vBulletin Security Concerns

[TOMC28]

Please give me your advise.

I have a fairly small site with <100 users. I've been having people sign up at my site every day with gmail accounts. They then wait a few hours, then start posting garbage. Interestingly enough.....the stuff they post gets hit a TON of times? I don't understand what these guys are up-to?

Then I BAN them. I've also now changed the registration so I have to moderate/approve members.

Once Banned...Why am I seeing these people signed in again???? They aren't posting any longer....but we do see them signed in??? Is this possible?

Also. Is it possible for them to avoid having me approve them? For example...today I saw one of these goof balls register...but I went into knock them off the moderation, and they weren't there??? So I banned them.

Please help:erm:

banning a member does not mean banning his computer...

most of the time you face human spammers.. they are paid to post crap on sites they know easy to register on...

you have to ban their IP in the banning system, not only put the member in the banned usergroup so you are safer a little...

[TOMC28]

ok...interesting enough...as I am writing this there is a guy on my site registering with an email address ending in @21cn.com I'm assuming this is CHINA. I see that he is in the UserGroup "Users Awaiting Email Confirmation". But when I go into my Admin...then Moderation...then Moderate Users... WHY ISN"T HE LISTED THERE AWAITING MY APPROVAL????

[Wired1]

You may only be able to moderate them once they complete the confirmation process.

I would recommend turning on ReCAPTCHA human authentication if you have not already. I'd also install this mod (works GREAT):

vbStopForumSpam - known spammer lookup for new registrations