Log in

View Full Version : Spammers


jkcerda
09-08-2008, 10:31 PM
any way to automatically prevent/block any IP's from China?15 in 2 weeks its a bit much.

SEOvB
09-08-2008, 10:33 PM
You really dont want to block entire regions of IP's from accessing your site as thats not the solution (well it is, but not a good one) Instead try different forms of human verification methods, generally the recaptcha and the question and answer forms work really with random questions.

But yes, you'll need to find the chineese IP range, and then use wildcards to block the entire country off in the IP ban manager

jkcerda
09-08-2008, 10:40 PM
the spammers that I have been getting seem to be bothering with all the verifications.

SEOvB
09-09-2008, 12:25 AM
Im not real sure where to find the chinese IP address set at, but if you google it you're more than likely find it.

Then add the set to the IP ban manager, the best way would probably be with wild cards

UKBusinessLive
09-09-2008, 05:37 PM
Here you go Buddy

You can use this site to download entire country ranges

http://www.ipdeny.com/ipblocks/


Hope this helps

Take care :rolleyes:

jkcerda
09-11-2008, 03:49 AM
Here you go Buddy

You can use this site to download entire country ranges

http://www.ipdeny.com/ipblocks/


Hope this helps

Take care :rolleyes:

thank you.

Jenkins
09-11-2008, 04:02 AM
i've had this issue as well, i just added the verification questions, and it seemed to slow them down.

murekhalir
09-11-2008, 05:19 AM
yeah - to be honest all these spammers are chinese from china.

I was GOING to post about this issue right now, but i saw this.

is there effective ways on dealing with spam? I changed all verifications and etc. I even put confirmed email addresses and they still spam (once and a while).

I htink they are manual spam? Oh god, i dont want to see chinese sweat shops of spammage.

No offense.

I'm chinese myself, but american. AND I DONT LIKE THEM ON MY SITE. lol....

UKBusinessLive
09-11-2008, 04:36 PM
yeah - to be honest all these spammers are chinese from china.

I was GOING to post about this issue right now, but i saw this.


is there effective ways on dealing with spam? I changed all verifications and etc. I even put confirmed email addresses and they still spam (once and a while).

I htink they are manual spam? Oh god, i dont want to see chinese sweat shops of spammage.

No offense.


I'm chinese myself, but american. AND I DONT LIKE THEM ON MY SITE. lol....

Its a pain in the backside when it happens, if you don't really have chinese members (From China) on your board then ban the entire country you can do it from your forums AdminCP or even from your hosting CP.

I've deleted all china and russia from my site from my Cpanel also.

You can get all China IP addresses here http://www.ipdeny.com/ipblocks/data/countries/cn.zone

I don't think i'd be popular if i copied them all to this post :rolleyes:

Good Luck, with the united fight against the spammers :D

murekhalir
09-16-2008, 06:39 AM
meh - another chinese guy still broke through even after ip ban of all china.

LadyBeth
10-01-2008, 11:36 AM
I am being bombarded. I have image verification set tight, but am still getting registration after registration. HELP!!!!

akoj
10-01-2008, 12:57 PM
Same here. Looking for some hacks to deal with this!

weetabx
10-01-2008, 01:53 PM
iam having the same problem russian and china ip its driving me nuts looks like the using a autopost program have had over 15 today !!!!!!!! if this carries on will have to shut board for a clean up by this evening Help!!!

--------------- Added 1222873182 at 1222873182 ---------------

ok now have over 30 reg up and iam now shutting the board for maintains there is now over 200 post i need to go thru :(

jkcerda
10-01-2008, 02:44 PM
15 spammers from last night to today, different countrys, CHina, Russian Germany, Latvia:mad: WTH is going on?, never had so many:mad:

djxcee
10-01-2008, 02:52 PM
You should try using reCaptcha. Works wonders for me.

jkcerda
10-01-2008, 03:05 PM
You should try using reCaptcha. Works wonders for me.

ill give it a try, I used the ips block listed, but I still get them, even when I manually add their IP to the list, I can see the on the list of viewers:mad:.

