"people" spam
faqing - June 26, 2007 - 12:22
Subject as "people" spams all the time on my sites. I need to disable all comments. Even the captcha and spam modules are installed, you still can see the log page, full of message: "people".
Anyone has good method stop the spammer? I mean I want him disappear from my log.
If that comes from a
If that comes from a specific IP address you can block it
go to Administer -> User Management -> Access rules
--
Cheers,
Sivanandhan, P. (a.k.a. apsivam)
www.apsivam.in
Don't think so
Unfortunately, the "people" spammer seems to have a collection of IPs so you can't ban at that level. :(
Michelle
--------------------------------------
My site: http://shellmultimedia.com
Hmm...
The spam module keeps them at bay on my site. I can't keep him out of the log, but his posts never show up.
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
Yeah
I just ditched the broken captcha in favor of the spam module and it's working great. I was just responding to the OP's wish to keep him out of the logs as well. No way to do that, afaik, because his IP changes so you can't ban on that.
Michelle
--------------------------------------
My site: http://shellmultimedia.com
Thanks for sharing. Now I
Thanks for sharing. Now I think I can stop "people"
install spam module, set spam filter as
(/admin/content/spam/custom)
Filer expression: people
Filter type: plain text
Scan: header only
Match effect: disabled
I will come back later, if this method is not working.
I also added some filters
to catch the multiple links. Unfortunately, this seemed to have inflamed his bot even more and my site was approaching denial-of-service levels. I have put my site into maintenance mode for a few days to see if that will make him go away.
Oh, he also sometimes uses the title "peoples".
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
How to recover from "People" spam attack?
I am in the process of installing the Spam module to see if it helps repel future attacks, but need to flush 100s of spam messages from the Approval Queue.
Is there anyway to do this without the time and tedium of deleting them one page worth at a time? As this is a new site I'm just bringing online, I can flush the entire Approval Queue if need be without losing any real comments.
Thanks.
Matt
Set them to auto-delete
It's on the settings page.
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
re: Set them to auto-delete
Thanks for your reply. Let me restate my question in more detail.
The pages of "people" comments to which I am referring are not marked as "spam", since they were submitted before I installed the Spam module. So I'm not sure to which Settings page you are referring.
I now have the Spam module installed with a custom filter which is handling new "people" comments OK. I thought I could use that filter's "scan" feature to mark the older "people" comments as spam, letting the filter's auto-delete feature remove them. But running "scan" yields a screen with them all marked as "not spam".
So, the question is, how can I mass-delete the pages of "people" comments that pre-date installation of the Spam module?
Matt
Sorry
I'm afraid you're going to have to do it a page at a time.
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
I've deleted these with SQL
With no ill effects AFAIK.
mysql> DELETE FROM comments WHERE subject = "people";Worked for me.
http://www.drunkerer.com
RewriteCond in .htaccess
Look at http://drupal.org/node/150329 as posted by __chris - July 9, 2007 - 11:32 titled "spammer". It has been working for me (until the spam boot's behavior will change). The beauty about it is that it kills the spam bot dead before it gets at Drupal.
Doesn't it block the Google search?
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
It does not block the Google Bot
The RewriteCond used does not match the genuine Google bot. Actually, scaring site admins to block something that looks like the almighty and beloved Google bot, is exactly what that spam moron is trying to accomplish.
He is back
Now he is not spoofing the referrer information anymore, ie leaving it blank, and thus passes the RewriteCond in .htaccess and reaching Drupal, where the spam comments are eliminated by the spam filter. Interesting: The "people" spam bot does answer the normal math question of the Captcha module. Since I am on Drupal 5.1, I am currently suffering the "broken relationship" of the captcha and textimage module, which leaves me with just the math question. Of course, I could drop captcha and use MyCaptcha or the captcha Riddle module as other site admins do ...
One thing you have to give him
He may not be smart, but he sure is persistent!
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
Himself
Could also have been himself adding this one only so far without referrer information and answering the math question rather than his spam bot. And yes, that is being persistent. He probably also reads all this and knows exactly about our defence strategies.
Hmm...
Hadn't thought about that. Does he only attack Drupal sites? The site that he attacks is the one most often referenced here on DO.
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
The Problem solved
Just install MyCaptcha module (also require Form store module). You can download the two modules here: http://drupal.org/project/form_store
Now you can delete Captcha module and Spam module.
New Kid
There's a new spammer on the block. His posts are entitled "bookmarks" and it's a bunch of porn links.
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
I've come to accept the fact
I've come to accept the fact that I'm not going to be able to prevent the "people" spammer from spamming my site without causing a lot of UI problems for my regular users.
---
the Hushed Casket | Eric Atkins
Actually, I don't any more
Actually, I don't any more. I let the Spam module do its work and I allow his spam to sit there for a week (unpublished, of course). In doing that, the Spam module builds up a blacklist and stops him from submitting any more from the same IP address. This has reduced the volume considerably. Maybe, eventually, this idiot will go away.
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database