Spam bots defeat Recaptcha.

[LCPGUY]

It could be that a human registered for an account, then pass it to a bot to post.

Yeah, that's entirely possible. But then, why would a real person always use the same registration data? Wouldn't they try and be more "stealthy" and "elusive"?

[Glathannus]

Have you noticed any performance impact with a list t his long? My list is only about 2 dozen IP's long right now, but China and Russia are big places.

I haven't noticed any performance issues yet, and I'm on shared hosting.

I've got a fairly nitch forum and most of my users are going to come from the US, Canada mostly, with some from England and Northern Europe. So I'm not all that concerned about banning the rest of the world. I'm going to put up a message for the very rare IP that gets caught and tell them why it's blocked and to send me e-mail (at a throw-away e-mail address) to let me know.

It's too bad you can't have exceptions to a range. That way you could ban a whole sub-net and put a exception for the few that might be valid in that sub-net.

My community is also very niche. No more than a dozen real members online at any given fifteen minutes.

If you take a look at my list, you'll see that I've made some exceptions within larger ranges. It's not as difficult as you might think, once you get comfortable with wildcards.

Since I went to 3.7.x I've been getting about 6 Chinese, a couple of Russian and one or two odd other countries every night about 10:30 pm Pacific time that I ban the IP groups on. But so far (knock on my lucky 286 chip), nobody has made it through. A lot of Registering but they never actually get registered.

I'm actually still running on 3.6.5, but I plan on making the jump to 3.7.x soon, now that I've recently renewed my license (days before the price increase). These spammers are not a problem specific to 3.7.x - they are targeting vBulletin in general. I can see my ISP blocks preventing at least 5 spambot registrations per day now. I can also see specific user accounts that have long-ago been banned, trying to come back, in addition to all the new attempted registrations.

The last spambot to successfully post in my community, was ultimatewarrior8888 a week ago. New user registrations are still open. The last spambot to register (which was of course banned before it could post), was KaiyureGirl on June 7th, and I have since then had 8 legitimate users join, with no more spambots so far. The last spambot before KaiyureGirl, was weiwei on June 2nd.

But it's not just having a good once-and-for-all blocklist, that keeps the spammers out. I'm still actively updating my ISP list, because these bots are continually tapping into increasingly obscure IP ranges within China - perhaps IP ranges that belong to cybercafes. But the good news is I catch the spambots before they get as far as the Awaiting Email Confirmation phase - because of their User Agent on Viewing Who's Online. If I see someone "Registering" and there isn't an error, then I eyeball their User Agent, and if it's the same as all the spambots, then I WHOIS the IP, and add a new IP range onto my list, minus a few small exceptions for existing members. These bots don't seem to get through captcha instantly (they farm out phase 0 registrations - then submit captcha results at least fifteen minutes later), so I've always had enough time to update my IP list whenever I notice their User Agent.

[Christophe_O]

Methinks they are spamborgs not spambots

I believe that KaiyureBoy and his swarm are "spamborgs" not spambots--quasi-human but that can be trapped like the most stupid robots.

I believe the Vbulletin team when they say these spammers are using humans to register, not a fault with Recaptcha. I.e., they are half-human 'cyborgs' or rather spamborgs. However...

• As mentioned earlier, I initially did not ban KaiyureBoy, only gave a minor infraction.
• Today Kaiyure returned and spammed his own infraction thread!
• He and a new spamborg weiwei also spammed other people's infraction threads.
• I.e., after they register, there is no English-speaking human to monitor where they leave their graffitti. They are totally blind multi-posting spamborgs.
• Earlier, I suggested not banning spammers, but giving them a special membership level named the Red Carpet. (Wryly imitating the special casino parking lots for big suckers--and especially appropriate for ex-communists.) Settings for this member level: a. can not use email or PM. b. Can only post in a "Red Carpet" subforum. Nowhere else. My idea was that to ban these people might only cause them to rejoin under another alias... This might still work with all-human, all-natural organically grown spam...
• However, I currently feel that the above Red Carpet scheme would not work with KaiyureBoy and his swarm. Currently, it seems that the more quickly I ban them, the fewer of these spamborgs I get. After doing more banning, I received no new spam for weeks. I.e., to allow them to remain may perhaps only attract more.
• GLANTHANUS has suggested a "New Member" subforum as required vetting for all new members. This is probably good for some forums, but not mine. My main strategy for attracting new members is to interest them in a discussion and enable them immediately to join that discussion.
• Also, once a spammer is identified, it is just as easy to 'view all posts by...' and instantly delete all their posts in all subforums.
• I currently do not delete spam, but for reference, 'move' it all to a single spam archive thread. Before deleting or moving these messages, I 'open link in new tab' to give 'infraction.' I then give a custom infraction: 'very obvious spam' which carries 12 points, which in turn is set to cause an immediate and permanent ban. (My forum-wide announement of Etiquette Rules advises that banned members can use the contact form to notify me if I make a mistake.)
• Thus, I believe that rather than confining everyone to a "New Member" subforum, it might be better simply to open a highly visible subforum named "Spamtrap" or perhaps "Spamborgs Please Post Here".
• PS: usernames with numbers are disallowed in my forums. Perhaps, for now at least, this has reduced the number of spamborgs, who seem to enjoy usernames with numbers.
• PPS: thanks again to everyone who has suggested a promising hack. Nice to have that information if needed. However, to minimize upgrade headaches, I personally like to postpone any hacking until absolutely necessary.

A visible Spamtrap subforum would automatically attract spamborgs who pay little or no attention to where they leave their graffitti. As explained above, once a single spam post has been identified, it is easy to ban these members and delete all their spam, without confining everyone to a "New Member" subforum. In fact this may be easier because 'only' spamborgs will be posting in the Spamtrap.

However a compromise between the two strategies: enable new members to post immediately after one post in the New Member forum. This will have minimal discouragement for new members, and will more certainly identify 100% of spamborgs immediately. A Spamtram subforum must wait for them to happen to go there. However I prefer not restricting my new members at all, unless absolutely necessary.

Another wrinkle, or perhaps an advantage: The KaiyureBoy swarm seems attracted to the latest active threads and never starts a new thread. So, it might be necessary yourself to post a facetious new thread message regularly in the Spamtrap subforum.

The spamborgs may also catch on, and be reset to avoid Spamtrap subforums. If so, the counter-measure is periodically to change the name or number of the Spamtrap subforum. However, the spamborgs might never catch on, because there is no mechanically obvious correlation between their being banned and their posting in the Spamtrap. At most, it might be necessary to name it something less obvious than "Spamtrap"--such as Red Carpet, Daredevil, or Briar Patch--while explaining for legitimate members in the forum description and a sticky: "Please please never post in this subforum!"

A visible Spamtrap subforum is thus my suggestion for large, well established forums. Currently, I do not have a Spamtrap subforum because my forums have just started. So long as my forums are small, I can see all spam just as easily without a special trap.

What is most essential is to ban all spamborgs immediately. The faster these spamborgs are banned, the more discouraged they will be. Failure to ban them (as I initially did) is like responding to an email spam: this signals a 'welcome' to their swarm. (Based on my experience so far.)

In any case, please be assured that KaiyureBoy etc. are getting nowhere. Surfing Google, I was unable readily to find a single forum where KaiyureBoy has not been wiped away. The pathetic fact is that with half the effort of running this swarm, somebody could be legitimately promoting legitimate commission websites. Perhaps this would not make them a lot of money, but it would certainly make them more than the nothing which they are making now.

Ever wonder why a comic book villain did not start a construction company using his super powers instead of robbing banks and going to prison... Hello that's what's going on here...

