Been Slammed with Spambots Today

[Mestral]

This quote is hidden because you are ignoring this member. Show Quote

Here's one that registered yesterday. The IP is Lufkin, Tx. Note the email address.

It isn't the email address that catches my attention, since some privacy services allow creation of unique email addresses for each thing you sign up for (although the format 'Charlie' used defeats the purpose of that). The date of birth catches my attention. Probably another libtard. Could be a 'bot' though. Intellect is about the same.

[ClickaNerd]

This guy developed a Vietnam specific list.
http://www.nirsoft.net/countryip/vn.html

Additionally, you should cause all new account creation to limit to require 2 step authentication like google.

That will limit your hassles immensly.

I wrote a great piece of code in .asp.

I can pull up Vbullitan's .php version and see if I can duplicate in .php.

Even the spammers with burner phones will toss in the towel after you complicate it like this.

[Rick]

I used to use a question verification. I turned recaptcha back on and am allowing new registrations since this morning and haven't had any yet.

I like that list.

[Mestral]

This quote is hidden because you are ignoring this member. Show Quote

I used to use a question verification. I turned recaptcha back on and am allowing new registrations since this morning and haven't had any yet.

I like that list.

Glad things are back to normal. I have someone asking about it.

[Rick]

One got through this afternoon so far. I can handle that. But I'll start blocking the addresses on that list.

So if anyone vacations in Vietnam, they won't be able to tell us about it...lol

[Rick]

I have been getting slammed with more of this ####. I made an entry that accidentally banned Dave the other day.

I found this site that seems pretty good. You tell it which country you want to block and it spits out a list.

https://www.countryipblocks.net/country_selection.php

So here's the list of countries I have blocked now.
AFGHANISTAN, ANTIGUA AND BARBUDA, ARGENTINA, AZERBAIJAN, BANGLADESH, BRAZIL, CAMBODIA, CHILE, CHINA, COLOMBIA, CZECH REPUBLIC, FRANCE, FRENCH GUIANA, FRENCH POLYNESIA, FRENCH SOUTHERN TERRITORIES, GEORGIA, GHANA, GREECE, HONG KONG, INDIA, INDONESIA, IRAN, ISLAMIC REPUBLIC OF, IRAQ, ISRAEL, ITALY, KAZAKHSTAN, KENYA, KOREA, DEMOCRATIC PEOPLE'S REPUBLIC OF, KOREA, REPUBLIC OF, KOSOVO, LITHUANIA, MACEDONIA, THE FORMER YUGOSLAV REPUBLIC OF, MALAYSIA, MEXICO, PHILIPPINES, POLAND, PORTUGAL, ROMANIA, RUSSIAN FEDERATION, SIERRA LEONE, SINGAPORE, SOMALIA, SRI LANKA, TAIWAN, PROVINCE OF CHINA, THAILAND, TURKEY, UGANDA, UKRAINE, UZBEKISTAN, VIET NAM

[Grammar Rules]

You banned Dave? Oh nooooooooooooo!

Hope the situation improves.

[Dagobert II]

You've blocked Kazakhstan! How are we supposed get content from Borat?

[Rick]

Well hell.

We went 24 hours with only two spam-bot registrations and now we are up to five in the past 24 hours with three since last night.

The latest have come from Brazil and France and one that shows Sweden, Germany, or Ashville, NC.

[shawnricheson]

This quote is hidden because you are ignoring this member. Show Quote

Well hell.

We went 24 hours with only two spam-bot registrations and now we are up to five in the past 24 hours with three since last night.

The latest have come from Brazil and France and one that shows Sweden, Germany, or Ashville, NC.

add a section to you .htaccess file and add the individual ip's of the spambots like this:

# Block Spambots
deny from 74.63.112.138
deny from 74.63.112.139
deny from 74.63.112.140

etc

As the spammers up their game, you will see the group sequence develop by region.

then run a zenmap of the ip's after you collect a couple to get their ISP upstream providers.

DOWNLOAD HERE: https://nmap.org/zenmap/

if they come from rackspace in san antonio, which they most likely will, you can send the IP's to their
abuse department and they will disable their account at rackspace or whatever ISP you find.