Business How do you all block fraudulent new signups from Nigeria etc? - GoFuckYourself.com

Marcus · 01-15-2016, 05:28 PM

I run a hookup site thats free to join and members pay if they want more messages, watch videos etc. Everyday I get fake signups where they come in, post fake pictures, and try to lure guys to Yahoo/Gmail then work on them to send them money, plane ticket, etc.

It used to be easy to discover them but now their cloaking is so good they will say theyre in Chicago and their ip checks out. Makes it hard to find them.

Do you know any way to identify and block these fake accounts before they can sign up, or boot them once they're in? Ill get any software.
I have a Captcha but they still able to sign up. thanks

kkkkkk · 01-15-2016, 05:32 PM

Code:

geoip_country  /usr/local/nginx/geoip/GeoIP.dat;
geoip_city     /usr/local/nginx/geoip/GeoLiteCity.dat;

Good luck to you Mr. Aurelius

Sly · 01-15-2016, 05:35 PM

Are you blocking known proxy lists?

Marcus · 01-15-2016, 05:53 PM

Thanks guys, I will ask my admin.
Im going to hire a programmer to put some more security in place and didn't know what solution to ask him to implement.

lezinterracial · 01-15-2016, 05:54 PM

Quote:

Originally Posted by Sly

Are you blocking known proxy lists?

TOR too.

kkkkkk · 01-15-2016, 06:06 PM

Quote:

Originally Posted by Marcus

Thanks guys, I will ask my admin.
Im going to hire a programmer to put some more security in place and didn't know what solution to ask him to implement.

Those nginx includes above are in reference to IP Geolocation and Online Fraud Prevention | MaxMind of whom are the only show in town in my book but offer a very nice platform that is likely the most accurate in the public sphere. You can always fall back on coordinates. Longitude and latitude and the like. It's what everyone uses who wants an independent custom solution.

Klen · 01-15-2016, 06:15 PM

You need interactive ip checking - that means, even if user uses High anonimity aka socks proxy, you can still detect real ip by checking over flash or java, as flash is not passing proxy unless connection is done over VPN. There is also javascript detect called WEBRTC, which detect real ip even if VPN is used, unless user using browser extension which blocks WEBRTC. In case if user have javascript/flash/java disabled, then you dont want such user anyway.

Frank · 01-15-2016, 10:08 PM

Try Maxmind.

plaster · 01-15-2016, 10:40 PM

Quote:

Originally Posted by Frank

Try Maxmind.

This... $10 per like 50K queries and should easily identify the proxies.

shake · 01-16-2016, 12:17 AM

Pretty easy to spot based on ip address owner too. For example: comcast, Verizon etc = real person. Digital ocean, isprime etc = hosting co / proxy \ vpn.

Klen · 01-16-2016, 03:36 AM

Quote:

Originally Posted by shake

Pretty easy to spot based on ip address owner too. For example: comcast, Verizon etc = real person. Digital ocean, isprime etc = hosting co / proxy \ vpn.

I'v seen bots on ordinary isp's as well, even on mobile carrier isp's.

adultmobile · 01-16-2016, 10:00 AM

Not so easy (you block some legitimate user, and you don't get all the nigerians), but helps.

shake · 01-16-2016, 10:05 AM

Quote:

Originally Posted by KlenTelaris

I'v seen bots on ordinary isp's as well, even on mobile carrier isp's.

That is interesting, good to know.

01-15-2016, 05:28 PM	#1
Marcus Confirmed User Industry Role: Join Date: Jul 2001 Posts: 3,472	How do you all block fraudulent new signups from Nigeria etc? I run a hookup site thats free to join and members pay if they want more messages, watch videos etc. Everyday I get fake signups where they come in, post fake pictures, and try to lure guys to Yahoo/Gmail then work on them to send them money, plane ticket, etc. It used to be easy to discover them but now their cloaking is so good they will say theyre in Chicago and their ip checks out. Makes it hard to find them. Do you know any way to identify and block these fake accounts before they can sign up, or boot them once they're in? Ill get any software. I have a Captcha but they still able to sign up. thanks

01-15-2016, 05:32 PM	#2
kkkkkk svp get banned svp Industry Role: Join Date: Dec 2005 Posts: 1,628	Code: geoip_country /usr/local/nginx/geoip/GeoIP.dat; geoip_city /usr/local/nginx/geoip/GeoLiteCity.dat; Good luck to you Mr. Aurelius

01-15-2016, 05:35 PM	#3
Sly Let's do some business! Industry Role: Join Date: Sep 2004 Location: Austin, TX Posts: 31,294	Are you blocking known proxy lists? __________________ Vacares - Web Hosting, Domains, O365, Security & More - Paxum and BTC Accepted Windows VPS now available - just $50/mo Wanted: CCBill pay sites for sale

01-15-2016, 10:08 PM	#8
Frank Confirmed User Industry Role: Join Date: Nov 2001 Location: Your neighborhood Posts: 216	Try Maxmind. __________________ ⭐ HIGH PERFORMANCE SSD WEB HOSTING ⭐ $4.99 SPECIAL FOR ONE YEAR POWERFUL KVM VPS

01-16-2016, 12:17 AM	#10
shake frc Industry Role: Join Date: Jul 2003 Location: Bitcoin wallet Posts: 4,663	Pretty easy to spot based on ip address owner too. For example: comcast, Verizon etc = real person. Digital ocean, isprime etc = hosting co / proxy \ vpn. __________________ Crazy fast VPS for $10 a month. Try with $20 free credit

01-15-2016, 05:53 PM	#4
Marcus Confirmed User Industry Role: Join Date: Jul 2001 Posts: 3,472	Thanks guys, I will ask my admin. Im going to hire a programmer to put some more security in place and didn't know what solution to ask him to implement.

01-15-2016, 06:15 PM	#7
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	You need interactive ip checking - that means, even if user uses High anonimity aka socks proxy, you can still detect real ip by checking over flash or java, as flash is not passing proxy unless connection is done over VPN. There is also javascript detect called WEBRTC, which detect real ip even if VPN is used, unless user using browser extension which blocks WEBRTC. In case if user have javascript/flash/java disabled, then you dont want such user anyway.

01-16-2016, 10:00 AM	#12
adultmobile No, I am not banned Industry Role: Join Date: Nov 2003 Location: ChatGF.com Posts: 5,345	Not so easy (you block some legitimate user, and you don't get all the nigerians), but helps. __________________ TubeCamGirl.com