How to stop automated spam on forums
 

Hey I started a forum (vbulletin) and require users to register on a page with a captcha code installed and also for them to have to validate their emails yet I am still getting automated viagra spam etc.

Anyone know how I can stop this?

Bumperoo

Better captcha. Xrumer can crack every captcha forums use. Integrate recaptcha to thwart xrumer (for now). I have a few spammers get by recaptcha but I suspect they are humans manually entering captchas.

this worked for me

http://bbantispam.com/forum/viewtopic.php?t=313

it's that fukin xrumer bullshit, I get dozens of new members signing up every day from xrumer spam, fuck them :321GFY

- registration time limit
- recaptcha
- custom verification questions

Cool thanks alot for all your help

This one works good. http://www.vbulletin.org/forum/showthread.php?t=183329

moderate their registration manually. i guess is the only solution for now. i`ve been fighting with the same spammers since more than 1 year....

oh, and ban their IPs also :)

rename the post php its most likely newthread.php rename them and modify it in your source. Easy solution and works for 99.5 %

vbulletin.org all you questions will be answered

+1,works perfectly fine.

I have same problem with my forum

its called xrumer retard. u need the fake spam posts for your shit forum

- Challenge Questions on the Registration Form
- Captcha
- Ban the IP C-Classes of the spammers
- Disallow reusing email addresses
- Block Yahoo / Hotmail email addresses
- Ban the User(s)
- Don't allow links for users with less than 100+ posts
- Don't allow threads for users with less than 30+ posts
- Ban the words Viagra, Cialis, Mortgage etc...

Building on what AlCapone listed above:
In addition to not allowing links for less than 100 posts, put a time gap between posts of 30 seconds or more.
Also use graphical (not number) captcha (ie., which is a fox, etc)
If you run a culture or country specific forum, ask pop culture questions for captcha

recaptcha works every time. even humans have a hard time figuring out that shit

If you're looking to do something custom then have a peek at your apache logs. I've found 95%+ of the spam signups load then post the registration form in the same second, which is clearly impossible for a human. Either code some sort of time check so that a registration is rejected if the difference between load-submit is too low, or set up something to scan the logs and blacklist IPs (which won't stop the current signup, but it may prevent future attempts)

xrumer is wonderful. i bought it a while ago and using it ever since to get lot of SE traffic. googel is just as retarded as gfy. but gfy is even more idiot.

Has anyone tried this BotScout.

The BotScout code works by intercepting registration attempts from your forum registration page, contact form, or any other kind of other web form. It then silently makes a call to the database and compares the email, user name, or IP address against our list of bot 'signatures'. If the item matches then the registration is aborted and the bot is stopped.

that's what i use too! :thumbsup

Going up for knowledge.

Add not complicated capcha for posting