By faqing on

Subject as "people" spams all the time on my sites. I need to disable all comments. Even the captcha and spam modules are installed, you still can see the log page, full of message: "people".

Anyone has good method stop the spammer? I mean I want him disappear from my log.

⋅ Categories: Drupal 5.x

Comments

apsivam’s picture

apsivam commented

If that comes from a specific IP address you can block it
go to Administer -> User Management -> Access rules

--
Cheers,
Sivanandhan, P. (a.k.a. apsivam)
www.apsivam.in

michelle’s picture

michelle
she/her
Primary language English
Location Wisconsin, USA
commented

Unfortunately, the "people" spammer seems to have a collection of IPs so you can't ban at that level. :(

Michelle

--------------------------------------
My site: http://shellmultimedia.com

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

The spam module keeps them at bay on my site. I can't keep him out of the log, but his posts never show up.

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

NancyDru

michelle’s picture

michelle
she/her
Primary language English
Location Wisconsin, USA
commented

I just ditched the broken captcha in favor of the spam module and it's working great. I was just responding to the OP's wish to keep him out of the logs as well. No way to do that, afaik, because his IP changes so you can't ban on that.

Michelle

--------------------------------------
My site: http://shellmultimedia.com

faqing’s picture

faqing commented

Thanks for sharing. Now I think I can stop "people"

install spam module, set spam filter as
(/admin/content/spam/custom)

Filer expression: people
Filter type: plain text
Scan: header only
Match effect: disabled

I will come back later, if this method is not working.

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

to catch the multiple links. Unfortunately, this seemed to have inflamed his bot even more and my site was approaching denial-of-service levels. I have put my site into maintenance mode for a few days to see if that will make him go away.

Oh, he also sometimes uses the title "peoples".

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

NancyDru

scenicwonders’s picture

scenicwonders commented

I am in the process of installing the Spam module to see if it helps repel future attacks, but need to flush 100s of spam messages from the Approval Queue.

Is there anyway to do this without the time and tedium of deleting them one page worth at a time? As this is a new site I'm just bringing online, I can flush the entire Approval Queue if need be without losing any real comments.

Thanks.

Matt

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

It's on the settings page.

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

NancyDru

scenicwonders’s picture

scenicwonders commented

Thanks for your reply. Let me restate my question in more detail.

The pages of "people" comments to which I am referring are not marked as "spam", since they were submitted before I installed the Spam module. So I'm not sure to which Settings page you are referring.

I now have the Spam module installed with a custom filter which is handling new "people" comments OK. I thought I could use that filter's "scan" feature to mark the older "people" comments as spam, letting the filter's auto-delete feature remove them. But running "scan" yields a screen with them all marked as "not spam".

So, the question is, how can I mass-delete the pages of "people" comments that pre-date installation of the Spam module?

Matt

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

I'm afraid you're going to have to do it a page at a time.

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

NancyDru

Christopher Herberte’s picture

Christopher Herberte commented

With no ill effects AFAIK.

mysql> DELETE FROM comments WHERE subject = "people";

Worked for me.

http://www.drunkerer.com

hd’s picture

hd commented

Look at http://drupal.org/node/150329 as posted by __chris - July 9, 2007 - 11:32 titled "spammer". It has been working for me (until the spam boot's behavior will change). The beauty about it is that it kills the spam bot dead before it gets at Drupal.

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

NancyDru

hd’s picture

hd commented

The RewriteCond used does not match the genuine Google bot. Actually, scaring site admins to block something that looks like the almighty and beloved Google bot, is exactly what that spam moron is trying to accomplish.

hd’s picture

hd commented

Now he is not spoofing the referrer information anymore, ie leaving it blank, and thus passes the RewriteCond in .htaccess and reaching Drupal, where the spam comments are eliminated by the spam filter. Interesting: The "people" spam bot does answer the normal math question of the Captcha module. Since I am on Drupal 5.1, I am currently suffering the "broken relationship" of the captcha and textimage module, which leaves me with just the math question. Of course, I could drop captcha and use MyCaptcha or the captcha Riddle module as other site admins do ...

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

He may not be smart, but he sure is persistent!

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

NancyDru

hd’s picture

hd commented

Could also have been himself adding this one only so far without referrer information and answering the math question rather than his spam bot. And yes, that is being persistent. He probably also reads all this and knows exactly about our defence strategies.

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

Hadn't thought about that. Does he only attack Drupal sites? The site that he attacks is the one most often referenced here on DO.

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

NancyDru

faqing’s picture

faqing commented

Just install MyCaptcha module (also require Form store module). You can download the two modules here: http://drupal.org/project/form_store

Now you can delete Captcha module and Spam module.

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

There's a new spammer on the block. His posts are entitled "bookmarks" and it's a bunch of porn links.

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

NancyDru

ericatkins’s picture

ericatkins commented

I've come to accept the fact that I'm not going to be able to prevent the "people" spammer from spamming my site without causing a lot of UI problems for my regular users.

---
the Hushed Casket | Eric Atkins

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

Actually, I don't any more. I let the Spam module do its work and I allow his spam to sit there for a week (unpublished, of course). In doing that, the Spam module builds up a blacklist and stops him from submitting any more from the same IP address. This has reduced the volume considerably. Maybe, eventually, this idiot will go away.

Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database

NancyDru