XF 2.2 Spam problem

[Dzgsm]

Hallo,
i have a spam problem, not with registration but from the members themselves, as there are members using very weak passwords like: 123456
there are several methods to detect weak passwords or request inactive members to update their passwords?

 

[Dzgsm]

This free addon will prevent old breached accounts from logging in, https://xenforo.com/community/resources/ozzmodz-security-lock-old-accounts.9372/

thank you very much, I will try

 

[Mr Lucky]

Yes, I'm looking for it, but I don't have itI my version 2.2.9.
plz bro how do I find it?

You do have it in 2.2.9.

ACP > Users > batch update users.

You can then choose various criteria for users and then update to reset or change as in the screenshot I posted above

 

[Dzgsm]

You do have it in 2.2.9.

ACP > Users > batch update users.

You can then choose various criteria for users and then update to reset or change as in the screenshot I posted above

thank's Lucky, i found it & updated the members that have been inactive for a year
i will wait & tell you the result

 

[Sisterhood]

I´ve never had as many spam request in 10 years of Xenforo as after the update.....

 

[Mr Lucky]

I´ve never had as many spam request in 10 years of Xenforo as after the update.....

Or at the same time as the update?

 

[MySiteGuy]

I´ve never had as many spam request in 10 years of Xenforo as after the update.....

This has nothing to do with Xenforo's update. It's because the largest ever password dumps appeared on a blackhat site at the same time, and script kiddies are hammering sites looking for accounts that use the same password.

 

[zappaDPJ]

I would be inclined to check any suspect account emails with https://haveibeenpwned.com/ to see if “Naz.API” is listed. If so it's highly likely the member has been infected by malware which will have harvested logins and passwords for multiple services from data stored in the user's browser as plain text.

That's the short version, here's the detail.

Researcher uncovers one of the biggest password dumps in recent history

Roughly 25 million of the passwords have never been seen before by widely used service.

arstechnica.com

 

[Dzgsm]

Is there a way to block links like ****?

 

[Wing]

What are you guys doing to block contact us form spam?

 

[htsumer]

What are you guys doing to block contact us form spam?

I'm using one of the verification options