[OzzModz] Registration Spaminator Stop Spam Bot Registrations [Deleted]

[Ozzy47]

That’s not something I’d like to add as IP’s can be reassigned and at some point be valid, or they are using a public WiFi.

 

[unproperlypropagated]

Maybe a timeout so they stop bombarding.

 

[Ozzy47]

Block unwanted IP’s at the server level or with Cloudflare

 

[smallwheels]

Can it ban the IP after x tries?

That’s not something I’d like to add as IP’s can be reassigned and at some point be valid, or they are using a public WiFi.

As every measure it can cause colateral damage but also as every measure one should know what one is doing anyway when it comes to blocking and locking out.
While there are no doubt dialups and cracked machines in the log the majority seem - at least with me - to be static IPs. Mostly servers that should (as no user uses them as their personal computer) not register on a forum anyway. Some may be proxies, some are VPN endpoints - but I had no issue locking out any of them before they even get in touch with the website. The discussion is basically the same one that has been going on for decades in terms of blacklists for mailservers.

Maybe a timeout so they stop bombarding.

Block unwanted IP’s at the server level or with Cloudflare

I did block a bunch of very nasty ones via .htaccess, sometimes even whole IP ranges. No big deal for me as my userbase is pretty regional. So it would be really handy to have some sort of mechanism to make use of those IP addresses. In a perfect world they would be automatically fed to .htaccess for a couple of weeks, in a less perfect one one could export them in a more comfortable way than c+p.

 

[Alvin63]

not.com is a valid domain that belongs to "Next Online Technologies":

not.com

It also has a valid DNS entry for the mx:


$ dig -t mx not.com
; <<>> DiG 9.10.6 <<>> -t mx not.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55124
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;not.com. IN MX
;; ANSWER SECTION:
not.com. 300 IN MX 75 isaac.mx.cloudflare.net.
not.com. 300 IN MX 94 linda.mx.cloudflare.net.
not.com. 300 IN MX 30 amir.mx.cloudflare.net.

So the domain exists, the mx entry exists but the mailbox for the localpart of the address does not exist, thus you get a bounce. Completely different story from what you wrote in your last post.

Anyone can use any mailaddress during registration and as long as there's an mx entry for the domain the server will try to deliver the registrasion mail (as it does and can not know if the mailbox/mailaddress exists). A "mailfilter" whatever that may be cannot circumvent that - how should it do that?

First thing you should find out is wether the mails you get are caused by registration attemps or by the contact form. Should not be too difficult. If they come in masses it is probably automated and then the according spaminator variant could probably help.

Had one today. Bounced email because the email address was incorrect. This was definitely someone trying to sign up as the bounced email was the activation email.

 

[Alvin63]

This is why I suggested the other addon here -- the registration can't proceed if the email is invalid.

Had a look at that and I'll post a question on that add-on page.

 

[smallwheels]

A little heads up:

Short update on how it is going nine days after the installation according to the logs:
- the registration spaminator has caught
• 82 registration attempts

After three months the counter has risen to slightly more than 22.000 registration attempts (despite haven blocked some very nasty IPs via .htaccess in the meantime). A dramatic rise over the last weeks.

- the login spaminator has caught
• 107 login attempts

This counter is at ~9.500 at the moment.

 

[Gemma]

This addon has now "blocked" (we're invite-only so they couldn't register without a code anyway) 22,806 spam registration attempts on my site. If my site was open and I didn't have this addon I'd probably have abandoned being a forum owner by now due to these spam registrations and the extra work dealing with them.

This should be on everyone's essential addons buy list

 

[TCG2007]

This addon has now "blocked" (we're invite-only so they couldn't register without a code anyway) 22,806 spam registration attempts on my site. If my site was open and I didn't have this addon I'd probably have abandoned being a forum owner by now due to these spam registrations and the extra work dealing with them.

This should be on everyone's essential addons buy list

1300 so far for me

 

[Gemma]

1300 so far for me

I bought this 5 years ago for a ridiculously low price (it is still ridiculously low now) when my site was an open site. The first 3 years it maybe caught 6,000 in total (I was disappointed ). In the last 2 years it has "blocked" 16,000 potential spam registrations and would be catching roughly 25 per day.

Even if it had only blocked 100 in total it would have more than paid for itself.

 

[cwe]

I'm at 28,048 spam registrations blocked and 51,927 spam contact forms blocked (with the contact form spaminator). Pretty sure I installed them around ~2.5 years ago.

 

[gerryvz]

Almost 110,000 for me ......

OZZY47

 

[Max Taxable]

Nothing beats stopping them at the door and logging them. Love seeing body count posts!

 

[Mike Fara]

Almost 110,000 for me ......

OZZY47

View attachment 320884

It was so many I had to truncate the log.

 

[Ozzy47]

This resource has been removed and is no longer available. The following reason was provided:

Requested by the author

 

[smallwheels]

@Ozzy47 : What is going on here?

 

[duderuud]

Wtf...

 

[TCG2007]

Yoooo what??

 

[Gemma]

Yoooo what??

Ozzy is singlehandely demonstrating the need for a better content delivery system so people don't miss anything...

Or...

Thread 'Remove Addons'

May 14, 2025

Please delete all my addons on here.

• Ozzy47
• Replies: 4
• Forum: Other XenForo discussions and feedback

• 
• 
• 

Post in thread 'Snogs Site was down, it is now back up ... move along, nothing to see here'

May 14, 2025

To be clear; he did not upset us and we didn't delete his resources as a result.

He was upset by an interaction with the XF staff and he requested his add-ons to be deleted on here and we obliged with his request, as is standard. @Ozzy47 is welcome to request his resources be undeleted if he has a change of heart.

• Chris D

• 

However, the world is still round...and spinning (apparently) so all is good

OzzModz Is Here To Stay

We are not going anywhere, our addons will continue to be supported and available here for the foreseeable future. We have just left the XF forums, nothing else.

snogssite.com

 

[Welsh Dragon Web Hosting]

really want to get this installed