[Boosted Panda]

I must say that the Registration Spambot hack has helped a lot. It has stopped over 100 bots from registering thus far. Most of my staff has now been trained how to trace IP's. If its from China it gets banned. If they want to join they can email us and ask why they were banned and we will explain. For now though, thats how it has to be.

[creativepart]

I feel fairly certain that my spammers are humans. Most of the time they are from India or China. They answer a required question that I have added to registration. And in many of their spam posts they have hamfistedly attempted to make their spam post sound a little bit like the topic of the board (which is a small niche, but a large board).

We ban them permanently. We move their posts to a private forum. We review their IP addresses and ban the IP too. We shorten the IP for 2 octets and search to find others proactively and ban or delete them in advance.

We also search the short octet (xxx.xxx.) to see if any non spammer members would be effected by a ban of that set of IPs and if not we ban the entire short set.

This all works pretty effectively. I have a board with 1.3 million posts and 22,000 members so, it's a spam magnet. But with these methods we have reduced spammers to a minor problem.

[kursed]

I've made a comprehensive list of email domains (200+) from which spam usually generates. In case you folks would like to see it, let me know and I'll gladly share it.

[superhorus]

In fed up with them

its hard to get my forum going without these loosers messing it up, How do I ban everyone from a china address and does anyone have a full list of these spam names as I have had the same user names register and spam the forums.



Anyone with a list please share it with me.


@kursed can you send me the list.

[cyburbia]

I've been getting hourly registration attempts from human spammers in China. Googling their usernames reveals spam for MMORPG gold and leveling. FWIW, the ones that get through have 1 January 1980 birthdates, and enter "Array" into custom fields for real name and location.

I have some legit Chinese users, so blocking China completely isn't an option yet. I've been redirecting human spammers away from register.php to a placeholder page, which states:

A disproportionately large number of those that have posted spam to the (name of the forums) register from IP blocks in China. Unfortunately, most if not all users that have previously registered from this IP block have been forum spammers.

We welcome new users from China, but we want to make sure they are not spammers. If you intend to be a constructive and active participant of the (name of the forums), have a genuine interest in (the subject matter of the forums), or employed in (the subject matter of the forums or an allied profession), and are fluent in English, please send email to (email address) with the following information:

* Your real name
* Your desired Forums username
* Your location (city and province)
* A sentence or two about why you are interested in joining the (forum name)

When I catch a prospective spammer from an IP range that isn't already redirected, I add it to .htaccess. Note: you can't use CIDRs to redirect. Instead, you need to use regular expressions. (Google has a generator for converting IP ranges into regular expressions.)

I attached the current section of my .htaccess file for redirecting Chinese spammers from register.php to the placeholder page. Over the coming days, I have no doubt .htaccess will grow a lot.

[cyburbia]

The nuclear option

Few or no legit users from China? Don't care about future legit users from China? Drop this bomb into your .htaccess file.

