News:

SMF 2.1.4 has been released! Take it for a spin! Read more.

Main Menu

Visiters spaming by registering.Need help

Started by lovepreet39, May 07, 2011, 11:05:49 AM

Previous topic - Next topic

Illori


lovepreet39

Ok i enabled the registrato again.

Now i am watching in the Who online. Some gusets are tring to Login again and again.
But there is only 1 registered members on my website which is sleeping

Sir Osis of Liver


Set your method of registration to 'Admin Approval' - people can still register, but admin must activate the account to complete reg.  That way you can screen the new registrations and bounce the ones that look like spammers before the accounts become active.

Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

Illori

lovepreet39 which version of smf are you running? if you have not updated to RC4+security patch or RC5 please do so, there are some patches for some of the login issues you may be facing.


Illori

then i would not worry about the login attempts at this time unless it starts causing issues for your users.

lovepreet39

Today i am viewing Who online.
There are some guests may be spamers.
First guest states is unknown.
2nd  is tring to register.
3rd states is  - Nothing and nothing you can see.

Now spamers are hidding themselfs and attacking on my website.
But main point is My websites is totaly new so why spamers are attacking on my website.

and whats about 1st and 2nd  guests states.

mariusfv

Like Angie KidneyKorner say's I suggest you too to install this mod:
http://custom.simplemachines.org/mods/index.php?mod=1547 the mod to work you must register here: http://stopforumspam.com/ and get your API key, copy/paste the key to mod site area and done!
+ Use SMF default captcha(better then reCaptcha who was bypassed by Russians and software is for sale).
+Use additional questions for register and activate captcha and questions for first 15 posts.

I had your problems few months ago, after I read SMF tutorials now I have 1 spammer/month and before 70-80/day!

lovepreet39


Vince S

Just as an alternate view I have the good luck to live in Australia, a country with (as far as I know) very few spammers. Plus we are a geographic interest group so our forum only needs locals to register. So I leave all registrations on Admin approval and, if I suspect in any way the name they have chosen, I click on the IP number which tells me a country of origin and then put a registration ban on it. This way progressively the spam issue has dropped to one every few weeks which is great!

Now this is a bit of a ham-fisted approach as some IP ranges cover multiple countries. If I suspect that I will just test a few IP's, maybe just ban the specific problem range or some obvious sub-set. The safety mechanism is the disclaimer which tells people what to do if they have been wrongly banned. Oh dear, as I type this I am wondering if a banned person gets to see it...? I set this up months ago, did I miss that? Heck, you can see for yourself how it works at http://hunterdog.org.au/DiscussionBoard/index.php?action=admin;area=regcenter;sa=register - if you want to test register with some obvious test name go right ahead, I will even tick the email notice for rejection which I don't usually do.

Just for reference purposes of anyone interested below is the list of IP's currently banned from registration, I don't claim it is perfect but it will do. I have seen that you can subscribe to services that maintain comprehensive IP databases, but stumbling along making my own for free is what got this lot together. If they have 0 Hits that means only the one spammer came from that IP since it was entered, you get that!:

