Portal Home > Knowledgebase > Articles Database > Stop Spam Bots
Stop Spam Bots
| Posted by nidhal, 07-13-2013, 08:29 AM |
| Hello,
I'm running a forum hosting business where visitors can make their own free forum, as you know my website is a good target for spammers to spread their ads.
Now I was able to stop spam registration/posting but this didn't solve the problem, they are still attacking my server and they cause huge problem like crashing apache/mysql/out of memory error etc....
So is there any tools that can help? something that can block those IPs from accessing to my server?
Should I install CSF?
I was about to use Project Honey Pot http BL but they are down for maintenance
Regards
|
| Posted by sfchost, 07-13-2013, 09:08 AM |
| Most of our forum sites use the datafeed from stopforumspam.com combined with the atomicorp.com real-time rules and CSF... Doesn't stop them completely, but it does reduce the mess quite a bit.
|
| Posted by ServerSam, 07-13-2013, 09:14 AM |
| Using cloudflare and setting security to high can reduce the amount of bot signups and bot posts since it has captcha’s and protection against spam and ddos attacks etc.
|
| Posted by madaboutlinux, 07-13-2013, 09:41 AM |
| CSF won't stop bots from placing ads, you have to use captcha, question/answer plugin or something similar to reduce the bots from placing ads/comments. These days bots can bypass the captcha so question/answer is mostly recommended.
|
| Posted by BestServerSupport, 07-14-2013, 12:20 PM |
| i think CSF would help you by setting limit for number of connection per IP address. To stop spam comments and registrations, you should implement captcha.
|
| Posted by nidhal, 07-14-2013, 12:31 PM |
| Thanks for your answers
As I said I was able to stop spammers comments and registrations but there is a huge number of spam bots connecting to my server and causing apache/mysql crash
I've installed CSF and logwatch and I also range blocked some IPs, lets see how it goes
|
| Posted by maleja, 07-14-2013, 10:56 PM |
| Please report it here if it works..Because i was also looking for it
|
| Posted by Master Bo, 07-15-2013, 01:05 AM |
| Personally, I use compromised (spammers') IP data from SFS and several other sources (such as infiltrated.net's list) and compose ipset-driven filters.
That blocks most spammers. Also, to add actual entries to that list, I process CMS logs to add the authors of spam comments to one of the mentioned blacklist.
Note: I filter, completely or partially blocking access for 280+K (actual number varies on daily basis) IPs/IP subnets without detectable degradation on a medium-power VPS. Without ipsets, you won't be able to filter significant number of compromised addresses even on very robust dedicated server.
|
| Posted by nidhal, 07-15-2013, 07:00 AM |
| Unfortunately, the server down again and I don't really know what to do
Here is the /var/log/messages logs if someone can find some useful information:
http://pastebin.com/raw.php?i=LTjZDZyB
@Master Bo
My knowledge are really basic with iptables, I don't want mess around with it because it can cause huge problems
Is there any tutorial I can follow?
|
| Posted by Master Bo, 07-15-2013, 09:22 AM |
| Looks like the tutorial is still to be written. I haven't found tools on automating using ipsets, even though they are available for quite a long time.
If the mentioned automation filtering using well-known IP blacklists can be of use, I can provide both the script and explanations on how to use it.
Note: OpenVZ kernel modifications are not compatible with ipset extension.
|
| Posted by disklayer, 07-16-2013, 02:00 AM |
| I faced a similar issue awhile ago, and I was able to resolve it by restricting proxy connections with php. I have yet to receive a false positive with this, and so far our bot issues have been resolved.
Hope this helps.
Last edited by disklayer; 07-16-2013 at 02:10 AM.
|
| Posted by nidhal, 07-17-2013, 05:55 AM |
| Thank you
Tried that but the server still get crashed, also I received few false positive
|
| Posted by starline, 07-17-2013, 08:41 AM |
| If you know spam bot ip's, try blocking them thru htaccess.
|
Add to Favourites 
Print this Article
Also Read
Shared Hosting
Shared Hosting