<Limit GET HEAD POST>
order allow,deny
deny from 58.14.0.0/15
deny from 58.16.0.0/16
deny from 58.17.0.0/17
deny from 58.17.128.0/17
deny from 58.18.0.0/16
deny from 58.19.0.0/16
deny from 58.20.0.0/16
deny from 58.21.0.0/16
deny from 58.22.0.0/15
deny from 58.24.0.0/15
deny from 58.30.0.0/15
deny from 58.32.0.0/13
deny from 58.40.0.0/15
deny from 58.42.0.0/16
deny from 58.43.0.0/16
deny from 58.44.0.0/14
deny from 58.48.0.0/13
deny from 58.56.0.0/15
deny from 58.58.0.0/16
deny from 58.59.0.0/17
deny from 58.59.128.0/17
deny from 58.60.0.0/14
deny from 58.66.0.0/15
deny from 58.68.128.0/17
deny from 58.82.0.0/15
deny from 58.87.64.0/18
deny from 58.99.128.0/17
deny from 58.100.0.0/15
deny from 58.116.0.0/14
deny from 58.128.0.0/13
deny from 58.144.0.0/16
deny from 58.154.0.0/15
deny from 58.192.0.0/15
deny from 58.194.0.0/15
deny from 58.196.0.0/15
deny from 58.198.0.0/15
deny from 58.200.0.0/13
deny from 58.208.0.0/12
deny from 58.240.0.0/15
deny from 58.242.0.0/15
deny from 58.244.0.0/15
deny from 58.246.0.0/15
deny from 58.248.0.0/13
deny from 59.32.0.0/13
deny from 59.40.0.0/15
deny from 59.42.0.0/16
deny from 59.43.0.0/16
deny from 59.44.0.0/14
deny from 59.48.0.0/16
deny from 59.49.0.0/17
deny from 59.49.128.0/17
deny from 59.50.0.0/16
deny from 59.51.0.0/17
deny from 59.51.128.0/17
deny from 59.52.0.0/14
deny from 59.56.0.0/14
deny from 59.60.0.0/15
deny from 59.62.0.0/15
deny from 59.64.0.0/14
deny from 59.68.0.0/14
deny from 59.72.0.0/15
deny from 59.74.0.0/15
deny from 59.76.0.0/16
deny from 59.77.0.0/16
deny from 59.78.0.0/15
deny from 59.80.0.0/14
deny from 59.107.0.0/17
deny from 59.107.128.0/17
deny from 59.108.0.0/15
deny from 59.110.0.0/15
deny from 59.151.0.0/17
deny from 59.155.0.0/16
deny from 59.172.0.0/15
deny from 59.174.0.0/15
deny from 59.191.0.0/17
deny from 59.192.0.0/10
deny from 60.0.0.0/13
deny from 60.8.0.0/15
deny from 60.10.0.0/16
deny from 60.11.0.0/16
deny from 60.12.0.0/16
deny from 60.13.0.0/18
deny from 60.13.64.0/18
deny from 60.13.128.0/17
deny from 60.14.0.0/15
deny from 60.16.0.0/13
deny from 60.24.0.0/14
deny from 60.28.0.0/15
deny from 60.30.0.0/16
deny from 60.31.0.0/16
deny from 60.55.0.0/16
deny from 60.63.0.0/16
deny from 60.160.0.0/15
deny from 60.162.0.0/15
deny from 60.164.0.0/15
deny from 60.166.0.0/15
deny from 60.168.0.0/13
deny from 60.176.0.0/12
deny from 60.194.0.0/15
deny from 60.200.0.0/14
deny from 60.204.0.0/16
deny from 60.205.0.0/16
deny from 60.206.0.0/15
deny from 60.208.0.0/13
deny from 60.216.0.0/15
deny from 60.218.0.0/15
deny from 60.220.0.0/14
deny from 60.232.0.0/15
deny from 60.235.0.0/16
deny from 60.245.128.0/17
deny from 60.247.0.0/16
deny from 60.252.0.0/16
deny from 60.253.128.0/17
deny from 60.255.0.0/16
deny from 61.4.80.0/20
deny from 61.4.176.0/20
deny from 61.8.160.0/20
deny from 61.28.0.0/20
deny from 61.28.16.0/20
deny from 61.28.32.0/19
deny from 61.28.64.0/18
deny from 61.29.128.0/18
deny from 61.29.192.0/19
deny from 61.29.224.0/20
deny from 61.29.240.0/20
deny from 61.45.128.0/18
deny from 61.47.128.0/18
deny from 61.48.0.0/14
deny from 61.52.0.0/15
deny from 61.54.0.0/16
deny from 61.55.0.0/16
deny from 61.87.192.0/18
deny from 61.128.0.0/15
deny from 61.130.0.0/15
deny from 61.132.0.0/16
deny from 61.133.0.0/17
deny from 61.133.128.0/17
deny from 61.134.0.0/18
deny from 61.134.64.0/19
deny from 61.134.96.0/19
deny from 61.134.128.0/18
deny from 61.134.192.0/18
deny from 61.135.0.0/16
deny from 61.136.0.0/18
deny from 61.136.64.0/18
deny from 61.136.128.0/17
deny from 61.137.0.0/17
deny from 61.137.128.0/17
deny from 61.138.0.0/18
deny from 61.138.64.0/18
deny from 61.138.128.0/18
deny from 61.138.192.0/18
deny from 61.139.0.0/17
deny from 61.139.128.0/18
deny from 61.139.192.0/18
deny from 61.140.0.0/14
deny from 61.144.0.0/14
deny from 61.148.0.0/15
deny from 61.150.0.0/15
deny from 61.152.0.0/16
deny from 61.153.0.0/16
deny from 61.154.0.0/15
deny from 61.156.0.0/16
deny from 61.157.0.0/16
deny from 61.158.0.0/17
deny from 61.158.128.0/17
deny from 61.159.0.0/18
deny from 61.159.64.0/18
deny from 61.159.128.0/17
deny from 61.160.0.0/16
deny from 61.161.0.0/18
deny from 61.161.64.0/18
deny from 61.161.128.0/17
deny from 61.162.0.0/16
deny from 61.163.0.0/16
deny from 61.164.0.0/16
deny from 61.165.0.0/16
deny from 61.166.0.0/16
deny from 61.167.0.0/16
deny from 61.168.0.0/16
deny from 61.169.0.0/16
deny from 61.170.0.0/15
deny from 61.172.0.0/14
deny from 61.176.0.0/16
deny from 61.177.0.0/16
deny from 61.178.0.0/16
deny from 61.179.0.0/16
deny from 61.180.0.0/17
deny from 61.180.128.0/17
deny from 61.181.0.0/16
deny from 61.182.0.0/16
deny from 61.183.0.0/16
deny from 61.184.0.0/14
deny from 61.188.0.0/16
deny from 61.189.0.0/17
deny from 61.189.128.0/17
deny from 61.190.0.0/15
deny from 61.232.0.0/14
deny from 61.236.0.0/15
deny from 61.240.0.0/14
deny from 116.1.0.0/16
deny from 116.2.0.0/15
deny from 116.4.0.0/14
deny from 116.8.0.0/14
deny from 116.13.0.0/16
deny from 116.16.0.0/12
deny from 116.52.0.0/14
deny from 116.56.0.0/15
deny from 116.58.128.0/20
deny from 116.58.208.0/20
deny from 116.60.0.0/14
deny from 116.66.0.0/17
deny from 116.69.0.0/16
deny from 116.70.0.0/17
deny from 116.76.0.0/15
deny from 116.78.0.0/15
deny from 116.89.144.0/20
deny from 116.90.184.0/21
deny from 116.95.0.0/16
deny from 116.112.0.0/14
deny from 116.116.0.0/15
deny from 116.128.0.0/10
deny from 116.192.0.0/16
deny from 116.193.16.0/20
deny from 116.193.32.0/19
deny from 116.194.0.0/15
deny from 116.196.0.0/16
deny from 116.198.0.0/16
deny from 116.199.0.0/17
deny from 116.199.128.0/19
deny from 116.204.0.0/15
deny from 116.207.0.0/16
deny from 116.208.0.0/14
deny from 116.212.160.0/20
deny from 116.213.64.0/18
deny from 116.213.128.0/17
deny from 116.214.32.0/19
deny from 116.214.64.0/20
deny from 116.214.128.0/17
deny from 116.215.0.0/16
deny from 116.216.0.0/14
deny from 116.224.0.0/12
deny from 116.242.0.0/15
deny from 116.244.0.0/15
deny from 116.246.0.0/15
deny from 116.248.0.0/15
deny from 116.252.0.0/15
deny from 116.254.128.0/17
deny from 116.255.128.0/17
deny from 117.8.0.0/13
deny from 117.21.0.0/16
deny from 117.22.0.0/15
deny from 117.24.0.0/13
deny from 117.32.0.0/13
deny from 117.40.0.0/14
deny from 117.44.0.0/15
deny from 117.48.0.0/14
deny from 117.53.48.0/20
deny from 117.53.176.0/20
deny from 121.0.16.0/20
deny from 121.4.0.0/15
deny from 121.8.0.0/13
deny from 121.16.0.0/13
deny from 121.24.0.0/14
deny from 121.28.0.0/15
deny from 121.30.0.0/16
deny from 121.31.0.0/16
deny from 121.32.0.0/14
deny from 121.36.0.0/16
deny from 121.37.0.0/16
deny from 121.38.0.0/15
deny from 121.40.0.0/14
deny from 121.46.0.0/16
deny from 121.47.0.0/16
deny from 121.48.0.0/15
deny from 121.51.0.0/16
deny from 121.55.0.0/18
deny from 121.56.0.0/15
deny from 121.58.0.0/17
deny from 121.59.0.0/16
deny from 121.60.0.0/14
deny from 121.68.0.0/14
deny from 121.76.0.0/15
deny from 121.89.0.0/16
deny from 121.100.128.0/17
deny from 121.192.0.0/16
deny from 121.193.0.0/16
deny from 121.194.0.0/15
deny from 121.201.0.0/16
deny from 121.204.0.0/14
deny from 121.224.0.0/12
deny from 121.248.0.0/14
deny from 121.255.0.0/16
deny from 122.0.64.0/18
deny from 122.0.128.0/17
deny from 122.4.0.0/14
deny from 122.8.0.0/13
deny from 122.48.0.0/16
deny from 122.49.0.0/18
deny from 122.51.0.0/16
deny from 122.64.0.0/11
deny from 122.96.0.0/15
deny from 122.102.0.0/20
deny from 122.102.64.0/20
deny from 122.102.80.0/20
deny from 122.136.0.0/13
deny from 122.144.128.0/17
deny from 122.152.192.0/18
deny from 122.156.0.0/14
deny from 122.192.0.0/14
deny from 122.198.0.0/16
deny from 122.200.64.0/18
deny from 122.204.0.0/14
deny from 122.224.0.0/12
deny from 122.240.0.0/13
deny from 122.248.48.0/20
deny from 123.0.128.0/18
deny from 123.4.0.0/14
deny from 123.8.0.0/13
deny from 123.49.128.0/17
deny from 123.52.0.0/14
deny from 123.56.0.0/13
deny from 123.64.0.0/11
deny from 123.96.0.0/15
deny from 123.98.0.0/17
deny from 123.99.128.0/17
deny from 123.100.0.0/19
deny from 123.101.0.0/16
deny from 123.103.0.0/17
deny from 123.108.128.0/20
deny from 123.108.208.0/20
deny from 123.112.0.0/12
deny from 123.128.0.0/13
deny from 123.136.80.0/20
deny from 123.137.0.0/16
deny from 123.138.0.0/15
deny from 123.144.0.0/14
deny from 123.148.0.0/16
deny from 123.149.0.0/16
deny from 123.150.0.0/15
deny from 123.152.0.0/13
deny from 123.160.0.0/14
deny from 123.164.0.0/14
deny from 123.168.0.0/14
deny from 123.172.0.0/15
deny from 123.174.0.0/15
deny from 123.176.80.0/20
deny from 123.177.0.0/16
deny from 123.178.0.0/15
deny from 123.180.0.0/14
deny from 123.184.0.0/14
deny from 123.188.0.0/14
deny from 123.196.0.0/15
deny from 123.199.128.0/17
deny from 123.206.0.0/15
deny from 123.232.0.0/14
deny from 123.242.0.0/17
deny from 123.244.0.0/14
deny from 123.249.0.0/16
deny from 123.253.0.0/16
deny from 124.6.64.0/18
deny from 124.14.0.0/15
deny from 124.16.0.0/15
deny from 124.20.0.0/16
deny from 124.21.0.0/20
deny from 124.21.16.0/20
deny from 124.21.32.0/19
deny from 124.21.64.0/18
deny from 124.21.128.0/17
deny from 124.22.0.0/15
deny from 124.29.0.0/17
deny from 124.40.128.0/18
deny from 124.42.0.0/17
deny from 124.47.0.0/18
deny from 124.64.0.0/15
deny from 124.66.0.0/17
deny from 124.67.0.0/16
deny from 124.68.0.0/14
deny from 124.72.0.0/16
deny from 124.73.0.0/16
deny from 124.74.0.0/15
deny from 124.76.0.0/14
deny from 124.88.0.0/16
deny from 124.89.0.0/17
deny from 124.89.128.0/17
deny from 124.90.0.0/15
deny from 124.92.0.0/14
deny from 124.108.8.0/21
deny from 124.108.40.0/21
deny from 124.112.0.0/15
deny from 124.114.0.0/15
deny from 124.116.0.0/16
deny from 124.117.0.0/16
deny from 124.118.0.0/15
deny from 124.126.0.0/15
deny from 124.128.0.0/13
deny from 124.147.128.0/17
deny from 124.156.0.0/16
deny from 124.160.0.0/16
deny from 124.161.0.0/16
deny from 124.162.0.0/16
deny from 124.163.0.0/16
deny from 124.164.0.0/14
deny from 124.172.0.0/15
deny from 124.174.0.0/15
deny from 124.192.0.0/15
deny from 124.196.0.0/16
deny from 124.200.0.0/13
deny from 124.220.0.0/14
deny from 124.224.0.0/16
deny from 124.225.0.0/16
deny from 124.226.0.0/15
deny from 124.228.0.0/14
deny from 124.232.0.0/15
deny from 124.234.0.0/15
deny from 124.236.0.0/14
deny from 124.240.0.0/17
deny from 124.242.0.0/16
deny from 124.243.192.0/18
deny from 124.248.0.0/17
deny from 124.249.0.0/16
deny from 124.250.0.0/15
deny from 124.254.0.0/18
deny from 125.31.192.0/18
deny from 125.32.0.0/16
deny from 125.33.0.0/16
deny from 125.34.0.0/16
deny from 125.35.0.0/17
deny from 125.35.128.0/17
deny from 125.36.0.0/14
deny from 125.40.0.0/13
deny from 125.58.128.0/17
deny from 125.62.0.0/18
deny from 125.64.0.0/13
deny from 125.72.0.0/16
deny from 125.73.0.0/16
deny from 125.74.0.0/15
deny from 125.76.0.0/17
deny from 125.76.128.0/17
deny from 125.77.0.0/16
deny from 125.78.0.0/15
deny from 125.80.0.0/13
deny from 125.88.0.0/13
deny from 125.96.0.0/15
deny from 125.98.0.0/16
deny from 125.104.0.0/13
deny from 125.112.0.0/12
deny from 125.169.0.0/16
deny from 125.171.0.0/16
deny from 125.208.0.0/18
deny from 125.210.0.0/16
deny from 125.211.0.0/16
deny from 125.213.0.0/17
deny from 125.215.0.0/18
deny from 125.216.0.0/15
deny from 125.218.0.0/16
deny from 125.219.0.0/16
deny from 125.220.0.0/15
deny from 125.222.0.0/15
deny from 125.254.128.0/18
deny from 125.254.192.0/18
deny from 134.196.0.0/16
deny from 159.226.0.0/16
deny from 161.207.0.0/16
deny from 162.105.0.0/16
deny from 166.111.0.0/16
deny from 167.139.0.0/16
deny from 168.160.0.0/16
deny from 192.83.122.0/24
deny from 192.83.169.0/24
deny from 192.124.154.0/24
deny from 192.188.170.0/24
deny from 198.17.7.0/24
deny from 202.0.110.0/24
deny from 202.0.176.0/22
deny from 202.4.128.0/19
deny from 202.4.252.0/22
deny from 202.8.128.0/19
deny from 202.10.64.0/20
deny from 202.14.88.0/24
deny from 202.14.235.0/24
deny from 202.14.236.0/23
deny from 202.14.238.0/24
deny from 202.20.120.0/24
deny from 202.22.248.0/22
deny from 202.22.252.0/22
deny from 202.38.0.0/23
deny from 202.38.2.0/23
deny from 202.38.4.0/22
deny from 202.38.8.0/21
deny from 202.38.64.0/19
deny from 202.38.96.0/19
deny from 202.38.128.0/23
deny from 202.38.130.0/23
deny from 202.38.132.0/23
deny from 202.38.134.0/24
deny from 202.38.135.0/24
deny from 202.38.136.0/24
deny from 202.38.137.0/24
deny from 202.38.138.0/24
deny from 202.38.140.0/23
deny from 202.38.142.0/24
deny from 202.38.143.0/24
deny from 202.38.146.0/23
deny from 202.38.149.0/24
deny from 202.38.150.0/23
deny from 202.38.152.0/23
deny from 202.38.154.0/23
deny from 202.38.156.0/24
deny from 202.38.158.0/23
deny from 202.38.160.0/23
deny from 202.38.164.0/22
deny from 202.38.168.0/24
deny from 202.38.169.0/24
deny from 202.38.170.0/24
deny from 202.38.171.0/24
deny from 202.38.172.0/24
deny from 202.38.173.0/24
deny from 202.38.174.0/24
deny from 202.38.175.0/24
deny from 202.38.176.0/23
deny from 202.38.184.0/21
deny from 202.38.192.0/18
deny from 202.41.152.0/21
deny from 202.41.240.0/20
deny from 202.43.144.0/20
deny from 202.46.32.0/19
deny from 202.46.224.0/20
deny from 202.60.112.0/20
deny from 202.63.248.0/22
deny from 202.69.4.0/22
deny from 202.69.16.0/20
deny from 202.70.0.0/19
deny from 202.74.8.0/21
deny from 202.75.208.0/20
deny from 202.85.208.0/20
deny from 202.90.0.0/22
deny from 202.90.224.0/20
deny from 202.90.252.0/22
deny from 202.91.0.0/22
deny from 202.91.128.0/22
deny from 202.91.176.0/20
deny from 202.91.224.0/19
deny from 202.92.0.0/22
deny from 202.92.252.0/22
deny from 202.93.0.0/22
deny from 202.93.252.0/22
deny from 202.94.0.0/19
deny from 202.95.0.0/22
deny from 202.95.4.0/22
deny from 202.95.8.0/21
deny from 202.95.16.0/20
deny from 202.95.252.0/22
deny from 202.96.0.0/18
deny from 202.96.64.0/21
deny from 202.96.72.0/21
deny from 202.96.80.0/20
deny from 202.96.96.0/21
deny from 202.96.104.0/21
deny from 202.96.112.0/20
deny from 202.96.128.0/21
deny from 202.96.136.0/21
deny from 202.96.144.0/20
deny from 202.96.160.0/21
deny from 202.96.168.0/21
deny from 202.96.176.0/20
deny from 202.96.192.0/21
deny from 202.96.200.0/21
deny from 202.96.208.0/20
deny from 202.96.224.0/21
deny from 202.96.232.0/21
deny from 202.96.240.0/20
deny from 202.97.0.0/21
deny from 202.97.8.0/21
deny from 202.97.16.0/20
deny from 202.97.32.0/19
deny from 202.97.64.0/19
deny from 202.97.96.0/20
deny from 202.97.112.0/20
deny from 202.97.128.0/18
deny from 202.97.192.0/19
deny from 202.97.224.0/21
deny from 202.97.232.0/21
deny from 202.97.240.0/20
deny from 202.98.0.0/21
deny from 202.98.8.0/21
deny from 202.98.16.0/20
deny from 202.98.32.0/21
deny from 202.98.40.0/21
deny from 202.98.48.0/20
deny from 202.98.64.0/19
deny from 202.98.96.0/21
deny from 202.98.104.0/21
deny from 202.98.112.0/20
deny from 202.98.128.0/19
deny from 202.98.160.0/21
deny from 202.98.168.0/21
deny from 202.98.176.0/20
deny from 202.98.192.0/21
deny from 202.98.200.0/21
deny from 202.98.208.0/20
deny from 202.98.224.0/21
deny from 202.98.232.0/21
deny from 202.98.240.0/20
deny from 202.99.0.0/18
deny from 202.99.64.0/19
deny from 202.99.96.0/21
deny from 202.99.104.0/21
deny from 202.99.112.0/20
deny from 202.99.128.0/19
deny from 202.99.160.0/21
deny from 202.99.168.0/21
deny from 202.99.176.0/20
deny from 202.99.192.0/21
deny from 202.99.200.0/21
deny from 202.99.208.0/20
deny from 202.99.224.0/21
deny from 202.99.232.0/21
deny from 202.99.240.0/20
deny from 202.100.0.0/21
deny from 202.100.8.0/21
deny from 202.100.16.0/20
deny from 202.100.32.0/19
deny from 202.100.64.0/21
deny from 202.100.72.0/21
deny from 202.100.80.0/20
deny from 202.100.96.0/21
deny from 202.100.104.0/21
deny from 202.100.112.0/20
deny from 202.100.128.0/21
deny from 202.100.136.0/21
deny from 202.100.144.0/20
deny from 202.100.160.0/21
deny from 202.100.168.0/21
deny from 202.100.176.0/20
deny from 202.100.192.0/21
deny from 202.100.200.0/21
deny from 202.100.208.0/20
deny from 202.100.224.0/19
deny from 202.101.0.0/18
deny from 202.101.64.0/19
deny from 202.101.96.0/19
deny from 202.101.128.0/18
deny from 202.101.192.0/19
deny from 202.101.224.0/21
deny from 202.101.232.0/21
deny from 202.101.240.0/20
deny from 202.102.0.0/19
deny from 202.102.32.0/19
deny from 202.102.64.0/18
deny from 202.102.128.0/21
deny from 202.102.136.0/21
deny from 202.102.144.0/20
deny from 202.102.160.0/19
deny from 202.102.192.0/21
deny from 202.102.200.0/21
deny from 202.102.208.0/20
deny from 202.102.224.0/21
deny from 202.102.232.0/21
deny from 202.102.240.0/20
deny from 202.103.0.0/21
deny from 202.103.8.0/21
deny from 202.103.16.0/20
deny from 202.103.32.0/19
deny from 202.103.64.0/19
deny from 202.103.96.0/21
deny from 202.103.104.0/21
deny from 202.103.112.0/20
deny from 202.103.128.0/18
deny from 202.103.192.0/19
deny from 202.103.224.0/21
deny from 202.103.232.0/21
deny from 202.103.240.0/20
deny from 202.104.0.0/15
deny from 202.106.0.0/16
deny from 202.107.0.0/17
deny from 202.107.128.0/17
deny from 202.108.0.0/16
deny from 202.109.0.0/16
deny from 202.110.0.0/18
deny from 202.110.64.0/18
deny from 202.110.128.0/18
deny from 202.110.192.0/18
deny from 202.111.0.0/17
deny from 202.111.128.0/19
deny from 202.111.160.0/19
deny from 202.111.192.0/18
deny from 202.112.0.0/16
deny from 202.113.0.0/20
deny from 202.113.16.0/20
deny from 202.113.32.0/19
deny from 202.113.64.0/18
deny from 202.113.128.0/18
deny from 202.113.192.0/19
deny from 202.113.224.0/20
deny from 202.113.240.0/20
deny from 202.114.0.0/19
deny from 202.114.32.0/19
deny from 202.114.64.0/18
deny from 202.114.128.0/17
deny from 202.115.0.0/19
deny from 202.115.32.0/19
deny from 202.115.64.0/18
deny from 202.115.128.0/17
deny from 202.116.0.0/19
deny from 202.116.32.0/20
deny from 202.116.48.0/20
deny from 202.116.64.0/19
deny from 202.116.96.0/19
deny from 202.116.128.0/17
deny from 202.117.0.0/18
deny from 202.117.64.0/18
deny from 202.117.128.0/17
deny from 202.118.0.0/19
deny from 202.118.32.0/19
deny from 202.118.64.0/18
deny from 202.118.128.0/17
deny from 202.119.0.0/19
deny from 202.119.32.0/19
deny from 202.119.64.0/20
deny from 202.119.80.0/20
deny from 202.119.96.0/19
deny from 202.119.128.0/17
deny from 202.120.0.0/18
deny from 202.120.64.0/18
deny from 202.120.128.0/17
deny from 202.121.0.0/16
deny from 202.122.0.0/21
deny from 202.122.32.0/21
deny from 202.122.64.0/19
deny from 202.122.112.0/21
deny from 202.122.128.0/24
deny from 202.123.96.0/20
deny from 202.125.176.0/20
deny from 202.127.0.0/23
deny from 202.127.2.0/24
deny from 202.127.3.0/24
deny from 202.127.4.0/24
deny from 202.127.5.0/24
deny from 202.127.6.0/23
deny from 202.127.12.0/22
deny from 202.127.16.0/20
deny from 202.127.40.0/21
deny from 202.127.48.0/20
deny from 202.127.112.0/20
deny from 202.127.128.0/20
deny from 202.127.144.0/20
deny from 202.127.160.0/21
deny from 202.127.192.0/23
deny from 202.127.194.0/23
deny from 202.127.196.0/22
deny from 202.127.200.0/21
