Weird users signing up

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • DarknessDivine
    Senior Member
    • May 2004
    • 554
    • 3.7.x

    Weird users signing up

    I have noticed at my forum and a few others I go to that run vBulletin that lately there have been some strange registrations...people registering with names like m7v1g7flpg they have registered at my forum 7 times and everytime been deleted..They have the same IP and so we did an htaccess IP block since the regular cpanel block didn't work.
    Is there anything to this?

    Got a Boxer?
    BoxerTalk
  • Steve Machol
    Former Customer Support Manager
    • Jul 2000
    • 154488

    #2
    Sounds fishy. If you have not turned on image verification, you should.
    Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
    Change CKEditor Colors to Match Style (for 4.1.4 and above)

    Steve Machol Photography


    Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


    Comment

    • DarknessDivine
      Senior Member
      • May 2004
      • 554
      • 3.7.x

      #3
      It is turned on..I've always had it on...that's what I'm not getting..
      the last one signed up at my forum with yf47gy4in1 and always the email addys end in .biz

      Got a Boxer?
      BoxerTalk

      Comment

      • Steve Machol
        Former Customer Support Manager
        • Jul 2000
        • 154488

        #4
        I would add this to the Email Ban list:

        .biz
        Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
        Change CKEditor Colors to Match Style (for 4.1.4 and above)

        Steve Machol Photography


        Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


        Comment

        • DarknessDivine
          Senior Member
          • May 2004
          • 554
          • 3.7.x

          #5
          just did thanks..

          Got a Boxer?
          BoxerTalk

          Comment

          • envy-uk
            Member
            • Mar 2004
            • 66
            • 3.0.0 'Gold'

            #6
            I'm also having this problem.

            I've had four sign up within the last 48 hours, each entering '1' into any additional required fields.

            Comment

            • belindaj
              Senior Member
              • Aug 2002
              • 112

              #7
              I've also started seeing it on our boards in the last couple of months - not a lot - but we did have two today within 5 minutes of each other. Previous to that we've had two in the last two months - both posted links to free porn. I think that makes 5-6 in four years (But 4 in two months definately makes us go hmmmm....)

              Banned immediately and my moderator team is top notch and always on

              Comment

              • DarknessDivine
                Senior Member
                • May 2004
                • 554
                • 3.7.x

                #8
                I denied them via htaccess and they still signed up same IP? How is that?

                Got a Boxer?
                BoxerTalk

                Comment

                • Steve Machol
                  Former Customer Support Manager
                  • Jul 2000
                  • 154488

                  #9
                  I have no idea.
                  Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
                  Change CKEditor Colors to Match Style (for 4.1.4 and above)

                  Steve Machol Photography


                  Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


                  Comment

                  • Simtech
                    Member
                    • Jan 2005
                    • 65
                    • 5.5.x

                    #10
                    I'll bet that is some bot from a website called BAKEDPOTATO2005.BIZ or BAGELSANDCREAMCHEESE.BIZ.

                    I googled info about them and saw plenty of admins complaining about the exact same thing. The sites are blacklisted and are currently registered thru Enom. If it happens again I would suggest filing an abuse complaint with Enom (on their website under terms of service).

                    It's a spammer trick - make sure all ".biz" are banned on your site.

                    There's a lot of talk about the "image verification" being turned on. It may be selected but you need to make sure that you can actually see it as a new user.
                    Last edited by Simtech; Fri 18 Feb '05, 8:56pm.

                    Comment

                    • Gtech
                      Member
                      • Sep 2004
                      • 87

                      #11
                      I didn't see this post and have just created a new thread very similar. Can someone tell me how to ban the IP address that they are comming from. Thanks

                      Comment

                      • Floris
                        Senior Member
                        • Dec 2001
                        • 37767

                        #12
                        Perhaps someone with access log knowledge and experience can go through the logs to see where the bots are coming from and which agent they use and what perhaps happens with the image verification images. Who knows, we might find out something we don't know yet.

                        Comment

                        • sponsorchat
                          Senior Member
                          • Nov 2004
                          • 105

                          #13
                          I thought I was alone on my forum, I was getting some very weird usernames registered like crazy, random numbers and letters. Don't remember the exact usernames, deleted them but things like:

                          322g2h2g8774334


                          Thanks for the info in this thread, appreciate it

                          Comment

                          • Gtech
                            Member
                            • Sep 2004
                            • 87

                            #14
                            I manage to sort mine out, i hadn't selected some GD thing in one vbulletin option setting which i belive was server and optimization

                            Comment

                            • sponsorchat
                              Senior Member
                              • Nov 2004
                              • 105

                              #15
                              Originally posted by Gtech
                              I manage to sort mine out, i hadn't selected some GD thing in one vbulletin option setting which i belive was server and optimization
                              Same here, now enabled it and hope it prevents these bots from making stupid member names.

                              Comment

                              widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                              Working...