Posts: 215
Threads: 19
Joined: May 2011
Reputation:
13
Ok so basically ALL my forums are mybb. There seems to now be a constant stream of spammers registering regardless of the captcha protection. They seem to spend quite some time on the registration page.
So what I'm wondering is there seem to be some sort of ajax script that when I unfocus the captcha textbox it tells me if I've typed the captcha correctly without having to actually post the page, thus if I get it wrong it tells me and doesn't generate a new image so I can try again.
Is it possible the spambots are using this to bruteforce the captcha without having to post the whole forum or is there some sort of limit with the amount of times the ajax script tells you it's wrong before you get a new captcha?
Need website or forum help?
![[Image: logo.png]](http://ziesweb.com/images/logo.png)
Posts: 1,778
Threads: 163
Joined: Jun 2007
Reputation:
218
Consider StopForumSpam plugin too.
I am here to rescue you.
This is Support Forums not Support PMs. Do not PM me for support unless it's private and site related.
Posts: 644
Threads: 16
Joined: Oct 2009
Reputation:
43
Remember we have a forum software section.
I suggest more moderators, you can't always rely on scripts.
Posts: 603
Threads: 27
Joined: Oct 2009
Reputation:
2
I have captchas, custom sign up questions and email verification. They manage to sign up, and attempt to post. That's when they're perma-deleted. I delete accounts, not ban.
Posts: 5,793
Threads: 268
Joined: Sep 2010
Reputation:
85
07-10-2011, 06:07 AM
(This post was last modified: 07-10-2011, 06:09 AM by AceInfinity.)
If you use sign up questions, they are a waste of space on your site unless you change all of the defaults and you do NOT use any mathematical equations for questions. Bots will recognize the defaults, and they will also be able to solve string algorithms in the form of math equations.
Hmm... I'm going to look into that StopForumSpam for my forum as well though. I know SF here keeps getting that same old IT tech spammer once in a while, but i'm glad we don't have that problem (yet). I personally haven't seen barely any spammers at all on our forum. Maybe around 5 in total, since the time it's been running. Pretty decent.
I go to Fragma's TalkGFX though, and I usually notice the same spam on his forum on my own as well. There were similarities between the spam on Solidus' RandomForum and mine as well. Some bot's are finding a way through, unless these are just regular people. Some seemed realistic though, so it may be, and in that case you can't stop that kind of spam lol. You can only waste more of their time by taking the precautions of getting them to go through the "human" tests.
Posts: 644
Threads: 16
Joined: Oct 2009
Reputation:
43
I don't know how bots find your site.
At RF, I have some security measures installed, and there are still some bots. At GFXF, I have no security, but very rarely there are bots. Lucky I guess.
Posts: 63
Threads: 3
Joined: May 2011
This pisses me off to, all I did was ip ban them it stopped them for a bit, but they keep coming back!
![[Image: di-Y0TG.png]](http://gfxf.net/di-Y0TG.png)