AmandaB
10-01-2008, 03:25 PM
I have the same issue.

akoj
10-01-2008, 04:49 PM
Installed this about 2 hours ago and it has caught almost 20 https://vborg.vbsupport.ru/showthread.php?t=183917&highlight=possible+spam

murdoc
10-01-2008, 05:23 PM
Installed this about 2 hours ago and it has caught almost 20 https://vborg.vbsupport.ru/showthread.php?t=183917&highlight=possible+spam
i would like to know has the Security of VB been Breached, i mean i just banned 20 members off the forums ???

would also like to know will there be a Urgent Security update, as something has gone Horribly wrong.

and thank you for Recommending this script, ive also locked registration until im fully sure i have got all of them.

jkcerda
10-01-2008, 05:33 PM
Jesus Christ, 5 more in 2 hours:mad:, I am getting flooded:mad:

akoj
10-01-2008, 05:36 PM
Some other board owners were saying that changing from image verification to a question/answer has helped immensely too.

Piper0005
10-01-2008, 05:58 PM
Hi thanks for the suggestions! My site has been hit by a ton of spammers today too - at least 40 so far!

Swampfox
10-01-2008, 06:07 PM
Most bots select the GMT-12 timezone, you can block their registrations with this...

https://vborg.vbsupport.ru/showthread.php?t=141554

It is working with 3.7.3 for me, Ive had 2 bots in 1 1/2 years

also, and this is just a suggestion, Im not sure how right I am about this

turn off email verification, the bot software waits for the verification email, verifies, then posts spam, if the email never comes they may never post, even if they manage to register.

NS_007
10-01-2008, 06:36 PM
Many forums are reporting the same (including my little bitty forum). Turning on ReCaptcha has stopped it dead. No more registrations or spam!

weetabx
10-01-2008, 06:52 PM
going to give this ago reCaptcha as i was using question/answer fingers crossed this stops

NolimitMike
10-01-2008, 06:52 PM
I had a huge amount of spammers today more than normal and I added a mod that asks a question from here. So I am using both the question and the image verification. I think I had like 20-25 register in matter of an hour.

jkcerda
10-01-2008, 06:55 PM
few guys that have forums other than VB are also reporting this.

I turned off registrations for a bit. need to look at re-captcha.

cheat-master30
10-01-2008, 06:57 PM
Question and answer with topical questions and answers works great (it's also minimum wage moron proof). Or then do I what I did on my own forum, pre moderate the first five posts all new users manually, that will certainly kill spam dead.

Digital Jedi
10-01-2008, 07:01 PM
I've found that ultimately, the best way to deal with spammers, after taking all the other necessary precautions, is to just be more relentless then they are. They're persistant, but after a while, they give up if all their effort ends up not being worth the effort.

jkcerda
10-01-2008, 07:06 PM
how can you add more questions/answers to the human verification?

cmmguy
10-01-2008, 07:23 PM
I have had a 5 spammers sign up today all from a very narrow band of IP addresses. I already had the Miserable User installed and put the first two segments of the IP addresses in to the Miserable User IP field.
This stopped them from becoming a problem even thought they signed up.

I also added 4 required fields that are related to my industry. Only legit users would know the answers. The addition of required fields that dont match the BOT script stops a lot of them. The ones that sign up manually dont know the correct type of answer and make finding the spammers a lot easier.

One other thing... I have unlimited texting on my phone so I have my forum setup to text me when a new user signs up. The text shows me the name of the user and most users in my field use relatively "normal" user names so a spammer user stands out. I can easily check the one that dont look legit and I can catch a trend of new users even when I am not near a computer and decide if I need to get to one.

--------------- Added 1222893303 at 1222893303 ---------------

btw.

How are the spammers finding our forums?
What is consistant in the forum that they are googling for?
Is there a list on vBulletin.com or .org that they are using to find us?

Just curious if there is something that can be changed. I know that I use /forum with my domain - is this a bad thing?

Digital Jedi
10-01-2008, 07:49 PM
how can you add more questions/answers to the human verification?
Use the NoSpam modification for your version of vBulletin. It will randomize questions.


btw.

How are the spammers finding our forums?
What is consistant in the forum that they are googling for?
Is there a list on vBulletin.com or .org that they are using to find us?

Just curious if there is something that can be changed. I know that I use /forum with my domain - is this a bad thing?
I'm pretty sure it's just random. The idea behind spam is to just cover as much ground as they possible can. There's no rhyme or reason to it.

Piper0005
10-01-2008, 08:01 PM
I added the NoSpam modification and the vbStopForumSpam and both are working great. The vbStopForumSpam has prevented about 6 spammers from registering already (in about an hour).

