Today we upgraded to ejabberd 17.04 and in the same go we enabled a new module to block spam. This module basically blocks messages from users not in your contact list. This means to send spam the sender needs to add you to their contactlist first before sending messages. Hopefully this change will help reduce the spam messages. Please report if you have any issues!