This guy above is posting from the US, believe it or not.
Here is a DNS lookup of his IP address.
..........................................................


NSLookup
This DNS utility is provided by ZoneEdit.Com, the industry leader in DNS and domain mangement solutions.
Click here to sign up for a free, no obligation trial of our dns services.
Click here to use our SMTP test utility.
Click here to use our global whois utility (domain ownership info).

DNS Lookup
Enter a host name for Forward DNS Lookup:
(IE: yahoo.com)

Select record type (optional):
Ip Address (A)Mail Server (MX)Alias (CNAME)Authority (SOA)Name Server (NS)IpV6 (AAAA)Return all (ANY)

Enter server name or IP (optional):



Reverse Lookup
Enter an IP address for Reverse Lookup:
(IE: 216.115.108.245)

Enter server name or IP (optional):




Reverse Lookup Results
Host Type Value
146.13.62.209.in-addr.arpa PTR ev1s-209-62-13-146.ev1servers.net.

IP Address Contact Information
OrgName: Everyones Internet
OrgID: EVRY
Address: 390 Benmar
Address: Suite 200
City: Houston
StateProv: TX
PostalCode: 77060
Country: US

ReferralServer: rwhois://rwhois.ev1servers.net:4321/

NetRange: 209.62.0.0 - 209.62.127.255
CIDR: 209.62.0.0/17
NetName: EVRY-BLK-16
NetHandle: NET-209-62-0-0-1
Parent: NET-209-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.EV1SERVERS.NET
NameServer: NS2.EV1SERVERS.NET
Comment:
RegDate: 2007-03-19
Updated: 2007-06-11

RAbuseHandle: ABUSE477-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-713-579-2850
RAbuseEmail: abuse@ev1servers.net

RNOCHandle: NOC1445-ARIN
RNOCName: Noc
RNOCPhone: +1-713-579-2850
RNOCEmail: noc@ev1servers.net

RTechHandle: VST3-ARIN
RTechName: Stinson, Valarie
RTechPhone: +1-713-579-2850
RTechEmail: admin2@ev1servers.net

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-214-782-7802
OrgAbuseEmail: abuse@theplanet.com

OrgNOCHandle: NOC1445-ARIN
OrgNOCName: Noc
OrgNOCPhone: +1-713-579-2850
OrgNOCEmail: noc@ev1servers.net

OrgTechHandle: VST3-ARIN
OrgTechName: Stinson, Valarie
OrgTechPhone: +1-713-579-2850
OrgTechEmail: admin2@ev1servers.net

But is it always from the same IP address? The source is likely a botnet that is probably targeting on a word in the topic title. It's probably not a good idea to use the word nr0p in subjects or posts for at least that reason. Another good reason is that corporate filters could cause banning of the entire site - of course only an issue for the unfortunate gunks.com'er(s) that is/are behind such a corporate filter.

In this case, Mik_Schultz posted from 209.62.13.146 two consecutive times. If you do a tracert on this while he is active, you'll see that the penultimate address is from Houston. I don't know what can be done about this other than to do fly swatting, as it were.

I'm swatting as fast as I can. Thanks to all who have notified me of these posts.

A different name with an entirely different IP address. It seems that MarcC might be right. I am not equipped knowledgewise to be a warrior here.

Instead of fly swatting or banning specific user names or IP addresses what we really need at this point is a mechanism that defeats automated registration.

Out of curiosity, how much spam is getting through?

Actually it would seem to be very little. I remember about a half dozen in the past month; could be a little more or a little less. However, it does represent something that has the potential to become a huge issue. Evan tells me in a backchannel discussion that there's a setting in the forum software he's going to change that likely will solve at least one avenue of attack.

Check out user daviadfdfyuyuyuj. There are also quite a few users who registered more than a year ago and haven't posted. Shall I compile a list?

No having posted is not a reason for banning. Registration has other uses, such as having threads marked as read/new, and being able to exchange PMs.

After this latest spate of posts, I looked back at the forum settings, and much to my horror, I noted that the switch for requiring verification of emails was turn off! I guess we missed that after the latest forum upgrade...ouch.

Anyway, I looked back at registrations and found most of the offending users. I'm sure there are a few I've missed, but I'll whittle them down quickly.

So if anyone wants to notify me about one of these posts, please include the user name (in case Mike Rawdon deletes the post before I see it--he's fast), and give me IP address of the post as well.

Many thanks, and sorry for the inconvenience.