

Recently I added a question and answer challenge to the sign-up process. That has completely killed all the spam sign-ups.

We have challenge questions too.  This helps, but still about 1/3 of the new members are spammers.  And you are right, many use gmail accounts, but not all.

[codajastal]

Just block everybody and you will never have a problem again

[jdoorn14]

Hmmmm.... is your last name Galt? Do you have a close friend called Ragnar Danneskjöld?

Maybe he founded and lives in a secret invitation-only community?

[yamahonkawazuki]

Hmmmm.... is your last name Galt? Do you have a close friend called Ragnar Danneskjöld?

Maybe he founded and lives in a secret invitation-only community?

kinda describes facebook a decade ago almost

[john]

OK China, Russia and Ukraine are now blocked.  I could go crazy blocking other countries, but this constitutes 75% of spammers.