SRL Archive - Dear Staff..

Admins…
Can we Please get rid of these darn spammers….. this is getting quite out of hand….. it is getting to the point where you cannot find the legitimate threads….. and this is happenning to progressively more of our forums…..we are in need of a serious thread cleaning I am afraid…..

Suggestion: New members cannot post for a week or something…

Note: I wanted to send this privately but there seems to be no one on at the moment so I figured this post might be the quickest way to get the word out.

My goodness this wasnt posted 2 entire minutes and someone posted another spam

yeha i second this motion

A week is not necessary, in fact it will only result in more leechers, so a lose lose situation.

Maybe 24 hours will be better? Give them time to read over rules and FAQ and see how the forum works…

Either way I think there should be a way to prevent these spam guys

Yeah its getting very annoying.
Don't know what can be done, but would be nice to be free of them.

third-ed. its ridiculous. the next person I see selling louis vuitton bags…

Iiiiin a good way.

i have an idea. incorporate a CAPTCHA + 2 security questions that can rotate through a select set.

Problem Solved :spongebob:

The staff been working on it, it's just that they create new users right when the other previous account is banned. Although a bit of solutions out there for this issue & probably are being discussed in the upper-boards.

It's because this forum's captcha like everything else is very outdated.. Forums needs an update.. a new skin :S

No the staff has been working on it since 2 years ago. I had a green name on my old account when I posted this exploit. I can't remember the username or password but the account is very old.

The captcha is broken with just google chrome alone! I cannot find my old post about it but a simba script can break the captcha in less than 5 seconds. Yes I know it's ridiculous.

Replication from my old post when I had a green name:

1. Have Simba open Google Chrome with the registration link. Something like register.php or something.
2. Have the script right click all 8 captcha images and open them in new tabs..
3. Have the script iterate through each tab. Whichever tab has continue to registration, use that tab.
4. Have the script fill in user info. Can be any old crap or whatever. I can't remember if email validation is needed.
5. If email validation is actually needed, it isn't hard to have the script use mailinator or similar websites.
6. Have the script spam threads as much as you wish.
7. Please please don't use the instructions I posted above. It's just to show how easy this site is to break through.

Imagine all the other stuff you can do <.<.. Anyway my 2 cents: Don't use stupid word captchas.. The captcha breakers out there can destroy those word ones unless they're really really really good! It's just this image stuff well.. it's not that good either. You need a random question and answer thing. Something like: How many legs does a spider have <– insert box here for answer which would be 8. Or how many legs does a squid have or octopus or something! Anything! Just no silly images or write the word above in the below box crap.

Btw. The Registration php captcha only has 40 images. So.. scripts can learn them :o

I want some Louis Vaton hand bags though…

From: Brandon
It's because this forum's captcha like everything else is very outdated.. Forums needs an update.. a new skin :S

No the staff has been working on it since 2 years ago. I had a green name on my old account when I posted this exploit. I can't remember the username or password but the account is very old.

The captcha is broken with just google chrome alone! I cannot find my old post about it but a simba script can break the captcha in less than 5 seconds. Yes I know it's ridiculous.

Replication from my old post when I had a green name:

*deleted*

Imagine all the other stuff you can do <.<.. Anyway my 2 cents: Don't use stupid word captchas.. The captcha breakers out there can destroy those word ones unless they're really really really good!

Btw. The Registration php captcha only has 40 images. So.. scripts can learn them :o

Ha definitely dont post instructions!!!

From: -Benny
Ha definitely dont post instructions!!!

Well the chances of someone being able to do it well.. I wouldn't put it past anyone but it's still pretty slim. I remember posting it ages! ago so I guess it wouldn't make a difference now? Iunno if a mod doesn't like my post then they can delete it or just msg me to delete it. It's just an example of how easy it is to break.

Meh I like to post all the cool haxor stuffs. Besides these bots are already doing it so me posting it shouldn't make much diff I think..

We had talk about this like every year, and we would definitly like to see them go away :)
http://villavu.com/forum/showthread.php?t=67037

I like the idea of the randomised question upon sign-up
I think we should also make it mandatory for a new user to have read the rules and FAQ threads prior to being able to post. I know this is possible as I have seen it done on other vBulletin forums.

We have a lot of anti-spam implemented into registration. Sadly, the any additions we make are quickly overcome by the bots (kind of like Jagex and us ;)). The best thing to do is report the post so a staff member can take a appropriate action.

i agree, i dont not care about good clean fresh ccv and his hacking skills

From: Coh3n
(kind of like Jagex and us ;)).

perfectly said. they'll just figure out a way around it just be careful what you click, and report post. would be nice to see them go away though.

From: Coh3n
We have a lot of anti-spam implemented into registration. Sadly, the any additions we make are quickly overcome by the bots (kind of like Jagex and us ;)). The best thing to do is report the post so a staff member can take a appropriate action.

Good luck with that.. It isn't true. A question and answer will stop almost all of it. They'd have to work sooo much harder to get around that. We have NO antispam implemented. A simple image overcome by google tabs isn't anything at all. It wouldn't hurt to put 100 question-answer captchas. 100 questions would be more than enough to fend off the majority. It'd take so long for them to adapt to each and every question as there really isn't a way to answer it perfectly via a script/bot or w/e. A combination of both would be difficult. Imagine a bot opening 100 tabs just to spam.. That'd be ridiculous.

Also jagex could stop us.. just they care for money is all. A simple bar has us down for 2 weeks already. Exactly 14 days by monday/tuesday (timezone crap).

Check out homepage and see how many posts are legit. That guy isn't banned yet. By the time an admin gets around to it, the mainpage has like 7 spam posts. Multiple spam bots will screw us. It'll have 0 legit posts.

No one wants to see credit cards and stupid cowboys live on the homepage. It has to be fixed.. Reporting isn't enough.

I think the spammer heard us…

Tonight it will be spammy with a 100% chance of falling credit cards, debit cards, and louis vuitton bags. Be careful out there folks, its going to be a wild storm.


Seriously???


PS. it appears Islam has been banned on SRL…

^ Damn, that's just insane
Luckly they are dealt with pretty fast.

Guys Guys Guys… There is a simple solution to all of this… ALLOW ME TO USE THE BAN HAMMER!!!

Jk, just keep something simple, like he has to have 15 ligit posts in the general / tutorial sections before allowing them full access.

Like me Ideas?!?!?

Would it be possible to limit the number of new threads per hour/day for new users, or even basic users (AKA not junior members+)?

Honestly, most people have no need to post a lot of entirely new threads. At least as a temporary fix, I think this would somewhat mitigate the problem, if it's easy to implement.

Don't worry guys, I'm personally on spam watch for the next 6 hours ;) They may create a single thread, but their accounts won't last long ;)

From: Coh3n
We have a lot of anti-spam implemented into registration. Sadly, the any additions we make are quickly overcome by the bots (kind of like Jagex and us ;)). The best thing to do is report the post so a staff member can take a appropriate action.

That's what we have been doing. And threads/posts that have been reported more than a week ago are still there!

Why don't those threads get deleted as well…

From: Neznam
Why don't those threads get deleted as well…

Limitation of vB I believe. Although from this post (SSRL and above), they were trying to do something as you just mentioned (obviously not working :p)

On one site I used to visit, they had this confirmation thing were you needed to make 10 good posts and then a mod had to go through the posts and approve your membership. If the staff is a problem you could choose a few active users each month to do the job, and they would resign whenever they will be inactive.
A simple way would be to limit users to the introductions forum until someone approves them.

it isn't hard to block them, also implementing the spammers database checking when registration happens would help too..

recaptcha from google, spammers database, random stupid questions that even say the answer at the end.. which humans can easily read but bots derp on it.. etc

From: litoris
On one site I used to visit, they had this confirmation thing were you needed to make 10 good posts and then a mod had to go through the posts and approve your membership. If the staff is a problem you could choose a few active users each month to do the job, and they would resign whenever they will be inactive.
A simple way would be to limit users to the introductions forum until someone approves them.

That's a built in of IPB, might have been what you were on.. I'm sure other forums have it.

nobody can see the posts except to a mod they see "queued post" and they can approve it, after X amount of approved posts, different things can become available to them.. there can be posting in certain sections at 10 approved posts, posting in others at 100 approved posts etc. (not really needed here, first 10 posts would be enough annoyance for mods to look over)

From: grats
it isn't hard to block them, also implementing the spammers database checking when registration happens would help too..

This has already been implemented and in effect for some time now. It's what caused the surge of spammers to die down a couple of months ago.

Good, well there's 1/&#8734; steps taken

honestly questions like "what is the websites name", "what color are senior members names" work very well

I have been trying to bump better posts to the top, but I also don't want to seem like I am spamming the fourms. Either way, we lose :(

I've already mentioned a number of solutions in different threads, but it comes down to the admins not seeing it as an issue.

xRumer, which is the biggest forum spambot, is used in coordination with 'pay for' captcha services.

You need an easy question and answer solution for registration (you can even put the answer clear as day). They scrape lists of forums with scrapebox/xRumer and automate it all, they won't check forum Q&A's to try and bust them.

Q&A afaik is an easy and sufficient solution.

From: smurg
I've already mentioned a number of solutions in different threads, but it comes down to the admins not seeing it as an issue.

Hopefully they reconsider it an issue as recently its becoming.

From: Coh3n
We have a lot of anti-spam implemented into registration. Sadly, the any additions we make are quickly overcome by the bots (kind of like Jagex and us ;)). The best thing to do is report the post so a staff member can take a appropriate action.

For everyone saying spam is a solved problem, please explain to me why I still get so much spam on my email accounts.

I'm open to new registration questions, and the spam is really pissing me off too, but everytime we implement something new, they come back after a few weeks. That and we're also using http://stopforumip.com IP block list which also actually blocks some legitimate users, which is just plain annoying.

We actually were rid of most spam bots for quite a while, it used to be much worse.

I'm open to solutions.

From: Wizzup?
For everyone saying spam is a solved problem, please explain to me why I still get so much spam on my email accounts.

I'm open to new registration questions, and the spam is really pissing me off too, but everytime we implement something new, they come back after a few weeks. That and we're also using http://stopforumip.com IP block list which also actually blocks some legitimate users, which is just plain annoying.

We actually were rid of most spam bots for quite a while, it used to be much worse.

I'm open to solutions.

Give some srl members+ the option to delete threads from users with less then 5(or 10) posts, or let them being moved to some special mod folder.

Hell, give members the option to suspend/ban people with under 5 posts.. If someone abuses it, take it away


As smurg and I said, honesty stupid Q and A, even one that says "put the word blah in the field" will take care of bots from what I've seen

From: Wizzup?
For everyone saying spam is a solved problem, please explain to me why I still get so much spam on my email accounts.

I'm open to new registration questions, and the spam is really pissing me off too, but everytime we implement something new, they come back after a few weeks. That and we're also using http://stopforumip.com IP block list which also actually blocks some legitimate users, which is just plain annoying.

We actually were rid of most spam bots for quite a while, it used to be much worse.

I'm open to solutions.

View my post on this thread.. Block right clicking on the registration page.. That's the first step to killing 50% of them.. After 4/8 incorrect images, block that IP for 15 minutes. Hackforums does these. ForumsExe has the random Q&A and it's ridiculously hard to break that in combination with the images. They'd literally have to gather each and every question and answer to it and put it in their bot.

Harry has Public Scripts Moderator rank. Maybe a spam blocker one for some members could work as well. Or a Forum protector rank or something. Iunno anything. Most of the above will rid a ton of them. Even if they come back, they won't hit hard. It'll be the one or two difficult try hard spam bots.

From: Brandon
Block right clicking on the registration page..

Requires JavaScript iirc, and thus can easily be circumvented.

From: Brandon

Harry has Public Scripts Moderator rank. Maybe a spam blocker one for some members could work as well. Or a Forum protector rank or something.

So essentially a global moderator rank? :p

From: Daniel
Requires JavaScript iirc, and thus can easily be circumvented.


So essentially a global moderator rank? :p

Nah no global. Ppl will ban eachother with that. Iunno if there is a way to just have it block spam posts or maybe we can have a minus button besides posts so that we can just hide them from ourselves only? Sorta like how we can hide the menus on the homepage. That'd help until admins get to it.

Even though the right click thing is javascript, you can make it so that if adblock plus or any javascript removers are enabled, the button to continue won't show.

I'm down to help out with some moderation, I mean i'm on here everyday so I don't mind clearing up some threads that spam bots have spammed

Just an idea, you could ask for people's gender on the registration form, and the default dropdown would be adbot, and you'd manually have to choose male or female. If the registration ends with adbot, autoban.

Alright… so when I create a new thread… it starts at like the bottom of the list- but these guys create their very first thread, it gets pushed to the top as a high priority thread?

Why not allow SRL members+ have some sort of vote on top of each thread to close it? That way if an admin isn't around the thread wont wreck the new posts. Not saying its a win-lose vote, more like 10 votes+ gap between close and dont close.
Just an idea…

From: Joe
Alright… so when I create a new thread… it starts at like the bottom of the list- but these guys create their very first thread, it gets pushed to the top as a high priority thread?

What? I am not quite sure I understand. Please explain :)

From: Joe

Why not allow SRL members+ have some sort of vote on top of each thread to close it? That way if an admin isn't around the thread wont wreck the new posts. Not saying its a win-lose vote, more like 10 votes+ gap between close and dont close.
Just an idea…

I assure you we, SSRL and above, are doing the very best we can to identify spam bots and removing their ability to make any further threads/posts. That is our duty, and moderators are then informed of our actions and delete their threads/posts from public view when they are online :)

Make a simple Q&A (with the answer in the question also).

Simple enough.

From: smurg
Make a simple Q&A (with the answer in the question also).

Simple enough.

A lot of the spam accounts are being registered by hand I'd be willing to bet as well.

A few Suggestion to the moderators.

Take out everything on the forum that Uniquely identifies what the site use as software to run the forum.



This is a dead give away to bots.

Make a custom registration page, there is too much info that is default to vBulletin that the bots search for on to identify what software the forum use, by this method alone you will be able to filter a lot off spam from bots. That is what they use to search for forums where they can spam.

From: Bam Bam
A lot of the spam accounts are being registered by hand I'd be willing to bet as well.

I doubt it.

Serious "black hats" don't do anything by hand. They most likely have virtual assistants managing the software for them. It's all automated.

You don't get 100k+ backlinks manually registering forums. And let me tell you, this louis vuitton handbag and viagra spam isn't the small fish either.

Until you have moderated on a forum, don't make threads asking for this kind of thing. It's not as easy as clicking a button. This happens on damn near every forum on the internet and it is very difficult to stop. You can make it harder for them, but if the spammer is skilled enough they can still do it no matter what you do. The best thing is to report it and ignore it.

ive got an idea, add "the random word is ______" (without the quotes) and put any word in there, in the rules. then when registering make the question what is the random word? that way people will have to read our rules before registering, and spam bots wont go looking for the rules to find the word.

third-ed. its ridiculous. the next person I see selling louis vuitton bags…

LMAOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

Which Chinese *** is selling Louis Vuitton bags on this site ?

Please link me to the ******…..

From: bolshak25
ive got an idea, add "the random word is ______" (without the quotes) and put any word in there, in the rules. then when registering make the question what is the random word? that way people will have to read our rules before registering, and spam bots wont go looking for the rules to find the word.

Would a normal registered user go looking in the rules for the random word either though? You'd have to direct them there or have the random word in the sign-up page. With the random word immediately visible you could write a script to crack that simply using SRL's text functions.

I think the idea of a very simple general knowledge/mathematical-based question is the best option. i.e. How many legs does a spider have (as Brandon suggested earlier).

I agree with others about the randomized question. Other forums I have been on use that method. Example: How many letters are in the word COIN? (hint: 2+2)

Simple but effective.

From: p1ng
Would a normal registered user go looking in the rules for the random word either though? You'd have to direct them there or have the random word in the sign-up page. With the random word immediately visible you could write a script to crack that simply using SRL's text functions.

I think the idea of a very simple general knowledge/mathematical-based question is the best option. i.e. How many legs does a spider have (as Brandon suggested earlier).

put on the registration page in bold you must read the rules before registering. that way they read the rules and if they havent they were supposed to

How about just restrict new users to the welcome section and have a mod who then allows access to the rest of the public forum after they write their welcome page?

The SRL Member Moderation for users with under 5 Posts sounds like the best solution for now 2 me.

Yeah i think somehow there should be maybe more mods

From: Wizzup?
For everyone saying spam is a solved problem, please explain to me why I still get so much spam on my email accounts.

I'm open to new registration questions, and the spam is really pissing me off too, but everytime we implement something new, they come back after a few weeks. That and we're also using http://stopforumip.com IP block list which also actually blocks some legitimate users, which is just plain annoying.

We actually were rid of most spam bots for quite a while, it used to be much worse.

I'm open to solutions.

Kind of funny, we against jagex, spammers against us lol :stirthepot:

From: Grihmm
Until you have moderated on a forum, don't make threads asking for this kind of thing. It's not as easy as clicking a button. This happens on damn near every forum on the internet and it is very difficult to stop. You can make it harder for them, but if the spammer is skilled enough they can still do it no matter what you do. The best thing is to report it and ignore it.

You're right, it takes 2 clicks (or just about).

On phpbb (I am unaware of how it works with vBulletin however), you go into a user's profile > moderate user > delete user and all posts.

Easy peasy.

I was on blackhat sites now for almost a year. There are many tools, software that will do this automated.

The best way to stop them is to do what I suggested.

This software use keywords you input to evaluate if a site is a forum and what type of forum it is. It is really easy to harvest a list through google about all websites related to the terms you specify. If my suggestion is implemented, you will get rid of the majority of this bots, obviously, those that already succeeded in finding this site will have it in their database, so for them you will have to do something else. Ip banning is not really a solution, as most blakhatters run`s off vpn or dedicated servers with a proxy list or proxy service they buy, and believe me, they spend a tremendous amount of money to have these tools and it works.

But first to get a list they need to do a search which is also automated by specifying certain keywords and key phrases. Once you have changed what I suggested, you will have to let google and all other search engines re-index the site so that the cache they have of the site will be update otherwise they will find you anyway as the cache still has the old site. This spam is actually not done by a hardcore blackhatter that has been long in the game of making money,

This is done by someone who just recently started using blackhat methods.

For a hardcore blackhatter it is all about building a long time relationship with his audience as he wants repeat customers and not a once off shot in the dark, this is like using a shotgun and hoping you hit something, the hardcore blackhatter will visit all their targeted sites, evaluate the audience and then target them with spam that is geared towards the type of audience they wish to target. This site is dedicated to gaming and programming, the audience here is interested in these subjects, to bombard them with Viagra or handbags is a waste of time, the vcc and credit related topics might work, but if this was a truly dedicated blackhatter, he would have focused on things related to your interests like gaming, computer gear, software.

Do what I suggested and you will stop the most off them, you will also have to include the membership list for the site to make that unique as well, front page,registration page, membership list, this is the three pages that gets searched for key phrases to use in harvesting forums.

Anti spams won't stop all spam. There are services that solve captcha by humans, so no captcha can stop bots. Best way to stop is to have a new member application section. All new members have to make a post in specified format. Then some of the trusted members check these application and approve them. Like RSCA before hacking. We have to apply with a sample code to get accepted. Here no sample code needed, some some basic info will do.

From: !_1337_!
i have an idea. incorporate a CAPTCHA

Problem Solved :spongebob:

not a bad idea tbh.

my suggestion: have ranks within the forum that allow a posting mechansim accordingly. the newer guys have to wait 30s before posting, high ranks can post right away.
lol i know that may sound ridiculous but just an idea.

dont know if this has been suggested but using a plugin such as stop forum spam will more than likely stop most of it.

From: VastlySuperior
I was on blackhat sites now for almost a year. There are many tools, software that will do this automated.

The best way to stop them is to do what I suggested.

This software use keywords you input to evaluate if a site is a forum and what type of forum it is. It is really easy to harvest a list through google about all websites related to the terms you specify. If my suggestion is implemented, you will get rid of the majority of this bots, obviously, those that already succeeded in finding this site will have it in their database, so for them you will have to do something else. Ip banning is not really a solution, as most blakhatters run`s off vpn or dedicated servers with a proxy list or proxy service they buy, and believe me, they spend a tremendous amount of money to have these tools and it works.

But first to get a list they need to do a search which is also automated by specifying certain keywords and key phrases. Once you have changed what I suggested, you will have to let google and all other search engines re-index the site so that the cache they have of the site will be update otherwise they will find you anyway as the cache still has the old site. This spam is actually not done by a hardcore blackhatter that has been long in the game of making money,

This is done by someone who just recently started using blackhat methods.

For a hardcore blackhatter it is all about building a long time relationship with his audience as he wants repeat customers and not a once off shot in the dark, this is like using a shotgun and hoping you hit something, the hardcore blackhatter will visit all their targeted sites, evaluate the audience and then target them with spam that is geared towards the type of audience they wish to target. This site is dedicated to gaming and programming, the audience here is interested in these subjects, to bombard them with Viagra or handbags is a waste of time, the vcc and credit related topics might work, but if this was a truly dedicated blackhatter, he would have focused on things related to your interests like gaming, computer gear, software.

Do what I suggested and you will stop the most off them, you will also have to include the membership list for the site to make that unique as well, front page,registration page, membership list, this is the three pages that gets searched for key phrases to use in harvesting forums.

LOL. Ya, editing out the vBulletin sig with version number would help, but these aren't targeted.

They are spamming backlinks to any possible forum to boost their standings in the SERPs.

Simple Q&A would suffice like said before.

From: -Benny
Yeah i think somehow there should be maybe more mods

Trust me, there are more than you think…

From: smurg
LOL. Ya, editing out the vBulletin sig with version number would help, but these aren't targeted.

They are spamming backlinks to any possible forum to boost their standings in the SERPs.

Simple Q&A would suffice like said before.

To find backlinks, they need to search for for certain criteria, all the pages I have named need to be changed to stop that. You can`t find something if it is not the same as the criteria you are looking for.

From: Sir Ducksworthy
The SRL Member Moderation for users with under 5 Posts sounds like the best solution for now 2 me.

Yea, I really think that would be the easiest..

From: Grihmm
Until you have moderated on a forum, don't make threads asking for this kind of thing. It's not as easy as clicking a button. This happens on damn near every forum on the internet and it is very difficult to stop. You can make it harder for them, but if the spammer is skilled enough they can still do it no matter what you do. The best thing is to report it and ignore it.

I'm a mod & admin of a few forums, not hard at all.

<SCRIPT language=JavaScript>
	var message = "function disabled"; 
	function rtclickcheck(keyp){ if (navigator.appName == "Netscape" && keyp.which == 3){ 	alert(message); return false; } 
	if (navigator.appVersion.indexOf("MSIE") != -1 && event.button == 2) { 	alert(message); 	return false; } } 
	document.onmousedown = rtclickcheck;
</SCRIPT>

some code I just found on like 20 google pages, lol.. works for blocking right click in firefox, chrome and IE haven't tested others but I assume they work

however you can block scripts with addons, and IE does it by default..


also the Q&A look like a big thumps up from everyone, and I like the forum protector idea. Along with what IPB does (the 5 posts or so requiring approval etc)

Javascript isn't serverside. You can't stop anyone or anything with javascript. It has a horrible design and is not secure at all.

Bot can browse with JS disabled. I suggest that you make JS required to do stuff on the page, so that they need to have JS on. They can't right click that way. I'm not even sure whether that's possible actually…

From: litoris
Bot can browse with JS disabled. I suggest that you make JS required to do stuff on the page, so that they need to have JS on. They can't right click that way. I'm not even sure whether that's possible actually…

Bots don't use java script. They use HTTP POST method to submit data. There is no way we can force the use of java script as all communications done with POST or GET.

Most bots won't load images on web page, so checking if user loads image is one way to detect bots, but that need custom coding.

From: litoris
Just an idea, you could ask for people's gender on the registration form, and the default dropdown would be adbot, and you'd manually have to choose male or female. If the registration ends with adbot, autoban.

Not sure if anyone's seen this:redface:

From: litoris
Not sure if anyone's seen this:redface:

That is a good suggestion from litoris, but not all bots will use the dropdown list, they can just randomly choose a gender without using the dropdown and give that as input to the field, most off them anyway works in that manner to just assign a random name,username, gender whatever….

To harvest forums is easy, just use scrapebox, this software is very powerful, if you know what you are doing you can harvest millions of forum or other pages which you target in minutes.

To auto post on forums, there is so many off them, I`ll just show you a few, hxxp://www.autoforumposter.com/
Instadigi
xrumer
SeNuke

All these software works basically on the same way, if they can now what software you are using on the forum the program will do all the rest automatically, they just have to fill out what the message should be and the software do the rest.

But first they need to know what software you are using for the site, so remove the giveaways to what software is running the site, and it don`t help to change just that, as that is not all they use, they use terms that is used commonly by these 3 pages I had mentioned, you don`t have to have in smf or vbulletin or whatever, they only search for terms that is always found on the default pages to harvest it and they know what software you are using and bam, they spam.

It might be a bit off work but it will pay off in the long run. But if you want to know how to stop the spam, contact the blackhat forum moderators and ask them what they use to stop spam, because believe me, the forums I was on had NO spam. So there must be a way to protect your forum from spam. that works well.

From: masterBB
Javascript isn't serverside. You can't stop anyone or anything with javascript. It has a horrible design and is not secure at all.

you can't stop right clicking serverside

From: grats
you can't stop right clicking serverside

I am aware, it is the way the web was designed. It is bad, but you can't stop people from right clicking stuff. They also don't right click afaik anyway. They don't use a browser at all.

From: VastlySuperior
To find backlinks, they need to search for for certain criteria, all the pages I have named need to be changed to stop that. You can`t find something if it is not the same as the criteria you are looking for.

From this post, you obviously don't know what backlinks are.

And there's an array of search terms they use to find forums, it's not just searching "vBulletin". How about "showthread.php?p=" would find villavu.

From: smurg
From this post, you obviously don't know what backlinks are.

And there's an array of search terms they use to find forums, it's not just searching "vBulletin". How about "showthread.php?p=" would find villavu.

You must show me where in google you will find villavu using that term please, which page?

From: VastlySuperior
You must show me where in google you will find villavu using that term please, which page?

Probably between page 1000 and page 1000000+, not going to search for it myself. But a spider would have no problems with it.

From: masterBB
Probably between page 1000 and page 1000000+, not going to search for it myself. But a spider would have no problems with it.

Not even. Say they are looking for a specific group of people, like say runescape botters who use a black market or something.

I ran a search for runescape botting market showthread.php?

We are the very first result. :unsure:

aaand proof: https://www.google.com/webhp?sourceid=chrome-instant&ie=UTF-8&ion=1#hl=en&sclient=psy-ab&q=runescape+botting+market+showthread.php%3F&oq=runescape+botting+market+showthread.php%3F&gs_l=hp.3...9600.10371.2.10578.7.7.0.0.0.3.138.705.5j2.7.0...0.0...1c.vDgS33yL1UY&pbx=1&bav=on.2,or.r_gc.r_pw.r_cp.r_qf.,cf.osb&fp=2733a454e9585cf4&ion=1&biw=1600&bih=794

I've enabled the ReCAPTCHA registration filter and the Typepad spam filter (for users with postcount < 5)

Hope this helps.

We will probably get rid of most if not all spam bots. Thanks!

From: Silent SPY
Not even. Say they are looking for a specific group of people, like say runescape botters who use a black market or something.

I ran a search for runescape botting market showthread.php?

We are the very first result. :unsure:

aaand proof: https://www.google.com/webhp?sourceid=chrome-instant&ie=UTF-8&ion=1#hl=en&sclient=psy-ab&q=runescape+botting+market+showthread.php%3F&oq=runescape+botting+market+showthread.php%3F&gs_l=hp.3...9600.10371.2.10578.7.7.0.0.0.3.138.705.5j2.7.0...0.0...1c.vDgS33yL1UY&pbx=1&bav=on.2,or.r_gc.r_pw.r_cp.r_qf.,cf.osb&fp=2733a454e9585cf4&ion=1&biw=1600&bih=794

In fact, this thread is the very first result :D

From: wizzup?
i've enabled the recaptcha registration filter and the typepad spam filter (for users with postcount < 5)

hope this helps.

thank you sooo much!

From: footballjds
thank you sooo much!

We'll have to see how much this helped. I've seen a few bots, but their threads have been moderated by the automated system I think. Which is nice. Staff still sees them, but the rest doesn't.

That's cool, I like the queued posts or "type spam filter" as vbulletin calls it, that is a good method of "mods approving every account" type of deal

Massive ammounts of bots thismorning. Now, I see next to none. Nice job!

I meant that it is impossible to stop the spammer, not the account. They can always create more accounts.

