Contact Us Page - Is this spam?

[exoticcorpse]

Hi, Just wondering if anyone can give me some advice or let me know if you've had a similar issue. I launched a zen store this week and am receiving the occassional email through my Contact Us page that look like the following.

From: chadrxtalqp
Email: [email protected]

------------------------------------------------------

TRX9H1 mjspjlricpsb, htjxzjfukbjj,
[link=http://meymzjgbetws.com/]meymzjgbetws[/link], http://oscdxfehxnqh.com/

------------------------------------------------------

[exoticcorpse]

After googling the IP addresses (194.165.42.59, 94.102.60.182) I discovered it is indeed spam. Is there any way to prevent this kind of spam being sent through my Contact Page? I'm aware of the CAPTCHA mod, but I found posts on the web stating that this specific spammer bypasses basic validation, captchas etc.

[jimkay]

I received the same crap from this animal. I just put his IP range in a deny in my .htaccess

[exoticcorpse]

If you have a minute, do you mind explaining how to do that?

[jimkay]

Glad to. Bear in mind that I'm just a designer with "some" light scripting, programming skills. I got this through research on this forum and Google. It does work though because I was getting these punks trying to hack my database. Most of them were coming from China so I blocked most if not all the IP addresses from there. Ok here goes:

Open your .htaccess file and do this:

order allow,deny
allow from all
Deny from 140.116.200
Deny from 38.103.63
Deny from 222.184

The IP addesses that have only 2 or 3 octets (numbers between/among the dots) are a range. For example, if the logged IP address is 140.116.200.128 and you exclude the 128 then everything that falls w/in that range is blocked.

Hope that helps.

[jimkay]

I forgot to mention that if you want to test it, put your own IP address in there and try to access your site via your browser. You should be blocked.

[FormArmor]

Hi,

We just uploaded a new contribution/add-on that you might want to consider. You can find the Form Armor Module for Zen Cart at:

http://www.zen-cart.com/index.php?ma...oducts_id=1202

Form Armor is a hosted subscription service that protects Web site forms against spam and abuse without requiring CAPTCHA images, math puzzles or other user tests. (Basically, we help your Web site forms look like regular forms again, but without the spam hassles.)

Thanks to DrByte and the rest of the Zen Cart Team, the module makes it super easy to use the Form Armor service with the Contact Us form and Tell-a-Friend form in your ZC shop.

If you'd like to give it a try, you can learn more and set up an account at https://www.formarmor.com/zencart/. There is a $9/month subscription fee for the service, and a portion of your monthly fee goes straight back to support the Zen Cart project. We also have a 100% satisfaction guarantee, so if you try it and then decide it's not right for you, just let us know in the first 30 days and we'll refund your subscription.

I'll also add that I agree with christon26, that locking out IP addresses can be really hit or miss and you can easily and accidentally lock out potential customers, too.

If you have questions let me know and I'll be glad to help where I can. Thanks!

[jimkay]

Hi,
Form Armor is a hosted subscription service that protects Web site forms against spam and abuse without requiring CAPTCHA images, math puzzles or other user tests.

Interesting. All this data goes to another server first.

[jimkay]

I'll also add that I agree with christon26, that locking out IP addresses can be really hit or miss and you can easily and accidentally lock out potential customers, too.

This isn't an issue if you're trying to block out an entire country's reserved IP addresses / range.

[karma-lab]

I recently also started receiving some of these kinds of spam emails to my customer service email. What I'd like to know, is some of you mention getting the IP address and blocking it - I know how to block in htaccess, but I don't know how to get the IP address for the email - the headers I am receiving do not have this information in it.

How are you doing this? Thanks....