Swampfox
10-01-2008, 08:04 PM
the bot software has a huge database of forum addresses, they link directly to the registration page, changing the url of that page is effective also, at least short term

I have seen the bot software in action, knowing how it works helps in defending against it

there is a flash demo online but Im not sure if it would be ok to post a link here

iogames
10-01-2008, 08:20 PM
I've found that ultimately, the best way to deal with spammers, after taking all the other necessary precautions, is to just be more relentless then they are. They're persistant, but after a while, they give up if all their effort ends up not being worth the effort.

If we do just a little $$$ with a Forum what is their earn/motive?

Thamelas
10-01-2008, 08:21 PM
I am being flooded with porn and auto insurance spammers. I am using email confirmation, captcha, as well as NoSpam and some are still getting thru. I believe it is human controlled. I have already banned 5 users today. Also I banned all mail.ru email addresses.

bluidkiti
10-01-2008, 08:36 PM
I got hit hard today at 3 of my sites by the spammers. Right now I have all 3 forums set so I have to approve members. Either this is working or they have stopped for some other reason.

jkcerda
10-01-2008, 08:40 PM
how can you ban by e-mails?

I would like to nail all the .cn .ru and GMAIL accounts:D

Thamelas
10-01-2008, 08:58 PM
AdminCP > vBulletin Option > User Banning Options

You will see the section "Banned Email Addresses". Just put in the addresses you want to ban. I put in @mail.ru to ban all addresses from there. It also blocks new registrations from using those email addresses. I'm on the verge of banning all gmail addresses.

I let current users keep using the mail.ru address though. A spammer will get caught.

I actually had to ban another porn spammer since my last post...

bluidkiti
10-01-2008, 09:01 PM
Spoke too soon. Getting hit with another wave but I have to approve them but they can still register.

I agree - I am about ready to ban gmail emails also.

Thamelas
10-01-2008, 09:03 PM
I am getting hit right now. 2 more registering. This has to be human controlled, or they have found a way around all registration security.

Yogesh Sarkar
10-01-2008, 09:13 PM
Getting hit by spambots as well for the first time since I switched to vbulletin over a year back, spambots advertising porn. One characteristic I have found in every one of them is that all say "Man" under the biography section and have ip address from all over the world with majority of the email addresses belonging to gmail.

Managed to slow them down by modifying the usual no spam questions with new one.

khosk
10-01-2008, 09:33 PM
I am getting spam all of a sudden on my two vBulletin forums, started about 2 hours ago.

Thamelas
10-01-2008, 09:41 PM
Same with me. They all say "Man" in the biography box, are spamming porn, and the IP's are from all over the world.

khosk
10-01-2008, 10:47 PM
I'm looking at my logs and this spambot never even calls the captcha image, someone has found a flaw in the registration process that lets it bypass this step.

Swampfox
10-01-2008, 10:50 PM
No, they decode the captcha images in a matter of seconds

I posted the fix for this a few pages back, you're wasting your time with email verification and captcha

someone check the spammers user profile in the admincp, see if they are selecting GMT-12 as the time zone, if so the mod i posted earlier will stop them cold

khosk
10-01-2008, 10:55 PM
Here are the logs, you can see no image.php so the bot never even looked at the captcha.

oh well it's cutting off part of the logs. The first two lines call a parameter s with two different long hexadecimal strings.


84.19.188.30 - - [01/Oct/2008:18:38:44 -0400] "GET /forum/register.php? HTTP/1.0" 200 18156 "http://volkovtrio.com/sound/pre/index.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
84.19.188.30 - - [01/Oct/2008:18:38:48 -0400] "GET /forum/index.php? HTTP/1.0" 200 45797 "http://www.erisaboard.com/index.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
84.19.188.30 - - [01/Oct/2008:18:39:01 -0400] "GET /forum/register.php HTTP/1.0" 200 17854 "http://www.erisaboard.com/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
84.19.188.30 - - [01/Oct/2008:18:39:02 -0400] "POST /forum/register.php?do=register HTTP/1.0" 200 23413 "http://www.erisaboard.com/forum/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
84.19.188.30 - - [01/Oct/2008:18:39:05 -0400] "POST /forum/register.php?do=addmember HTTP/1.0" 200 23907 "http://www.erisaboard.com/forum/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01"
6

jkcerda
10-01-2008, 10:58 PM
:mad:I shut off registrations, 30 in about 16 hours:mad:

Thamelas
10-01-2008, 11:00 PM
This needs to be reported to Jelsoft ASAP. Its rediculous and needs to be fixed like yesterday!

jkcerda
10-01-2008, 11:00 PM
I have over 7 trying to register & other "guest" trying to start threads or events:mad:

Swampfox
10-01-2008, 11:03 PM
Maybe they are using a newer bot software, if so there may be a weakness that we can use to block them, such as the "Man" in the profile field

Can someone please check and post the timezone they are selecting when they register?

