Announcement

Collapse
No announcement yet.

Spammers Getting Around Image Verification

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • birdie
    replied
    Originally posted by CareyCrew View Post
    There is another mod available that would be really effective if everyone used it.

    >> vbStopForumSpam - known spammer lookup for new registrations : http://www.vbulletin.org/forum/showthread.php?t=176481 <<.
    I unnstalled that as its not worth it. Too many false positives (ie legit members blocked) due to the nature of the database used to identfy the IP addresses (it blocked an AOL IP address at one stage!) ... better off implementing the other solutions in this thread.

    Leave a comment:


  • AdrianH
    replied
    There is another mod available that would be really effective if everyone used it.

    >> vbStopForumSpam - known spammer lookup for new registrations : http://www.vbulletin.org/forum/showthread.php?t=176481 <<

    I added this yesterday and overnight it blocked 12 known spammers from joining.(Most,if not all would have been stopped by the other mods I use but I often see failed registration attempts on the guest list and only get a name and IP address,this vBStop mod logs all details )
    Sign up for an API key and you can add spammers to the database too.
    Yes I know it will not catch the latest bots first attempts but if everyone used this and reported bot/spammer details as they got them the spammers progress would be killed in hours.

    Leave a comment:


  • Dozman
    replied
    So far so good. No problems today. It nice and clean.

    Thank you Steve for the info. I am still learning much with VB

    Leave a comment:


  • JonUrban
    replied
    Originally posted by CareyCrew View Post
    Not wanting to tempt fate but so far these bots have failed to gain access to my forum.

    I use the image captcha with random font/size/color/slant , this is combined with No Spam http://www.vbulletin.org/forum/showthread.php?t=183329 and a large selection of questions,plus "Stop the Registration bots" http://www.vbulletin.org/forum/showthread.php?t=183917 with its hidden fields,(make sure that you change the codes!!!!)...............
    THANKS!

    I added these two products to my forum today, and after having turned off new registrations for a few days - I went and turned registrations back on. Holy Crap!

    In less than 5 minutes, the bots were at it. I could see them in the "Who's On Line" area, attempting to register. All IPs from RIPE, APNIC and LACNIC. I keep watching them try, but they have yet to get in! Some of the IPs they are using right now are 121.150.175.24, 200.63.42.95, 93.174.93.196, 195.60.174.21.

    I can only assume that they have been trying all along but since I had registration turned off, nothing was happening. I find it amazing that they care so much about my little forum that gets very little traffic.

    I guess they will eventually make it through these new implimentations, but for now they seem to be held at bay. Still, it's a real crock, if you ask me.

    Leave a comment:


  • AdrianH
    replied
    Originally posted by Steveir View Post
    thanks for the Q&A advice which I've just implemented. We are a small local group who meet up regulary so the forum is only open to these people. Just spoken to the membership coordinator and we've set up a code to input as an answer that gets emailed to new members before they sign up.

    What I don't understand is, we have no link from our main site to the forums and I've never found it on Google when searching so how have our forums been found?

    edit: scrub that last bit, I've just googled and its suddenly appeared in 2nd place, not the case the other day
    If your forum is for a private group and you don't want/need it to be indexed then set all forums/categories to member only and turn off indexing in the forum manager.

    For a totally private forum password protect your public_html folder and make sure that members are the only ones with the password

    Leave a comment:


  • AdrianH
    replied
    Q+A is available in vB ACP Human Verification or with the mod NO Spam.

    If you want to add questions to your registration you do that with Custom Profile Fields and set the questions to "Required". You can then ask prospective users your questions and the answers are shown on the notification email you receive.

    Leave a comment:


  • Mary303
    replied
    Another chime in - human verification was AWESOME ... and then it wasn't. They're baaaack ... I'll try the stuff in this thread. The time when Human Verification worked was so sweet I want to go back to that!

    The spammers don't get access to my forums at all, because I personally manually tiresomely send every new registratant an email asking an innocuous question related to the hobby the site features, and only approve those who respond. (Except registrants deleted forthwith based on illogical usernames.) However, some legit hobbyists don't register with their real email address and never respond, and I know I miss approving some number of them.

    I use email verification and human verification to cut down on the registrants I must mess with. Bad registrants are added to the ban list. This site http://www.theodora.com/country_digraphs.html helps the ban list stop registrations from locations where the hobby does not exist.

    Daily I have far more spam registrations than real ones.

    It would be wonderful if registrants could be presented with the simple question that could have broad-ranging answers while they are registering, and I could see the answers (or part) on the "Moderate Users" page along with their email addys. That would make manual approval just as effective, less time-consuming, faster and more effective for the real users, and I wouldn't be missing real hobbyists who don't share real emails.

    I saw how to add the profile field ... where is the random Q&A located? How does one accept different legit answers? thx!

    I agree jail time is too good for spam senders who are a black hole for time and resources gaurding against them.

    Leave a comment:


  • Steve Machol
    replied
    Originally posted by beishe8 View Post
    Please explain its use a little further with examples in the future releases.
    That's covered in this link: How to Reduce Spam and Registration Bots

    Leave a comment:


  • Steveir
    replied
    thanks for the Q&A advice which I've just implemented. We are a small local group who meet up regulary so the forum is only open to these people. Just spoken to the membership coordinator and we've set up a code to input as an answer that gets emailed to new members before they sign up.

    What I don't understand is, we have no link from our main site to the forums and I've never found it on Google when searching so how have our forums been found?

    edit: scrub that last bit, I've just googled and its suddenly appeared in 2nd place, not the case the other day

    Leave a comment:


  • AdrianH
    replied
    Originally posted by beishe8 View Post
    Please explain its use a little further with examples in the future releases.
    The Q+A system is available in the Human Verification section of your ACP.

    Set questions and answers to be given by new registrants, this is explained in the vB manual.

    Leave a comment:


  • AdrianH
    replied
    Not wanting to tempt fate but so far these bots have failed to gain access to my forum.

    I use the image captcha with random font/size/color/slant , this is combined with No Spam http://www.vbulletin.org/forum/showthread.php?t=183329 and a large selection of questions,plus "Stop the Registration bots" http://www.vbulletin.org/forum/showthread.php?t=183917 with its hidden fields,(make sure that you change the codes!!!!)

    I added some extra required fields to my registration page,1) because I wanted to get the information and 2)many of the humans seeding the forums do not speak english/other languages,they copy paste info from a script and do not know what to do with lots of extra boxes.

    For those manual spammers (I have only had 2 in the last month) I use One Touch Ban and Clean up http://www.vbulletin.org/forum/showthread.php?t=183917

    Setting registration to email verification at least stops many from coming back ,and depending on your forum useage you can ban whole IP ranges and email domains.

    Leave a comment:


  • beishe8
    replied
    Originally posted by Steve Machol View Post
    I also recommend using the Q&A profile field option.
    Please explain its use a little further with examples in the future releases.

    Leave a comment:


  • Steve Machol
    replied
    I also recommend using the Q&A profile field option.

    Leave a comment:


  • Dozman
    replied
    I also had Spammers and Porns posting with 3.6.8 and I just upgraded to 3.7.3 and saw Steve post about reCaptcha. I have register and added it to my site and then beefed up some setting. I have mine that when they post. I have to confirm it first. Then if I see something that look wrong. I had there IP and name to the Ban list.

    Leave a comment:


  • beishe8
    replied
    Originally posted by beishe8 View Post
    I'll try it.
    Nospam is temporarily disabled.
    I'm using only Q&A with the harder to break option.
    So far I do not have any unwanted registrations.

    Thanks for the explanation,Freddie.

    Leave a comment:

widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Working...
X