deny from 202.127.208.0/24
deny from 202.127.209.0/24
deny from 202.127.212.0/22
deny from 202.127.216.0/21
deny from 202.127.224.0/19
deny from 202.130.0.0/19
deny from 202.130.224.0/19
deny from 202.131.16.0/21
deny from 202.131.48.0/20
deny from 202.131.208.0/20
deny from 202.136.48.0/20
deny from 202.136.208.0/20
deny from 202.136.224.0/20
deny from 202.141.160.0/19
deny from 202.142.16.0/20
deny from 202.143.16.0/20
deny from 202.148.96.0/19
deny from 202.149.160.0/19
deny from 202.149.224.0/19
deny from 202.150.16.0/20
deny from 202.152.176.0/20
deny from 202.153.48.0/20
deny from 202.158.160.0/19
deny from 202.160.176.0/20
deny from 202.164.0.0/20
deny from 202.165.96.0/20
deny from 202.165.176.0/20
deny from 202.165.208.0/20
deny from 202.168.160.0/20
deny from 202.168.176.0/20
deny from 202.170.128.0/19
deny from 202.170.216.0/21
deny from 202.173.8.0/21
deny from 202.173.224.0/19
deny from 202.179.240.0/20
deny from 202.180.128.0/19
deny from 202.181.112.0/20
deny from 202.189.80.0/20
deny from 202.192.0.0/13
deny from 202.200.0.0/14
deny from 202.204.0.0/14
deny from 203.18.50.0/24
deny from 203.79.0.0/20
deny from 203.80.144.0/20
deny from 203.81.16.0/20
deny from 203.83.56.0/21
deny from 203.86.0.0/19
deny from 203.86.32.0/19
deny from 203.86.64.0/20
deny from 203.86.80.0/20
deny from 203.88.32.0/19
deny from 203.88.192.0/19
deny from 203.89.0.0/22
deny from 203.90.0.0/22
deny from 203.90.128.0/19
deny from 203.90.160.0/19
deny from 203.90.192.0/19
deny from 203.91.32.0/19
deny from 203.91.96.0/20
deny from 203.91.120.0/21
deny from 203.92.0.0/22
deny from 203.92.160.0/19
deny from 203.93.0.0/22
deny from 203.93.4.0/22
deny from 203.93.8.0/24
deny from 203.93.9.0/24
deny from 203.93.10.0/23
deny from 203.93.12.0/22
deny from 203.93.16.0/20
deny from 203.93.32.0/19
deny from 203.93.64.0/18
deny from 203.93.128.0/21
deny from 203.93.136.0/22
deny from 203.93.140.0/24
deny from 203.93.141.0/24
deny from 203.93.142.0/23
deny from 203.93.144.0/20
deny from 203.93.160.0/19
deny from 203.93.192.0/18
deny from 203.94.0.0/22
deny from 203.94.4.0/22
deny from 203.94.8.0/21
deny from 203.94.16.0/20
deny from 203.95.0.0/21
deny from 203.95.96.0/20
deny from 203.95.112.0/20
deny from 203.99.16.0/20
deny from 203.99.80.0/20
deny from 203.100.32.0/20
deny from 203.100.80.0/20
deny from 203.100.96.0/19
deny from 203.100.192.0/20
deny from 203.110.160.0/19
deny from 203.118.192.0/19
deny from 203.119.24.0/21
deny from 203.119.32.0/22
deny from 203.128.32.0/19
deny from 203.128.96.0/19
deny from 203.130.32.0/19
deny from 203.132.32.0/19
deny from 203.134.240.0/21
deny from 203.135.96.0/20
deny from 203.135.112.0/20
deny from 203.135.160.0/20
deny from 203.148.0.0/18
deny from 203.152.64.0/19
deny from 203.156.192.0/18
deny from 203.158.16.0/21
deny from 203.161.192.0/19
deny from 203.166.160.0/19
deny from 203.171.224.0/20
deny from 203.174.96.0/19
deny from 203.175.128.0/19
deny from 203.175.192.0/18
deny from 203.176.168.0/21
deny from 203.184.80.0/20
deny from 203.187.160.0/19
deny from 203.190.96.0/20
deny from 203.191.16.0/20
deny from 203.191.64.0/18
deny from 203.191.144.0/21
deny from 203.191.152.0/21
deny from 203.192.0.0/19
deny from 203.196.0.0/21
deny from 203.207.64.0/18
deny from 203.207.128.0/17
deny from 203.208.0.0/20
deny from 203.208.16.0/22
deny from 203.208.32.0/19
deny from 203.209.224.0/19
deny from 203.212.0.0/20
deny from 203.212.80.0/20
deny from 203.222.192.0/20
deny from 203.223.0.0/20
deny from 210.2.0.0/20
deny from 210.2.16.0/20
deny from 210.5.0.0/19
deny from 210.5.144.0/20
deny from 210.12.0.0/18
deny from 210.12.64.0/18
deny from 210.12.128.0/18
deny from 210.12.192.0/18
deny from 210.13.0.0/18
deny from 210.13.64.0/18
deny from 210.13.128.0/17
deny from 210.14.64.0/19
deny from 210.14.128.0/19
deny from 210.14.160.0/19
deny from 210.14.192.0/19
deny from 210.14.224.0/19
deny from 210.15.0.0/19
deny from 210.15.32.0/19
deny from 210.15.64.0/19
deny from 210.15.96.0/19
deny from 210.15.128.0/18
deny from 210.16.128.0/18
deny from 210.21.0.0/17
deny from 210.21.128.0/17
deny from 210.22.0.0/16
deny from 210.23.32.0/19
deny from 210.25.0.0/16
deny from 210.26.0.0/15
deny from 210.28.0.0/14
deny from 210.32.0.0/14
deny from 210.36.0.0/14
deny from 210.40.0.0/13
deny from 210.51.0.0/16
deny from 210.52.0.0/18
deny from 210.52.64.0/18
deny from 210.52.128.0/17
deny from 210.53.0.0/17
deny from 210.53.128.0/17
deny from 210.56.192.0/19
deny from 210.72.0.0/17
deny from 210.72.128.0/19
deny from 210.72.160.0/19
deny from 210.72.192.0/18
deny from 210.73.0.0/19
deny from 210.73.32.0/19
deny from 210.73.64.0/18
deny from 210.73.128.0/17
deny from 210.74.0.0/19
deny from 210.74.32.0/19
deny from 210.74.64.0/19
deny from 210.74.96.0/19
deny from 210.74.128.0/19
deny from 210.74.160.0/19
deny from 210.74.192.0/18
deny from 210.75.0.0/16
deny from 210.76.0.0/19
deny from 210.76.32.0/19
deny from 210.76.64.0/18
deny from 210.76.128.0/17
deny from 210.77.0.0/16
deny from 210.78.0.0/19
deny from 210.78.32.0/19
deny from 210.78.64.0/18
deny from 210.78.128.0/19
deny from 210.78.160.0/19
deny from 210.78.192.0/18
deny from 210.79.64.0/18
deny from 210.79.224.0/19
deny from 210.82.0.0/15
deny from 210.87.128.0/20
deny from 210.87.144.0/20
deny from 210.87.160.0/19
deny from 210.185.192.0/18
deny from 210.192.96.0/19
deny from 211.64.0.0/14
deny from 211.68.0.0/15
deny from 211.70.0.0/15
deny from 211.80.0.0/16
deny from 211.81.0.0/16
deny from 211.82.0.0/16
deny from 211.83.0.0/16
deny from 211.84.0.0/15
deny from 211.86.0.0/15
deny from 211.88.0.0/16
deny from 211.89.0.0/16
deny from 211.90.0.0/15
deny from 211.92.0.0/15
deny from 211.94.0.0/15
deny from 211.96.0.0/15
deny from 211.98.0.0/15
deny from 211.100.0.0/16
deny from 211.101.0.0/18
deny from 211.101.64.0/18
deny from 211.101.128.0/17
deny from 211.102.0.0/16
deny from 211.103.0.0/17
deny from 211.103.128.0/17
deny from 211.136.0.0/14
deny from 211.140.0.0/15
deny from 211.142.0.0/17
deny from 211.142.128.0/17
deny from 211.143.0.0/16
deny from 211.144.0.0/15
deny from 211.146.0.0/16
deny from 211.147.0.0/16
deny from 211.148.0.0/14
deny from 211.152.0.0/15
deny from 211.154.0.0/16
deny from 211.155.0.0/18
deny from 211.155.64.0/19
deny from 211.155.96.0/19
deny from 211.155.128.0/17
deny from 211.156.0.0/14
deny from 211.160.0.0/14
deny from 211.164.0.0/14
deny from 218.0.0.0/16
deny from 218.1.0.0/16
deny from 218.2.0.0/15
deny from 218.4.0.0/15
deny from 218.6.0.0/16
deny from 218.7.0.0/16
deny from 218.8.0.0/15
deny from 218.10.0.0/16
deny from 218.11.0.0/16
deny from 218.12.0.0/16
deny from 218.13.0.0/16
deny from 218.14.0.0/15
deny from 218.16.0.0/14
deny from 218.20.0.0/16
deny from 218.21.0.0/17
deny from 218.21.128.0/17
deny from 218.22.0.0/15
deny from 218.24.0.0/15
deny from 218.26.0.0/16
deny from 218.27.0.0/16
deny from 218.28.0.0/15
deny from 218.30.0.0/15
deny from 218.56.0.0/14
deny from 218.60.0.0/15
deny from 218.62.0.0/17
deny from 218.62.128.0/17
deny from 218.63.0.0/16
deny from 218.64.0.0/15
deny from 218.66.0.0/16
deny from 218.67.0.0/17
deny from 218.67.128.0/17
deny from 218.68.0.0/15
deny from 218.70.0.0/15
deny from 218.72.0.0/14
deny from 218.76.0.0/15
deny from 218.78.0.0/15
deny from 218.80.0.0/14
deny from 218.84.0.0/14
deny from 218.88.0.0/13
deny from 218.96.0.0/14
deny from 218.104.0.0/17
deny from 218.104.128.0/19
deny from 218.104.160.0/19
deny from 218.104.192.0/21
deny from 218.104.200.0/21
deny from 218.104.208.0/20
deny from 218.104.224.0/19
deny from 218.105.0.0/16
deny from 218.106.0.0/15
deny from 218.108.0.0/16
deny from 218.109.0.0/16
deny from 218.185.192.0/19
deny from 218.192.0.0/16
deny from 218.193.0.0/16
deny from 218.194.0.0/16
deny from 218.195.0.0/16
deny from 218.196.0.0/14
deny from 218.200.0.0/14
deny from 218.204.0.0/15
deny from 218.206.0.0/15
deny from 218.240.0.0/14
deny from 218.244.0.0/15
deny from 218.246.0.0/15
deny from 218.249.0.0/16
deny from 219.72.0.0/16
deny from 219.82.0.0/16
deny from 219.128.0.0/12
deny from 219.144.0.0/14
deny from 219.148.0.0/16
deny from 219.149.0.0/17
deny from 219.149.128.0/18
deny from 219.149.192.0/18
deny from 219.150.0.0/19
deny from 219.150.32.0/19
deny from 219.150.64.0/19
deny from 219.150.96.0/20
deny from 219.150.112.0/20
deny from 219.150.128.0/17
deny from 219.151.0.0/19
deny from 219.151.32.0/19
deny from 219.151.64.0/18
deny from 219.151.128.0/17
deny from 219.152.0.0/15
deny from 219.154.0.0/15
deny from 219.156.0.0/15
deny from 219.158.0.0/17
deny from 219.158.128.0/17
deny from 219.159.0.0/18
deny from 219.159.64.0/18
deny from 219.159.128.0/17
deny from 219.216.0.0/15
deny from 219.218.0.0/15
deny from 219.220.0.0/16
deny from 219.221.0.0/16
deny from 219.222.0.0/15
deny from 219.224.0.0/15
deny from 219.226.0.0/16
deny from 219.227.0.0/16
deny from 219.228.0.0/15
deny from 219.230.0.0/15
deny from 219.232.0.0/14
deny from 219.236.0.0/15
deny from 219.238.0.0/15
deny from 219.242.0.0/15
deny from 219.244.0.0/14
deny from 220.101.192.0/18
deny from 220.112.0.0/14
deny from 220.152.128.0/17
deny from 220.154.0.0/15
deny from 220.160.0.0/11
deny from 220.192.0.0/15
deny from 220.194.0.0/15
deny from 220.196.0.0/14
deny from 220.200.0.0/13
deny from 220.231.0.0/18
deny from 220.231.128.0/17
deny from 220.232.64.0/18
deny from 220.234.0.0/16
deny from 220.242.0.0/15
deny from 220.248.0.0/14
deny from 220.252.0.0/16
deny from 221.0.0.0/15
deny from 221.2.0.0/16
deny from 221.3.0.0/17
deny from 221.3.128.0/17
deny from 221.4.0.0/16
deny from 221.5.0.0/17
deny from 221.5.128.0/17
deny from 221.6.0.0/16
deny from 221.7.0.0/19
deny from 221.7.32.0/19
deny from 221.7.64.0/19
deny from 221.7.96.0/19
deny from 221.7.128.0/17
deny from 221.8.0.0/15
deny from 221.10.0.0/16
deny from 221.11.0.0/17
deny from 221.11.128.0/18
deny from 221.11.192.0/19
deny from 221.11.224.0/19
deny from 221.12.0.0/17
deny from 221.12.128.0/18
deny from 221.13.0.0/18
deny from 221.13.64.0/19
deny from 221.13.96.0/19
deny from 221.13.128.0/17
deny from 221.14.0.0/15
deny from 221.122.0.0/15
deny from 221.129.0.0/16
deny from 221.130.0.0/15
deny from 221.133.224.0/19
deny from 221.136.0.0/16
deny from 221.137.0.0/16
deny from 221.172.0.0/14
deny from 221.176.0.0/13
deny from 221.192.0.0/15
deny from 221.194.0.0/16
deny from 221.195.0.0/16
deny from 221.196.0.0/15
deny from 221.198.0.0/16
deny from 221.199.0.0/19
deny from 221.199.32.0/20
deny from 221.199.48.0/20
deny from 221.199.64.0/18
deny from 221.199.128.0/18
deny from 221.199.192.0/20
deny from 221.199.224.0/19
deny from 221.200.0.0/14
deny from 221.204.0.0/15
deny from 221.206.0.0/16
deny from 221.207.0.0/18
deny from 221.207.64.0/18
deny from 221.207.128.0/17
deny from 221.208.0.0/14
deny from 221.212.0.0/16
deny from 221.213.0.0/16
deny from 221.214.0.0/15
deny from 221.216.0.0/13
deny from 221.224.0.0/13
deny from 221.232.0.0/14
deny from 221.236.0.0/15
deny from 221.238.0.0/16
deny from 221.239.0.0/17
deny from 221.239.128.0/17
deny from 222.16.0.0/15
deny from 222.18.0.0/15
deny from 222.20.0.0/15
deny from 222.22.0.0/16
deny from 222.23.0.0/16
deny from 222.24.0.0/15
deny from 222.26.0.0/15
deny from 222.28.0.0/14
deny from 222.32.0.0/11
deny from 222.64.0.0/13
deny from 222.72.0.0/15
deny from 222.74.0.0/16
deny from 222.75.0.0/16
deny from 222.76.0.0/14
deny from 222.80.0.0/15
deny from 222.82.0.0/16
deny from 222.83.0.0/17
deny from 222.83.128.0/17
deny from 222.84.0.0/16
deny from 222.85.0.0/17
deny from 222.85.128.0/17
deny from 222.86.0.0/15
deny from 222.88.0.0/15
deny from 222.90.0.0/15
deny from 222.92.0.0/14
deny from 222.125.0.0/16
deny from 222.126.128.0/17
deny from 222.128.0.0/14
deny from 222.132.0.0/14
deny from 222.136.0.0/13
deny from 222.160.0.0/15
deny from 222.162.0.0/16
deny from 222.163.0.0/19
deny from 222.163.32.0/19
deny from 222.163.64.0/18
deny from 222.163.128.0/17
deny from 222.168.0.0/15
deny from 222.170.0.0/15
deny from 222.172.0.0/17
deny from 222.172.128.0/17
deny from 222.173.0.0/16
deny from 222.174.0.0/15
deny from 222.176.0.0/13
deny from 222.184.0.0/13
deny from 222.192.0.0/14
deny from 222.196.0.0/15
deny from 222.198.0.0/16
deny from 222.199.0.0/16
deny from 222.200.0.0/14
deny from 222.204.0.0/15
deny from 222.206.0.0/15
deny from 222.208.0.0/13
deny from 222.216.0.0/15
deny from 222.218.0.0/16
deny from 222.219.0.0/16
deny from 222.220.0.0/15
deny from 222.222.0.0/15
deny from 222.240.0.0/13
deny from 222.248.0.0/16
deny from 222.249.0.0/17
deny from 222.249.128.0/19
deny from 222.249.160.0/20
deny from 222.249.176.0/20
deny from 222.249.192.0/18
allow from all
</LIMIT>