Yogesh Sarkar
10-01-2008, 11:04 PM
I'm looking at my logs and this spambot never even calls the captcha image, someone has found a flaw in the registration process that lets it bypass this step.
That was I was thinking of as well and from the looks of it, it can bypass nospam as well.

jkcerda
10-01-2008, 11:05 PM
different time zones,-12 , +8 , -3:30

Swampfox
10-01-2008, 11:09 PM
Block all 3 of those, no english speaking countries involved, and a legitimate member is smart enough to just select a different time zone, the bots are automated and wont be able to

jkcerda
10-01-2008, 11:10 PM
Block all 3 of those, no english speaking countries involved, and a legitimate member is smart enough to just select a different time zone, the bots are automated and wont be able to

what MOD do I need to do that?

Swampfox
10-01-2008, 11:11 PM
<a href="https://vborg.vbsupport.ru/showthread.php?t=141554" target="_blank">https://vborg.vbsupport.ru/showthread.php?t=141554</a>

jkcerda
10-01-2008, 11:16 PM
thanks, ill give it a try

Piper0005
10-01-2008, 11:17 PM
If that does not work I recommend trying vbStopForumSpam. I installed it a few hours ago and it has stopped over 25 spam registrations already. (its in the vbulletin 3.6 mods but works with my site which is 3.7)

https://vborg.vbsupport.ru/showthread.php?t=176481

fmckinnon
10-01-2008, 11:30 PM
I've been getting nailed w/ this issue, too ... installed vbStopForumSpam and the Time Zone one.

Eric HRF
10-01-2008, 11:57 PM
If that does not work I recommend trying vbStopForumSpam. I installed it a few hours ago and it has stopped over 25 spam registrations already. (its in the vbulletin 3.6 mods but works with my site which is 3.7)

https://vborg.vbsupport.ru/showthread.php?t=176481

Will install that! So far I've just banned russia and china ip addresses. Hate doing that.

Yogesh Sarkar
10-02-2008, 12:24 AM
This keeps getting interesting, just saw an ip address trying to register on my forum and it turns out it is a webserver at the planet and belongs to imageshack!

I guess it is some kind of spamming trojan/virus which is using people's computers and server to do this. I have already submitted an abuse report with imageshack, lets see how they respond to this.

Ohiosweetheart
10-02-2008, 12:44 AM
Same with me. They all say "Man" in the biography box, are spamming porn, and the IP's are from all over the world.I'm getting Man in the biography box and test in some of the location boxes. the rest are around the globe. :rolleyes:

dougeetx
10-02-2008, 12:54 AM
Same here...on several of my boards...

AsmodeusLore
10-02-2008, 01:14 AM
Same issue here.

Plenty of new spam, but practically none before today.

I'm hoping to avoid the timezone mod. I really don't want to get into an arms race with spammers. If i block timezone, they'll change to a different timezone, then i need a new method.

TMH63
10-02-2008, 01:24 AM
I just installed the timezone hack. And I want to lock my forums down GOOD! I could care less about any timezone outside the US or Canada, so my question is....... Will entering these as you see them work fine? All the example gives in the software is, Example: 1,3,-2

-12, -11, -4:30, -3, 12, -1, +1, +2, +3, +3:30, +4, +4:30, +5, +5:30, +5:45, +6, +6:30, +7, +8, +9, +9:30, +10, +11, +12



Thanks!

dougeetx
10-02-2008, 01:29 AM
I've turned on the Question/Answer human verification. It seems to have stopped them for now.

jkcerda
10-02-2008, 01:31 AM
wow, many trying to register, I have registrations off untill I install the MODS:mad::mad:

CP,
10-02-2008, 01:34 AM
Spam is on the rise now... just yesterday and today we have been getting an influx of over 30 spam registrations from russia.... and the email they register with always resolves to gmail or some other free email service.

