Constant flood of spammers

[0xE9]

It happens with a lot of my own mybb forums, I've written a plugin to stop them but I guess if you got limited acp you can upload.

[davidmarker]

I believe recaptcha has been cracked aswell as captcha google it for a bit more info.

[Link]

I had installed a modification. To SMF, called "Are you human?", it had seemed to work. Basically it randomizes a question block. Question: Are you Human?, answers: Yes, No, Maybe, Wont tell you, I do not know. And a couple more and it would be randomized. It prevented alot of spambots.

[AceInfinity]

I had installed a modification. To SMF, called "Are you human?", it had seemed to work. Basically it randomizes a question block. Question: Are you Human?, answers: Yes, No, Maybe, Wont tell you, I do not know. And a couple more and it would be randomized. It prevented alot of spambots.

If that was the only question I'm sure it would be really easy to bypass. I could probably make something myself to do it in around 3-10 mins, depending on any time filter, and how it displays each question answer.

[Don Corleone]

Make sure you are using a multiple account detector. Also make sure to ban their IP's and not just their account's.

[AceInfinity]

Make sure you are using a multiple account detector. Also make sure to ban their IP's and not just their account's.

You don't need a multiple account detector on most forum software. It's become a forum stadard for most now. MyBB records logged IP addresses, and if you ban the IP it will ban/reject any newer registration requests from that IP. For people using AOL though, you might not have as much luck unless you use a ban hostmask (wildcard). Something like 77.77.77.*?

It would be common sense not to ban something like *.*... or the full *.*.*.*... You'll only end up banning everyone with an IP address in any range.

You'll also want to try and deny access from proxies, and there's various methods for that as well. You can get a list of known proxy servers, for example, and disallow that from a server based level, provided you have that kind of access.

Since usually only the last digit changes. But you only use that method when it's needed and you know you have to take that action.

Some take precaution to restrict access to an entire IP range, especially in 3rd world countries where spammers are more common like India, Pakistan, etc...

[Relapse]

Isn't much more that you can do, maybe try a few other things. Like blocking a whole IP range where most of the spam comes from.

Yes, I did this on my site. It did work a small bit, but not really.