Spam Attacks

Hello everyone. I have a small imageboard and I'm here to ask you how to block spammers. Recently I noticed an increase in the daily visitors and all of a sudden these bots started spamming porn links. I have a system that allows me to block and delete all posts made from an IP. The problem is that this time all the IPs were different. Has it ever happened here? A solution might be to add a captcha system but I don't want to have any business with Google. Should I create a personal captcha? Is there a way to identify and automatically block bots?

Probably using a proxy list, I'd block proxies temporarily if I were you.

>>7853 >Hi, I'm a spammer and I'd like to research your defenses against me Call me jaded, but this seems like a research thread. I like how there's no captcha here. I'd hate for you to ruin that by luring someone into spilling the secret sauce.

You make your own Terminator bot to kill the bad bots.

>>7855 Here's proof that I'm not lying https://www.4kev.org/threads/15523#15573 If you don't know the answer it's ok, just don't accuse me of being a spammer

>>7859 What have you tried ? I realize your source code is at https://github.com/federicoolivo/4kev , but you don't seem to have any spam mechanism or bot detection algorithm logic ,whether it is similar to tinyboard's / vichan or otherwise. Stuff that lainchan / vichan has includes: Captcha's https://github.com/lainchan/lainchan/pull/146 (this isn't merged yet because it doesn't integrate well, it also isn't enabled here) https://github.com/vichan-devel/vichan/tree/master/inc/captcha https://github.com/vichan-devel/vichan/blob/master/inc/config.php Filters (If post has certain criteria then either prevent post from being posted or delete post after certain time frame or some other action) Field input randomization and Spam Hash. (this is inherited from tinyboard) Manual deletion by moderators Report notification bot which notifies moderators and janitors of reported posts. For porn links specifically we mostly use filters.

>>7862 Thank you for your answer. The reason why my admin page is not on Github is because I don't want the spammers to know how I can block them. I'm happy to see that the methods we use to counter attacks are very similar. I'm using filters right now. In case of emergency I also have a big red button that disables posting for everyone. Never heard of Field input randomization or Spam Hash, I will look it up

>>7855 making a spambot is not hard at all. Only thing that makes it hard to do is proxy/vpn blocking. captcha can easily be outsourced to India (not to mention there is a few ways to bypass that soykaf using the audio stuff). Most clientside validation can easily be spoofed/bypassed. Only problem is to get legit looking IP's without making a massive botnet

>captcha >not using captchouli https://github.com/bakape/captchouli

just put a captcha. there's no reason why it would have to be from google. >>7854 please don't block people using proxies. some people need them. >>7871 outsourcing is still a huge barrier compared to no captcha. i feel like it would only be cost effective on a very popular site. do you have any information about how big a site.

ML solved captcha quite a while ago. Just don't know how much of a hurdle it is to get your hands on it for avg attacker.