Board spam attacks (not hacked)

Get help with installation and running phpBB 3.2.x here. Please do not post bug reports, feature requests, or extension related questions here.
Post Reply
martini25
Registered User
Posts: 4
Joined: Wed Aug 08, 2018 3:02 pm

Board spam attacks (not hacked)

Post by martini25 » Thu Dec 06, 2018 6:54 pm

Hi guys,

what can one do in order to make sure the forum doesn't get hacked?

it happened to one i administer: in a section, there were about 5000 posts all of a sudden. Of course, spam!
I had no choice but to delete the whole branch and create it back. this was the first time.

Now it happened again. About 20.000 posts, out of nowhere. Any ideas pls?
Last edited by Mick on Fri Dec 07, 2018 8:09 am, edited 1 time in total.
Reason: Edited title to reflect real issue.

User avatar
warmweer
Registered User
Posts: 1437
Joined: Fri Jul 04, 2003 6:34 am
Location: Van Allen Belt ... well actually Belgium

Re: Board spam attacks (not hacked)

Post by warmweer » Thu Dec 06, 2018 6:57 pm

martini25 wrote:
Thu Dec 06, 2018 6:54 pm
Hi guys,

what can one do in order to make sure the forum doesn't get hacked?

it happened to one i administer: in a section, there were about 5000 posts all of a sudden. Of course, spam!
I had no choice but to delete the whole branch and create it back. this was the first time.

Now it happened again. About 20.000 posts, out of nowhere. Any ideas pls?
Spam and being hacked are not synonyms.
Using a good Q&A for registration is usually sufficient, and not allowing guest posting is advisable.
Last edited by HiFiKabin on Fri Dec 07, 2018 9:03 am, edited 1 time in total.
Reason: retitled
A bug is a feature that hasn't made it to the manual (yet)

User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3329
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: Board spam attacks (not hacked)

Post by HiFiKabin » Thu Dec 06, 2018 7:00 pm

I doubt you have been hacked. They will be SPAM accounts created in the same way a real member would.

Please see the following links

Have a look at See How to clean up a board hit by spam for some suggestions.


How to configure Q&A
  1. Administration Control Panel (ACP) > Spambot countermeasures> Installed plugins > click the dropdown box and select Q&A (it will be greyed out)
  2. Click the configure button then click add
  3. Add your question and answer (you need a Q&A for each language you have installed) click submit
  4. Click "back to previous page" then click "back"
  5. Select Q&A from the dropdown box (again)
  6. Click submit at the bottom of the page.
  7. Done.
Please visit Preventing Spam in phpBB3 for various options for fighting spam in phpBB

If your board really has been hacked, please do the following before making any modifications to your board (this includes changing passwords, editing files, running the Support Toolkit, etc.):
  1. Save an archive file comprising copies of all the files (this can be done by creating a zip or tarball of the files).
  2. Save a copy of the database.
  3. Save the server access logs for the time of the hack (they may be available in the ???logs??? directory on the server, in your host???s control panel or only by request directly from your host).
  4. File a report in the incident tracker. Attach the items from steps 1-3 when you file the report or upload them to a secure location for the incident investigation team to download. Please do not start a new topic on the board, the proper place for incidents reports is the tracker.

User avatar
John connor
Registered User
Posts: 1827
Joined: Fri Nov 14, 2014 5:14 pm
Location: U S Of A
Contact:

Re: Board spam attacks (not hacked)

Post by John connor » Fri Dec 07, 2018 6:20 am

I've written about how to help from getting hacked on my forum. The link is in my signature. Also in my signature is an extension and a script that can help greatly with spam.
Last edited by HiFiKabin on Fri Dec 07, 2018 9:03 am, edited 1 time in total.
Reason: retitled

martini25
Registered User
Posts: 4
Joined: Wed Aug 08, 2018 3:02 pm

Re: Board spam attacks (not hacked)

Post by martini25 » Fri Dec 07, 2018 8:24 pm

waw, thanks for the details.
i have to set up some good questions, maybe some math problems.

HiFiKabin, that's a nice kabin! :)

User avatar
KevC
Support Team Member
Support Team Member
Posts: 68466
Joined: Fri Jun 04, 2004 10:44 am
Location: Oxford, UK
Contact:

Re: Board spam attacks (not hacked)

Post by KevC » Fri Dec 07, 2018 8:34 pm

Not maths.

You need something that requires logic and understanding to solve. Bots can do maths or any general knowledge very easily.

Ask something unique about your board such as something that's in the logo on that only someone who knows the subject would know but could not just google the answer to.
And only use 1 question. If you use lots, and they get in again, you won't know which one they've cracked so you'll have to change all of them.
-:|:- Support Request Template -:|:-
Image
Cheap UK Hosting
"In the land of the blind the little green bloke with no pupils is king - init!"

Post Reply

Return to “[3.2.x] Support Forum”

Who is online

Users browsing this forum: No registered users and 26 guests