Anyone else being bombarded lately with Spammers? Suggestions?

[rcwild]

We're having an issue with automated registrations. Always with a URL for last name and location as Canada. Easy to catch and delete, but would rather have a way to keep them from registering in the first place.

[mustangdotcom]

I am seeing a lot of registrations from the domain web.de which appears to be a freemail service out of Germany.

Some of them are posting spam other posts seem somewhat somewhat harmless although they are all off-topic.

Am I better off moderating the posts, banning the users or blocking web.de from registering?

[Calvert]

my "problem" is people or bots sending messages to me as "postmaster" from the "contact us" button area. It's always the same IP and I did ban it, but evidently banning an ip does not prohibit sending messages from the "contact us" form.

Hi, you may want to take a look into this modification: [Link]

I am in the process of creating a forum using vbulletinn but hope that I don't run into the same problems as you guys have mentioned. I am looking into various modifications to help prevent spamming before my forum goes live. There's some great ones that can be found at vbulletin.org.

[webgroup]

I am seeing a lot of registrations from the domain web.de which appears to be a freemail service out of Germany.

Some of them are posting spam other posts seem somewhat somewhat harmless although they are all off-topic.

Am I better off moderating the posts, banning the users or blocking web.de from registering?

Same here, all started after moving to 3.6

[Maxman1544]

I just started getting this in the past 2 weeks. It has been brutal. A lot of web.de, also a lot of things like infomall, etc. I have been banning IPs and email addresses but there has to be a better way.

Going to chek out the vb.org mods that were listed above. Thanks.

[B-pLeAsE]

I'm having the same problem. Most of them except for only a few have a web.de address. I went ahead and banned that address.

[JamieB]

web.de yip.. had about 10 of these in the last week.. have now banned that email

others to look out for are

nudists-8.com

ajiex.info

[ESAD]

This is super simple to resolve. Don't even bother banning the ip from within VB because they will still be able to send through the Contact Us form.

I have gotten a bunch of this crap lately and I just add them to my .htaccess file for all of my domains! Peace of cake. If you have cpanel, you can do this from there. Or if you do not, simply create an .htaccess file with the following inside.

order allow,deny
deny from xx.xx.xx.xxx
deny from xx.xx.xx.xxx
allow from all

keep adding deny from lines when you catch another spammer.

[JasonWilliams]

I've just released this over @ vb.org - my brother in law and I wrote this today - it should stop this - dead.

http://www.vbulletin.org/forum/showthread.php?p=1125201

Jason

[PamelaE]

I just posted about this on another thread. In the past few weeks I am getting spammed 10 fold. I have deleted so many porn pic ads its ridiculous and I cant keep up with it.

[woodp]

When a spammer spams - I check his IP at whois.sc.

I'm harvesting (?) quite a collection of spamming IP addresses. How about you?

[Fungsten]

There is software that can read images now. How do I know this?

A Spammer posted it on my board .......

It's called X-Rumer.

[JasonWilliams]

Yes it can read text from images - but can it actually understand the image itself - the product I've made for VBulletin uses images to stop the spammers dead - so far I have had no hits from spam bots.

[Sax on the Web]

I'm harvesting (?) quite a collection of spamming IP addresses. How about you?

Here is my Ip list in exchange:

[woodp]

Here is my Ip list in exchange:

Interesting ... I merged our lists and only found five duplicates:

63.166.111.6
74.52.58.210
87.118.103.185
203.113.13.3
216.32.72.74

And I noticed you had some three block addresses:

142.59.29*
205.206.84*
198.53.47*

Did you really mean to ban multiple class C domains or should there be a "dot" between the last number and the asterisk?

I can compile our joint list fairly easily and post it here ...