Bots registering while registration is turned off?

[atomicfusion]

So I have tried the Stop the Bots mod, I have changed my question and answer daily I and I just don't know what else to do... I have over 500 users and guests on at any given time and they are all Bots! I turned off the site, I turned of registration, and they are still registering!

How is this even possible?

www.lsxpowered.com is my site and registration is closed, but I get batches of 10+ bots registering at a time.

I spent the time and went in and banned everyone and pruned all the bot posts, but how can I stop this so I can use my board again?

I am at the end of my rope and about ready to just delete vbulletin all together.

[donald1234]

No one can register if registrations are disabled. That doesn't make sense.

[atomicfusion]

I get that it doesn't make sense... that is why I am posting it here... I just deleted over 20 new registrations and my registration has been closed for hours now...

If it made sense I probably wouldn't be asking why or how it is happening.

[atomicfusion]

While I was replying to the last message, this one came in... ~~There is a new user, Fundkydance at Race-Club
To view their profile, go here:

http://www.lsxpowered.com/member.php?2127-Fundkydance

Email Address : [email protected]
Birthday : June 14, 1976
Referrer: N/A
IP Address: 134.249.49.219

[Wayne Luke]

Since the users have been deleted, we can't begin to tell you how it is happening. No users should be registered if registration is off. Not sure how you have your system set up.

If you don't want people to visit it right now, then put it behind .htaccess.

[Ion Saliu]

Axiomatic Colleague of Mine:

IP Address: 134.249.49.219

Thank you for posting that IP. It is already recognized as a spamming nest.

IP: 134.249.49.219
Decimal: 2264478171
Hostname: 134-249-49-219-broadband.kyivstar.net
ISP: Kyivstar PJSC
Organization: Kyivstar GSM
Services: Recently reported forum spam source. (56)
Type: Wireless Broadband
Assignment: Static IP

(Courtesy of http://whatismyipaddress.com/ip/134.249.49.219)

I already banned it (AdminCP, Options, User Banning Options). I am not always here, but I do appreciate when other admins post spamming IPs. We steadily get rid of the skumbullows (cyber criminals).

Ion Saliu
VeeBeer Forum Administrator At-Large
“A good man is an axiomatic man; an axiomatic man is a happy man. Be axiomatic!”

[donald1234]

While I was replying to the last message, this one came in... ~~There is a new user, Fundkydance at Race-Club
To view their profile, go here:

http://www.lsxpowered.com/member.php?2127-Fundkydance

Email Address : [email protected]
Birthday : June 14, 1976
Referrer: N/A
IP Address: 134.249.49.219

If you have Cpanel, visit "latest visitors" to see what url these bots are using to register as when I visit /register.php registrations are definately disabled.

[BirdOPrey5]

Make sure you have deleted the /install/ folder if you are on a version below 4.2.2. (4.2.2 won't let you in the admincp if you haven't deleted it.)

Check to make sure there are no Administrator accounts you did not create (admincp -> usergroups -> usergroup manager)

Make sure there are no plugins you did not create or install yourself - Admin CP -> Plugs & Products -> Plugin Manager- pay particular attention to any at the very top listed under the "vBulletin" product- by default there should be no plugins under the vBulletin product.

[atomicfusion]

As an FYI I just banned all these IP's

(134.249.49.219),
(91.233.244.66),
(212.92.245.51),
(91.200.14.72),
(222.178.10.241),
(188.0.27.127),
(91.233.244.66),
(91.200.14.36),
(91.200.14.61),
(94.251.118.150),
(176.14.137.231),
(91.207.9.229),
(82.193.99.130),
(178.151.216.88),
(134.249.49.219),
(178.151.216.88),
(178.151.144.215),
(37.233.2.180),
(91.207.5.138),
(95.25.93.192),
(188.235.141.205),
(91.207.6.30),

[BirdOPrey5]

There is no point to posting IP addresses of spammers... There are literally MILLIONS of spammer IP addresses and the nature of dynamic addresses half could change tomorrow. Worse, vBulletin isn't designed to block massive number of IP addresses. The IP Banning option is only meant for a small number of addresses. If you get into the hundreds or thousands you will slow down your site and eventually run out of memory- every address has to load on every page view- it wasn't intended to bulk block spammers. IP addresses should be banned on the server level before vBulletin even executes- but the reality is there is no way to keep up and a modification that checks registrations against a list of known spammers is going to be the way to do this- not manual updates.

[Zachery]

Do you have tapatalk installed?

[atomicfusion]

I do not have tapatalk installed... I have done everything listed on here and opened my registration back up.. I now have over 1500 bots trolling my site and spamming registrations!

HELP

[beishe8]

I do not have tapatalk installed...

Can they login with Facebook?