Banned entity    Ban name    Hits    
1.*.*.*    1. India    0    
24.*.*.*    24. Charter Communic    5    
46.*.*.*    46. Middle East    2    
58.180-255.*.*    58.180-255. China SE    0    
59.*.*.*    59. China India    0    
60.0-223.*.*    60.0-223. China    3    
62.*.*.*    62. Russia    1    
64.*.*.*    64. United States    38    
66.*.*.*    66. Canada    3299    
67.*.*.*    67. United States    0    
68.*.*.*    68. United States    51    
69.*.*.*    69. United States    3    
70.*.*.*    70. United States    0    
71.*.*.*    71. Finland & US    4    
72.*.*.*    72. USA    1    
74.*.*.*    74. Texas    77    
75.*.*.*    75. USA    1    
76.*.*.*    76. Finland (?)    5    
77.*.*.*    77. Russia    66    
78.*.*.*    78. Great Britain    53    
79.*.*.*    79. Israel    2    
80.*.*.*    80. Austria    2    
81.*.*.*    81. Norway    3    
82.*.*.*    82. Russia    3    
83.*.*.*    83. Germany    0    
84.*.*.*    84. Russia    4    
85.*.*.*    85. Sweden    46    
86.*.*.*    86. Belarus    1    
87.*.*.*    87. Finland    1    
88.*.*.*    88. Finland    6    
89.*.*.*    89. Germany    224    
91.*.*.*    91. Ukraine    71    
92.*.*.*    92. Ukraine    242    
93.*.*.*    93. Netherlands    3    
94.*.*.*    94. France, Italy et    767    
95.*.*.*    95. Russia    432    
96.*.*.*    96. USA    4    
98.*.*.*    98. USA    6    
109.*.*.*    109. Russia    5    
110.*.*.*    110. Pakistan, China    3    
111.0-219.*.*    111.0-219 Pakistan    3    
111.221-255.*.*    111.221+ Bangladesh    1    
113.*.*.*    113. Nepal    1    
114.*.*.*    114. India, Japan    0    
115.*.*.*    115. India SE Asia    0    
116.*.*.*    116.* China Korea    0    
117.*.*.*    117. China    1    
118.*.*.*    118. China SE Asia    1    
119.*.*.*    119. Pakistan    1    
120.*.*.*    120. China SE Asia    0    
121.44.106.63    aleheaterof    0    
122.0-99.*.*    122.0-99.* China SE    0    
122.100.16-255.*    122.100.16-255.* Chi    0    
122.101-103.*.*    122.101-103.* China    0    
122.112-255.*.*    122.112+.* China SE    0    
123.112-127.*.*    123.112-127 China    0    
123.212-242.*.*    123.212-242. SE Asia    0    
124.0-107.*.*    124.0-107. China    1    
124.192-255.*.*    124.192-255. SE Asia    0    
129.*.*.*    129.* USA    4    
173.*.*.*    173. United States    47    
174.*.*.*    174. United States    3    
175.*.*.*    175. Malaysia    0    
178.*.*.*    178. Ukraine    5    
180.*.*.*    180. China Japan    3    
184.*.*.*    184. Unspecified    1    
188.*.*.*    188. Latvia    16    
189.*.*.*    189. Brazil    1    
194.*.*.*    194. Virgin Islands    1506    
195.*.*.*    195. Latvia    8    
196.*.*.*    196. West Africa    1    
201.*.*.*    201. Brazil    17    
202.131.96-255.*    202.131.96-255 SE As    0    
202.132-133.*.*    202.132-133. SE Asia    0    
203.197-200.*.*    203.197-200 India    0    
204.*.*.*    204. US    4    
205.*.*.*    205. USA    0    
208.*.*.*    208. USA    1    
209.*.*.*    209. USA    1    
210.23.64-127.*    210.23.64-127    0    
211.232-255.*.*    211.232-255. Korea    0    
212.*.*.*    212 Israel    14    
213.*.*.*    213. Russia    2    
216.*.*.*    216. USA    1    
217.*.*.*    217. Germany    39    
219.91-255.*.*    219.91-255 SE Asia    0    
221.*.*.*    221. China    0    
222.*.*.*    222. Japan - China    19    
Try figuring out where all this is going to keep coming from: Millionaire Baby? Or just pass me a beer and we'll sort it, thank you.....

vich

I have the same problem on my forum. I have it set to manually approve new members, but it's a HUGE pain to have to sift through hundreds of fake accounts a week in order to find the few legitimate ones. I've actually disabled registration on the forum and I *still* see new accounts being created!

http://screencast.com/t/E2q6G5tym [nofollow]

I'm sure I'll get dogpiled by people who love SMF, but frankly I think it's ridiculously vulnerable to spam. I've tried a bunch of different methods for stopping spam registration and NOTHING seems to work worth a damn. The fact that spammers can still register accounts even with registration turned off is troubling to say the least. I know a ton about Wordpress but not much about SMF - if I did, I would just rename or move the appropriate files so that spammers couldn't use the defaults to attack my forum. That seems like a simple solution, but again, I don't know enough about SMF to fiddle with file names or directory names.

Currently I have installed:

- No Spam by Guests!
- Bad Behavior
- httpBL
- reCaptcha for SMF
- Stop Spammer

This list does not include packages that I've tried, have done nothing and have uninstalled.

It seems I may as well have nothing installed and left the door wide open. This has been an ongoing problem and frankly, I'm a bit disgusted by the whole thing. Yes, there are spammers, but the apparent ease with which they can get through SMF is pathetic. I run a number of very popular Wordpress sites and spam is 99% under control on those.

Vic

Illori

please open a separate thread for your issue, this thread belongs to someone else.

vich

I only posted it here because I thought it was appropriate since I've had the same registration issues. Trying to follow correct protocol.

Illori

and the protocol would be to start a separate thread as your issue may not be exactly the same as the ops issue. also it is not the best idea to bump a thread that is several months old either.

2babies=tired

Lynnb

it used to be that bad links would effect your ranking in google, but I was reading up on it recently and new info suggests that google has changed and it doesn't penalise sites that have outgoing links to bad sites.

Advertisement: