MyBB Community Forums

Full Version: Dealing with Spammers - How to?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2 3
Thank you. This view editing is quiet cool.

I installed reCaptchaIII mod and disabled default one. We'll see if this stops them.
I'd advise checking out this post I wrote not too long ago - it should help you out: http://www.mypurebb.com/129-combating-spam-in-mybb/
reCaptchaIII is not helping against this evil.

I hope this will. Registration security question http://mods.mybb.com/reviews/registratio...y-question
Try out Cloudflare, it is a very cool a nifty way to protect your forum against automated spambots, botnets and low level DDOS attacks Wink
http://mods.mybb.com/view/goodbye-spammer

This doesn't stop them signing up but makes it much easier to get rid of them if they do. Will clear out their birthday (I think) and delete any events off the calendar, as well as threads/posts etc.
(2011-07-29, 06:55 PM)MattRogowski Wrote: [ -> ]http://mods.mybb.com/view/goodbye-spammer

This doesn't stop them signing up but makes it much easier to get rid of them if they do. Will clear out their birthday (I think) and delete any events off the calendar, as well as threads/posts etc.

I have to rebuild the "birthdays" cache to make them disappear after using your plugin. But it's a great help to get rid of them quickly.
I am having the same problem with spambots on both of my forums, and have been for weeks now. I am trying something new to see if I can stop them. I just now downloaded and installed the Security Question mod. It's used to confuse spambots during registration because it asks a question only a human can understand and answer correctly, and you can even customize your own questions.
Recaptcha is Perfect plugin for Spam bots.

I'm using reCaptcha just yesterday, and no more spam anymore Smile
What I consider the best anti-spam practices for MyBB

Plugins
Akismet http://mods.mybb.com/view/akismet-(spam-protection) - Still works in 1.6.x, just change the version number to 16* or *. Best practice, (I remembered this from another thread) make a second registered group (registered* or something) that member will be promoted to automatically after meeting a minimum post count(i.e, 6 or more, and don’t advertise the minimum count). Most spammers don’t meet the count. You can set which groups are ignored by akismet, which should include staff positions and registered*

Default Profile http://mods.mybb.com/view/default-profile-for-1-6 - Set common profile fields, deviations from what you set, along with other tell-tale signs could be indicative of a spammer.

Fassim Anti Spam http://mods.mybb.com/view/fassim-anitspam

IP Manager http://mods.mybb.com/view/ip-manager

Javascript Bot Protection http://mods.mybb.com/view/javascript-bot-protection I recommend editing the registration page to mention that Javascript must be enabled to register.

reCAPTCHA Plugin http://mods.mybb.com/view/recaptcha

Stop forum spam http://mods.mybb.com/view/stopforumspam-com-for-mybb - You can never have enough anti-spam measures

StripMail Plugin! http://mods.mybb.com/view/stripmail-plugin - As the name suggests, removes emails from posts, protecting members from email haversters. Edit the version number to work with 1.6.x

Goodbye Spammer http://mods.mybb.com/view/goodbye-spammer

MyBB Configuration
Under Configuration > USer Pruning enable and adjust to your liking. Example, prune unactivated users after 14 days. Some bots just register withiut activating, this takes care of that.

Add-ons
CloudFlare is definitely a Godsend. http://cloudflare.com Free and powerful, register your site and look into the configurations, especially Side Server Exclusion option. Enable it, then edit your MyBB templates and surround part of code that should be hidden from potential baddies with the tags given.

ZB Block http://community.mybb.com/thread-84742.html Powerful stuff. This link to the thread will teach you how to set it up for MyBB. Again, can never have too many anti-spam measures.

htaccess protection
I came across something infor looking up htaccess protection and I figured I should share. Please add this to the end of your htaccess file. According to what I read, it will block baddie harvester bots. I surrounded it in "# protect" so it's easy to find an remove should you decide to do so.
# protect
SetEnvIfNoCase user-agent  "^BlackWidow" bad_bot=1
SetEnvIfNoCase user-agent  "^Bot\ mailto:[email protected]" bad_bot=1
SetEnvIfNoCase user-agent  "^ChinaClaw" bad_bot=1
SetEnvIfNoCase user-agent  "^Custo" bad_bot=1
SetEnvIfNoCase user-agent  "^DISCo" bad_bot=1
SetEnvIfNoCase user-agent  "^Download\ Demon" bad_bot=1
SetEnvIfNoCase user-agent  "^eCatch" bad_bot=1
SetEnvIfNoCase user-agent  "^EirGrabber" bad_bot=1
SetEnvIfNoCase user-agent  "^EmailSiphon" bad_bot=1
SetEnvIfNoCase user-agent  "^EmailWolf" bad_bot=1
SetEnvIfNoCase user-agent  "^Express\ WebPictures" bad_bot=1
SetEnvIfNoCase user-agent  "^ExtractorPro" bad_bot=1
SetEnvIfNoCase user-agent  "^EyeNetIE" bad_bot=1
SetEnvIfNoCase user-agent  "^FlashGet" bad_bot=1
SetEnvIfNoCase user-agent  "^GetRight" bad_bot=1
SetEnvIfNoCase user-agent  "^GetWeb!" bad_bot=1
SetEnvIfNoCase user-agent  "^Go!Zilla" bad_bot=1
SetEnvIfNoCase user-agent  "^Go-Ahead-Got-It" bad_bot=1
SetEnvIfNoCase user-agent  "^GrabNet" bad_bot=1
SetEnvIfNoCase user-agent  "^Grafula" bad_bot=1
SetEnvIfNoCase user-agent  "^HMView" bad_bot=1
SetEnvIfNoCase user-agent  “HTTrack” bad_bot=1
SetEnvIfNoCase user-agent  "^Image\ Stripper" bad_bot=1
SetEnvIfNoCase user-agent  "^Image\ Sucker" bad_bot=1
SetEnvIfNoCase user-agent  "Indy\ Library" [NC,OR] 
SetEnvIfNoCase user-agent  "^InterGET" bad_bot=1
SetEnvIfNoCase user-agent  "^Internet\ Ninja" bad_bot=1
SetEnvIfNoCase user-agent  "^JetCar" bad_bot=1
SetEnvIfNoCase user-agent  "^JOC\ Web\ Spider" bad_bot=1
SetEnvIfNoCase user-agent  "^larbin" bad_bot=1
SetEnvIfNoCase user-agent  "^LeechFTP" bad_bot=1
SetEnvIfNoCase user-agent  "^Mass\ Downloader" bad_bot=1
SetEnvIfNoCase user-agent  "^MIDown\ tool" bad_bot=1
SetEnvIfNoCase user-agent  "^Mister\ PiX" bad_bot=1
SetEnvIfNoCase user-agent  "^Navroad" bad_bot=1
SetEnvIfNoCase user-agent  "^NearSite" bad_bot=1
SetEnvIfNoCase user-agent  "^NetAnts" bad_bot=1
SetEnvIfNoCase user-agent  "^NetSpider" bad_bot=1
SetEnvIfNoCase user-agent  "^Net\ Vampire" bad_bot=1
SetEnvIfNoCase user-agent  "^NetZIP" bad_bot=1
SetEnvIfNoCase user-agent  "^Octopus" bad_bot=1
SetEnvIfNoCase user-agent  "^Offline\ Explorer" bad_bot=1
SetEnvIfNoCase user-agent  "^Offline\ Navigator" bad_bot=1
SetEnvIfNoCase user-agent  "^PageGrabber" bad_bot=1
SetEnvIfNoCase user-agent  "^Papa\ Foto" bad_bot=1
SetEnvIfNoCase user-agent  "^pavuk" bad_bot=1
SetEnvIfNoCase user-agent  "^pcBrowser" bad_bot=1
SetEnvIfNoCase user-agent  "^RealDownload" bad_bot=1
SetEnvIfNoCase user-agent  "^ReGet" bad_bot=1
SetEnvIfNoCase user-agent  "^SiteSnagger" bad_bot=1
SetEnvIfNoCase user-agent  "^SmartDownload" bad_bot=1
SetEnvIfNoCase user-agent  "^SuperBot" bad_bot=1
SetEnvIfNoCase user-agent  "^SuperHTTP" bad_bot=1
SetEnvIfNoCase user-agent  "^Surfbot" bad_bot=1
SetEnvIfNoCase user-agent  "^tAkeOut" bad_bot=1
SetEnvIfNoCase user-agent  "^Teleport\ Pro" bad_bot=1
SetEnvIfNoCase user-agent  "^VoidEYE" bad_bot=1
SetEnvIfNoCase user-agent  "^Web\ Image\ Collector" bad_bot=1
SetEnvIfNoCase user-agent  "^Web\ Sucker" bad_bot=1
SetEnvIfNoCase user-agent  "^WebAuto" bad_bot=1
SetEnvIfNoCase user-agent  "^WebCopier" bad_bot=1
SetEnvIfNoCase user-agent  "^WebFetch" bad_bot=1
SetEnvIfNoCase user-agent  "^WebGo\ IS" bad_bot=1
SetEnvIfNoCase user-agent  "^WebLeacher" bad_bot=1
SetEnvIfNoCase user-agent  "^WebReaper" bad_bot=1
SetEnvIfNoCase user-agent  "^WebSauger" bad_bot=1
SetEnvIfNoCase user-agent  "^Website\ eXtractor" bad_bot=1
SetEnvIfNoCase user-agent  "^Website\ Quester" bad_bot=1
SetEnvIfNoCase user-agent  "^WebStripper" bad_bot=1
SetEnvIfNoCase user-agent  "^WebWhacker" bad_bot=1
SetEnvIfNoCase user-agent  "^WebZIP" bad_bot=1
SetEnvIfNoCase user-agent  "^Widow" bad_bot=1
SetEnvIfNoCase user-agent  "^WWWOFFLE" bad_bot=1
SetEnvIfNoCase user-agent  "^Xaldon\ WebSpider" bad_bot=1
SetEnvIfNoCase user-agent  "^Zeus" bad_bot=1
<FilesMatch "(.*)">
Order Allow,Deny
Allow from all
Deny from env=bad_bot
</FilesMatch>  
# protect

Try what you like, like what you try Smile
from when i upgrade to 1.6.4 i get spam b4 that i wouldht have any spamConfused
Pages: 1 2 3