Why doesnt question and answer at registration stop spam registrations.

[mike2902]

I have question and answer set for new registrations. The questions consists of me telling new members to send a message to me via the "contact us" and request the answer to complete registration. So there is no way these spammers are getting the answer correct. So why do I have 30 new spam registrations each day? I am putting them into moderation and deleting all of them, but shouldnt they be stopped from completing registration with out the correct answer? Im running 3.8.7

[JacquiiDesigns]

Limiting Spammers:

For 3.7.x - 3.8.x series vBulletin - use the following and it should knock out all automated spambots. The only spammers you'd see are those who register manually. Great thing is - the bulk of spammers are spambots - so this combination of modifications (in this order of installation) should nip the problem directly in the bud:

1. NoSpam!
   A must-have that vBulletin based it's question/answer functionality off of - only NoSpam! works much better
   
   
2. ragtek Botscout Register Check
   This mod is graveyarded on vB.org due to drama - but still works fine. There are no security concerns to worry about. It checks new users IP address against the botscout.com anti-spam database
   
   
3. Cyb - Advanced Permissions Based on Post Count
   This is not necessarily anti-spam -- but with the correct permissions set - new users (with post count of 10 or below or whatever you amount you set via AdminCP) will not be able to post links in threads/posts/pms/etc... So this mod will block users who register manually from spamming their links. It will, however, not block said users from posting links on their profile ARG - profile spam is a sneaky bit of madness...

HTH

J.

[manning]

It doesnt stop them because they have scripting that is bypassing the entire register process - least thats my best guess.

Vbulletin should have a fix for this - its getting really bad on one of my forums too the last few months. I have installed a few mods and it really slows them down, but a few still manage to get through. Its very annoying.

I use NO SPAM linked above in addition to this > Stop the Registration Bots and it sends me an email every time it denies a registration - a good deal of these dang bots complete the form in 0 seconds - no way they are even looking at it - they are pretty much inserting straight to the db some how.

Another mod I suggest is the SM Limit Editing Signature Before X Posts - this prevents anyone from having access to the signature until they have X number of post. Least when they do get through they wont be able to do anything with the account!

[Simon Lloyd]

The ones that get through will be human!, they cant "inject in to the database" as that would imply a huge security flaw.

I agree it is annoying but you'll not stop paid human spammers. There are some scripts that read q&a and keep trying known words like "What colour is the sky?" they'll recognise that phrase and the script will roll through colours, you'd have to make the q&a more complicated and require email confirmation too, that will cut many of your spammers, then use something like "bad behaviour" or "stop forum spam".

Lastly have new registrations go in to moderation and access to only one welcome forum for posting, now you've narrowed it down to one forum which makes it easier to clean-up anad you or staff can vet each and every new member - hey presto no spam!

It all boils down to how much trouble you want to go to in order to stop them.

[Pandemikk]

Originally Posted by manning

It doesnt stop them because they have scripting that is bypassing the entire register process - least thats my best guess.

Lol no. That's impossible.


They get past Q&A either because a human is registering or has submitted the answer to the automated registration, or because the spambot is able to answer your question since it's simple enough.

[manning]

Originally Posted by Pandemikk

Lol no. That's impossible.


They get past Q&A either because a human is registering or has submitted the answer to the automated registration, or because the spambot is able to answer your question since it's simple enough.

LOL, right a real human fills in the entire form and answers my question plus fills out captcha and then clicks submit when the submit button is disabled because its on a timer.... LMAO! Many of these bots submit the form in 0 seconds and are denied registration - that mod keeps 90% of them out, but other bots are getting through and some are even bypassing the admin approval and showing up as members immediately.

These are NOT human spammers!

vBulletin has issues, period!

[kh99]

Originally Posted by manning

...vBulletin has issues, period!

Well, there are many vb installations but not many people complaining about that problem, so that would seem to point to a non-vb issue. If it's true that new users are really showing up without going through registration then it's more likely there's a security problem elsewhere.


I'm assuming you've checked that they really are new users? I've seen users register then not post for quite a while.

[manning]

Originally Posted by kh99

Well, there are many vb installations but not many people complaining about that problem, so that would seem to point to a non-vb issue. If it's true that new users are really showing up without going through registration then it's more likely there's a security problem elsewhere.


I'm assuming you've checked that they really are new users? I've seen users register then not post for quite a while.

Yes, the forum is running the outdated version 3.6.9, but I'm not in a position to pay the upgrade hijack fee.

[kh99]

Originally Posted by manning

Yes, the forum is running the outdated version 3.6.9, but I'm not in a position to pay the upgrade hijack fee.

I don't know much about the licensing terms, but if you own a vb3 license doesn't that allow you to download the latest vb3 version?

[setishock]

Originally Posted by mike2902

I have question and answer set for new registrations. The questions consists of me telling new members to send a message to me via the "contact us" and request the answer to complete registration. So there is no way these spammers are getting the answer correct. So why do I have 30 new spam registrations each day? I am putting them into moderation and deleting all of them, but shouldnt they be stopped from completing registration with out the correct answer? Im running 3.8.7

That's self-defeating. One of those requests was a spammer who in turn circulated the correct answer supplied by you to his cohorts.