Spam on xenforo.com, what do you think about it?

nice, thanks for this!

 

You can add more to the list like this site shows you using [OR] at the end and listing more on a new line.

http://www.javascriptkit.com/howto/htaccess13.shtml

Code:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^xpymep.exe [OR]
RewriteCond %{HTTP_USER_AGENT} ^Wget [OR]
RewriteCond %{HTTP_USER_AGENT} ^Widow
RewriteRule ^.* - [F,L]
</IfModule>

 

There was another list like that one I've posted a link to, one that listed all Russian and Chinese to block, but can't find again at the minute. But using that method anyway for blocking some bots (that are just bandwidth stealers) or classed as bad bots doing your site no good anyway. Can save you a lot of bandwidth, because they'll get shown a 403 error page and denied access to crawl site.

This is not the other link I meant, but another useful list to compare the other one against.

http://wpsecure.net/bad-bot-list/

 

Thanks @GTB
I'll check this stuff tonight to see what I can do.
I see we had another 11 users in moderation que today, so that's a total of 30 in the last 15 hours

 

ps.. we're getting attempts every few mins all day
it's been like that since I checked last night at 9pm

 

Try a combination of email verification and Question Answer verification. Most spammers have fake email addresses anyway and won't get through.

 

XRumer and other new bot software can easily verify e-mail addresses, do simple math in Q&A's, and also search google for answers to Q&A questions and then try different answers. The best Q&As are ones that are specific to your community.

 

I've added keycaptcha along with the sonnb mod we have
https://www.keycaptcha.com/xenforo-captcha/
to help with the attempts at registrations

 

Kier on the xenforo website actually banned the offending ip address.

 

The offending IP address of the source of the mass spam attack. Other IPs have been recently posting spam, but not to the extent of the mass attack.

It still isn't good though.

 

2,932 items since I installed it a month ago.

 

If that hacker is still causing you problems dob him in to his own ISP and into the police. Give the cops all the details including the offending IP address then they will find out who the hacker is and arrest him.

 

Posting spam on a forum isn't against the law...

 

Slavik and Jake now have access to the Q&A questions, so they can now put some new questions in. Hopefully it reduces a bit.