We have email verification and they seem to also verify their email accounts some how and spam...

Meestor_X
10-02-2008, 01:39 AM
They are also getting by the "Moderate New Members" setting in AdminCP.
As well, there seems to be some evidence that they are "bypassing" image verification AND the Question/Answer.

See here: http://www.vbulletin.com/forum/showthread.php?p=1631469#post1631469

ShadMan
10-02-2008, 01:46 AM
Those of you using cPanel to block, are you using the IP Deny tool? If so, are you entering each individual range from the zone tables on the IPDeny site? My cPanel will only let me enter one range at a time, and there are tons for China alone. I can copy the entire list into my firewall deny table directly, but my firewall crashes after about 1000 entries or so, which is just enough to block China and Russia maybe. Maybe I should just set a Deny All and put the USA IPs in the Allow. ;)

FYI - I had over 50 spam registrations today, with only 1 prior to today in the 4 months my forum has been open. I enabled ReCaptcha about 45 minutes ago, and none since.

AsmodeusLore
10-02-2008, 02:04 AM
Re they getting around Image Validation only, or are they getting around reCaptcha too?

dougeetx
10-02-2008, 02:09 AM
Turn on human verification with Question/Answer and put in a simple question like "what's 2 plus 3". Make sure to spell it out instead of using symbols just in case it looks for that.

TMH63
10-02-2008, 02:22 AM
Turn on human verification with Question/Answer and put in a simple question like "what's 2 plus 3". Make sure to spell it out instead of using symbols just in case it looks for that.


Where do you modify the questions/answers at specifically?

GSeybold
10-02-2008, 02:25 AM
Most of my spam comes from China, Russia, and Pakistan. Alot from Pakistan. So these countries are banned. I have found that this does not hurt my new registrations in the least. I also do not allow gmail as most of my spammers use gmail accounts. This has helped ALOT as well. Every once in a while I get someone pissed because they can't register using Gmail but we take care of this by registering them manually once we've checked out their registration. You also want to censor the following because they hit many forums hard. In one day we had over a hundred spammers for addition recovery. Little did they know two can play at this game. A-holes! LOL

addictionrecovery.net addictionrecovery Buddhism rack111

bangaloreflowerplaza@gmail.com
kingphonestore@hotmail.com
maks.digitalinfozz@yahoo.com
dukepikaso@aol.com
puneonnet@hotmail.com
saadepunjab@gmail.com
chennaiflowerplaza@gmail.com 05

Doughboy
10-02-2008, 02:26 AM
I've been nailed today on two of my vb installations, including on a board that has never had a spam bot post before.

I made a post in another forum:
https://vborg.vbsupport.ru/showthread.php?p=1635249#post1635249

Cosoft
10-02-2008, 02:53 AM
Same issue here.
Plenty of new spam, but practically none before today.

Regards

Meestor_X
10-02-2008, 02:57 AM
Me too. Never had a problem until yesterday.

DJMIKE
10-02-2008, 02:58 AM
me too

moonbase
10-02-2008, 04:25 AM
We have had none until yesterday. They say "Man" in the Bio and "Test" in the user name.

These two IP addresses are almost always attached to them:

142.163.3.122 - bad search bot?

200.63.42.75 - Hacker?

I know of a few boards that had this and then a attack on the Site Admin password/log-in and the sites were hacked.

There is something going on. We all need to find help for this.

jkcerda
10-02-2008, 04:46 AM
my registrations are still off, checked who is online & had about 8 trying to register:mad:

moonbase
10-02-2008, 04:56 AM
I just added ReChaptcha, banned the known IP addresses and email servers and made it so that a person has to approve them before posting.

TMH63
10-02-2008, 12:17 PM
Where do you modify the questions/answers at specifically?


No one knows how/where to change the question/answer verification stuff??

--------------- Added 1222953758 at 1222953758 ---------------

I don't know if the spammers have slowed down or what as I don't have any stats on that, but last night I installed the timezone hack and haven't had a spammer register yet! Let's hope that stays in place.

punchbowl
10-02-2008, 12:41 PM
Had maybe two spammers join before yesterday. 53 joined yesterday and they were joining just as fast today. Changed to recapcha about an hour ago - seeing how it goes.

Thamelas
10-02-2008, 01:13 PM
They seem to have stopped.

Charlie98902
10-02-2008, 01:19 PM
They hit my forum for the first time yesterday. I had about 20 new spammers register yesterday and already going 5 today added some stuff to it in hopes this will stop it. If not then I will start not allowing users to use free email addies. If I was to do so would it tell the registered users they need to change theirs?

cmmguy
10-02-2008, 01:49 PM
I switched to ADMIN verify on all new registrations and that keeps the forum clean and delays the legitimate new users but it is better than the mess in the forum.

BUT... that last two registration attempts bypassed the ADMIN verify and when straight to email verification. I checked the setting for ADMIN verify and it is still set... Is there a backdoor to bypass that setting?

jkcerda
10-02-2008, 04:31 PM
I switched to ADMIN verify on all new registrations and that keeps the forum clean and delays the legitimate new users but it is better than the mess in the forum.

BUT... that last two registration attempts bypassed the ADMIN verify and when straight to email verification. I checked the setting for ADMIN verify and it is still set... Is there a backdoor to bypass that setting?

some are bypassing th security somehow.

Piper0005
10-02-2008, 05:20 PM
Wow according to my vbStopForumSpam log I have had over 100 spammers try to register since yesterday. So far its keeping them out.

cheat-master30
10-02-2008, 05:24 PM
vBulletin Options > Human Verification Manager > Add New Question.

bluidkiti
10-02-2008, 06:07 PM
They have been to my sites today but can't get in. I also upgraded my No Spam mod yesterday to this one https://vborg.vbsupport.ru/showthread.php?t=183329 . Hadn't had any problems since. Keeping an eye out though.

rbgrn
10-02-2008, 07:34 PM
I found out what has happened. XRumer 5.0 was released which supports advanced Captcha defeat including Gmail. I knew it'd happen eventually but it's pretty obnoxious when you have multiple sites that all start getting nailed.

Here's a slashdot article that talks about it. I switched my forums to recaptcha as it doesn't seem to support that at the moment but I think we're in for a serious cat and mouse game. http://it.slashdot.org/article.pl?sid=08/10/02/1415205

punchbowl
10-02-2008, 07:41 PM
yeah recapcha worked for me. From that slashdot page "Soon, the only thing that will be able to read a CAPTCHA will be automated spam bots"

lol

tjpeople
10-02-2008, 08:47 PM
About 40 spam account last few days.

Aswell as "Man" in the bio they all seem to use an ICQ number, however it varies.

Have turned on reCaptCha hopefully that will help.

iogames
10-03-2008, 04:21 AM
XRumer is a Windows program that posts forum spam with the aim of boosting search engine rankings. It has been claimed that the program is able to bypass techniques commonly used by many websites to deter automated spam, such as account registration, CAPTCHAs, and e-mail activation before posting. The program makes heavy use of a database of known open proxies in an attempt to make it more difficult for administrators to block posts.

In addition, the software can avoid the suspicions of forum administrators by first registering to make a post in the form of a question which mentions the spam product ("Where can I get...?"), before registering another account to post a spam link which mentions the product. The side effect of these innocent-looking posts is that helpful forum visitors may Google for the product and themselves post a link to help out, thus bolstering the product's Google stats without falling afoul of forum posting policies.

So the problem is real, isn't not the imagination of a few forum owners but a treat that must be addressed

GSeybold
10-03-2008, 05:16 AM
Is there a link on Vb.org to post known and new spammers as they come in. I think this would be helpful to everyone if it doesn't already exist. Would be nice to check it everyday for new items to pre-ban and ward of any new problems ahead of time. Thank you :)

komirad
10-03-2008, 06:58 AM
different time zones,-12 , +8 , -3:30

Haha I am at GMT +8. Singapore.

i156
10-03-2008, 01:43 PM
I was also getting them to all my sites that run vbulletin on them. I just finished upgrading them all to the latest VB and setting them up using recaptcha and that seems to have stopped them dead in their tracks for now.

goshalim
10-03-2008, 02:01 PM
Last week I updated my VB from 3.6.8 to 3.7.3
In more that 5 day , I had more than 40 spammer and they stated that they are from CHINA.

How can we prevent this ?
Any good solutions ?

--------------- Added 1223046126 at 1223046126 ---------------

About 40 spam account last few days.

Aswell as "Man" in the bio they all seem to use an ICQ number, however it varies.

Have turned on reCaptCha hopefully that will help.

ME too the same as you

What can we do ??

Caddyman
10-03-2008, 03:12 PM
About 40 spam account last few days.

Aswell as "Man" in the bio they all seem to use an ICQ number, however it varies.

Have turned on reCaptCha hopefully that will help.

i had this exact situation as well, on my sports forum....

jkcerda
10-03-2008, 03:14 PM
I still have many trying to register, I shut down regstrations till I plce some of the hacks recommended here:mad:

noppid
10-03-2008, 03:16 PM
None of the bots have beaten my Stop the Registration Bots hack on my forums.

We have not had to deal with any spam and we have collected and the spammer's email addresses in the process to feed to the spam agencies.

Have a good weekend folks.

jkcerda
10-03-2008, 04:17 PM
None of the bots have beaten my Stop the Registration Bots hack on my forums.

We have not had to deal with any spam and we have collected and the spammer's email addresses in the process to feed to the spam agencies.

Have a good weekend folks.

what are you using?

noppid
10-03-2008, 04:23 PM
what are you using?

I coded and use Stop the Registration Bots (https://vborg.vbsupport.ru/showthread.php?t=183917).

No spam has gotten trough and we can collect the offending email addresses for reporting of spamming.

I coded it when a similar problem like this existed and I saw IsBot which was reported as beaten.

I will support it and update it if it's beaten. I already have a couple of new strategies should that occur.

jkcerda
10-03-2008, 04:26 PM
I coded and use Stop the Registration Bots (https://vborg.vbsupport.ru/showthread.php?t=183917).

No spam has gotten trough and we can collect the offending email addresses for reporting of spamming.

I coded it when a similar problem like this existed and I saw IsBot which was reported as beaten.

I will support it and update it if it's beaten. I already have a couple of new strategies should that occur.
thank you.

anybody know how to change the message when you stop registrations?

I want new guys who try to register to contact me by e-mail.

noppid
10-03-2008, 04:33 PM
thank you.

anybody know how to change the message when you stop registrations?

I want new guys who try to register to contact me by e-mail.

That's in there. It's a note comprised of phrases.

jkcerda
10-04-2008, 02:39 AM
changed registration to question/answer, seems to have worked, i wonder how can i have them answer more than 1 question.

g0dfather1984
10-04-2008, 04:23 AM
People from China always come to my board. However, not one has succeeding at registering. And since I put up block the time zone differentia modl, I haven't had one on my site all day.

Afterglow86
10-04-2008, 10:00 AM
I seem to go through phases with them. I had a time where I wasn't getting any for a few months, now in the past two days I've had about 6 of them. I might take a look at the Q/A registrations as well.

jkcerda
10-04-2008, 03:13 PM
I seem to go through phases with them. I had a time where I wasn't getting any for a few months, now in the past two days I've had about 6 of them. I might take a look at the Q/A registrations as well.

it would be nice to know if you can have then answer more than 1 question

Digital Jedi
10-04-2008, 06:20 PM
If you install the NoSpam! modification, you can have one question (no need to make your legitimate registrations jump though hoops) but you can have it rotate through them AND use ReCAPTCHA at the same time. As I mentioned in another thread just a second ago, it's also useful in that you can add multiple questions in bulk, not one at a time. I have quite a few questions now, and I add more every now and again to keep things fresh and the bots guessing.

greenchicken
10-05-2008, 05:19 PM
heres a site to block a whole country
http://www.blockacountry.com/

jkcerda
10-05-2008, 06:20 PM
so far, so good, many are trying to register, i have 2 questions that rotate, one very simple, what is the name of the forum:D, the other related to the industry we cater to:eek:.

seems to have worked so far:)

yaoren
10-06-2008, 05:31 PM
Glad to see I'm not the only one going through this, YIKES! Some serious amount of spamming going on. After ready a few comments I've also turned to ReCAPTCHA in hopes to stop this now before it gets too far out of hand for my forum. Although reading on some replies it's already getting there. Hope this helps!

investasee
10-12-2008, 05:46 AM
Happened to our forum and we have closed membership and turned ourselves to private forum :)

Registrations only possible by emailing the administrators

moonbase
01-06-2009, 05:35 AM
ReCAPTCHA is a savior with this problem.