And my post referred to creating threads arbitrarily demanding things of staff, not discussing solutions like the thread turned in to.

From: VastlySuperior
You must show me where in google you will find villavu using that term please, which page?

Stop posting before you stop and think for a few. Scrapebox can scrape hundreds of thousands of keywords from various initial sources and then append all your different forum signatures to those keywords.

So if someone scraped starting with game, runescape, etc you can easily get more detailed search terms.

And then you get something like this "runescape simba "showthread.php?p=""

And we're on the first page.

From: Wizzup?
I've enabled the ReCAPTCHA registration filter and the Typepad spam filter (for users with postcount < 5)

Hope this helps.

ReCAPTCHA won't do much, most xRumer users use premium captcha services, such as deathbycaptcha, which employs probably third world employees (combined with OCR) to solve captchas for you for 0.139 cents each.

Hopefully the second solution works.

From: Wizzup?
I've enabled the ReCAPTCHA registration filter and the Typepad spam filter (for users with postcount < 5)

Hope this helps.

Thanks :). I hope it helps too.

From: smurg
ReCAPTCHA won't do much, most xRumer users use premium captcha services, such as deathbycaptcha, which employs probably third world employees (combined with OCR) to solve captchas for you for 0.139 cents each.

Hopefully the second solution works.

The second seems to mark most threads as spam (this leaving a moderator to approve them before normal users can see them), so for now I'm happy.

From: Wizzup?
The second seems to mark most threads as spam (this leaving a moderator to approve them before normal users can see them), so for now I'm happy.

I'm down to help out moderate :P I'm floating around this etherspace enough haha

From: -Benny
I'm down to help out moderate :P I'm floating around this etherspace enough haha

We have plenty lovely mods <3
And I'm sure expressing your willingness to help out, while appreciated, won't go too far…

From: footballjds
We have plenty lovely mods <3
And I'm sure expressing your willingness to help out, while appreciated, won't go too far…

Yeah I know bud, its all good

From: abu_jwka
A week is not necessary, in fact it will only result in more leechers, so a lose lose situation.

Maybe 24 hours will be better? Give them time to read over rules and FAQ and see how the forum works…

How about a captcha. People hate those and people will quit posting so frequently for no reason if they have to enter those in.

From: L00PH0LE
How about a captcha. People hate those and people will quit posting so frequently for no reason if they have to enter those in.

Read the thread before you post.

Bah I was wondering who was moderating the Spam threads. I hate moderate threads. I think it was only moderating about 1/4 to 1/2 of the Spam bot threads. Judging by what I had to delete this morning. Move to Dear staff as I think this thread fits better there.

From: NKN
Read the thread before you post.

Do you always tediously go through every single post before you voice your opinion?

From: L00PH0LE
Do you always tediously go through every single post before you voice your opinion?

Nope, but it makes sense to at least do a 5 second search to see if anyone else posted the same thing.

I Check at least the OP(Original Post) and the last page.

From: L00PH0LE
Do you always tediously go through every single post before you voice your opinion?

No, but do I (and you should too) quickly skim through and get the jist convo on every page which takes 15 seconds per page? yes..
especially if you're interested and have something to say.

From: Wizzup?
I've enabled the ReCAPTCHA registration filter and the Typepad spam filter (for users with postcount < 5) Hope this helps.

From: smurg
Stop posting before you stop and think for a few. Scrapebox can scrape hundreds of thousands of keywords from various initial sources and then append all your different forum signatures to those keywords.

So if someone scraped starting with game, runescape, etc you can easily get more detailed search terms.

And then you get something like this "runescape simba "showthread.php?p=""
And we're on the first page.

ReCAPTCHA won't do much, most xRumer users use premium captcha services, such as deathbycaptcha, which employs probably third world employees (combined with OCR) to solve captchas for you for 0.139 cents each. Hopefully the second solution works.

From: L00PH0LE
How about a captcha. People hate those and people will quit posting so frequently for no reason if they have to enter those in.

From: L00PH0LE
Do you always tediously go through every single post before you voice your opinion?

lol if you would have read a few posts above yours you'd have seen those 2 posts talking about it. :p Hopefully this will help stop the spam bots, sure there will always be some that slip threw but seriously at least there wont be like 10 ads on the first page of new posts. ugh spam bot