[kursed]

Here is the list of domains, which're blocked on my website. It's helped me curtail spam on my website to a very large extent.

[Indie2Industry]

I hate spam

I use this...


http://www.vbulletin.org/forum/showthread.php?t=132482

It works on my 3.7 board and I haven't gotten a single spambot since.

[Christophe_O]

Thank you all for the suggestions especially ENHANCED RECAPTURE...

Yeah, that's entirely possible. But then, why would a real person always use the same registration data? Wouldn't they try and be more "stealthy" and "elusive"?

I believe these spamborgs are humans who do not speak English, acting like trained monkeys. I.e., one geek in China trains all his friends and relatives.

...We ban them permanently. We move their posts to a private forum. We review their IP addresses and ban the IP too. We shorten the IP for 2 octets and search to find others proactively and ban or delete them in advance.

We also search the short octet (xxx.xxx.) to see if any non spammer members would be effected by a ban of that set of IPs and if not we ban the entire short set.

This all works pretty effectively. I have a board with 1.3 million posts and 22,000 members so, it's a spam magnet. But with these methods we have reduced spammers to a minor problem.

Here is the list of [email] domains, which're blocked on my website. It's helped me curtail spam on my website to a very large extent.

http://www.stopforumspam.com/

Enhanced Captcha Image Verification
It works on my 3.7 board and I haven't gotten a single spambot since.

Thank you all for the ideas.

I am doubtful about blocking email domains. Many legitimate forum members just like to use Hotmail or Yahoo. And of course any spammer can go there too. So I doubt if it's practical to sort them out by their email domain. However, a current ban list of complete email addresses (available at http://stopforumspam.com/) might safely make your forum much more bothersome to spam, provided of course you have email verification.

I especially like the Enhanced Capcha Image Verification.

• So simple, no messing with IP databases, etc.
• Will stump illiterate spammers much better than character recognition.
• Allows each forum to use different images, thus making it quite unfeasible to create a program for joining all forums.
• Much more friendly to the legitimate human visitor than ramping up the obscurity of character recognition.
• I.e., basically less complex but more effective than Recaptcha, for the current wave of quasi-human spam.
• With some modifications, I believe this method could be a serious improvement on Recapcha. Currently, the multiple-choice challenge is only practical with about 15 images, and to be human-friendly must allow 3 tries. Thus, robots can get through 1/5 the time by guessing. However this could be overcome by using 2 or 3 questions, each with 10 possible images, thus increasing to 100 or 1,000 variations. Thus, I hope this type of image verification may someday be considered as a standard feature for Vbulletin.

P.S. I suppose that, without resorting to a hack, while also using the Recapcha or Image Verification, you can add your own multiple-choice Q&A to the "Forum Rules" agreement. I would suggest questions 1 and 2 be: 'Do you agree with the forum rules?' and 'Are you over 13?'. Then question 3 can be chosen randomly from a list, or perhaps it will be enough to change this manually once a month. If necessary, a fourth question can be added. The fact that you do this yourself will make your hurdles unique. It is not feasible to train either a robot or a lackey for one forum.

[Indie2Industry]

I believe these spamborgs are humans who do not speak English, acting like trained monkeys. I.e., one geek in China trains all his friends and relatives.



Thank you all for the ideas.

I am doubtful about blocking email domains. After all many legitimate forum members just like to use Hotmail or Yahoo. And of course any spammer can go there too. So I doubt if it's practical to sort them out by their email domain.

I especially like the Enhanced Captcha Image Verification.

• So simple, no messing with IP databases, etc.
• Will stump illiterate spammers much better than character recognition.
• Allows each forum to use different images, thus making it unfeasible to create a robot that can immediately enter all forums.
• Much more friendly to the legitimate human visitor than ramping up the obscurity of character recognition.
• I.e., basically less complex but more effective than Recaptcha, for the current wave of quasi-human spam.
• With some modifications, I believe this method could be a serious improvement on Recaptcha. Currently, the multiple-choice challenge is only practical with about 15 images, and to be human-friendly must allow 3 tries. Thus, robots can get through 1/5 the time by guessing. However this could be overcome by using 2 or 3 questions, each with 10 possible images, thus increasing to 100 or 1,000 variations. Thus, I hope this type of image verification may someday be considered as a standard feature for Vbulletin.

I believe it to be the most valuable mod I have. Mine has 10 images instead of 4, just to make it that more difficult for the bot.

http://indie2industry.com/forum/register.php

[rolloffhill]

I just went through all 12 pages here and was surprised I hadn't seen this site mentioned.

http://www.stopforumspam.com/

It is a pretty extensive database of common spammers, including IP's, emails and usernames. I stumbled upon it the other day when we got a bunch of new registrations and they all entered "1" in the required fields at registration. I had missed a few so when I searched the memberlist for "1" in one of the required fields and it pulled up about 5 that I missed.

[Christophe_O]

Please help: can a Q&A be made to trigger the forum rules 'rejection' page without a hack? (STANDARD_ERROR template.)

1. I believe my own custom multi-choice Q&A, even if not encrypted, may stump the few robots that get through image verification, simply by being different.
2. I believe non-robot spammers will be superstitious. Even if they don't know English, word will spread among them what the following means, making recruitment difficult.
3. The following experiment is not multi-choice and does not do anything. My HTML 'forms' skills are nil.
4. Can someone please tell me how to activate my extra input to trigger the 'rejection' page?
   ... Preferably using an existing 'action', thus not needing a hack.
   ... Preferably causing 1 (not 0) to trigger the rejection, thus tripping robots a bit better.
   ... Or multiple input 'values' so I can do multiple choice if necessary.
5. My small new forum receives 1 spamborg weekly like clockwork. Let's see if this does anything!

Style manager ... edit templates ... registration templates ... register rules ... deleted this:
<div><label for="cb_rules_agree"><input type="checkbox" name="agree" id="cb_rules_agree" value="1" /><strong><phrase 1="$vboptions[bbtitle]">$vbphrase[read_agree_abide_by_rules]</phrase></strong></label></div>

... Replaced as follows ...

<div><label for="cb_rules_agree">
<b>Agreement verification.</b> Please check one:<br />
<input type="radio" name="agree" value="1" id="cb_rules_agree" />
I am over 13, I have read, and I agree to abide by, the above Forum Rules.<br />
<input type="radio" name="agree" value="0" id="cb_rules_agree" checked="checked" />
I have not read or do not agree to the rules.</label><br />

<label for="cb_rules_agree">
<b>Honesty verification.</b> Please check one:<br />
<input type="radio" name="disgrace" value="0" />
I agree to disgrace if I place advertising messages in non-advertising forums.<br />
<input type="radio" name="disgrace" value="1" checked="checked" />
I am not honest. I will disgrace my family.</label></div>