spammer killed the forum

anurag1

New member
sadly since few weeks my forum was under attack with spammer with multiple accounts, using old hacked accounts for creating mutiple threads, they create 100 threads in 1 minute, i tried many thing to stop him but failed, i tried hcaptcha,googecahptca,CF captcha, on login screen and on creating threads, but failed to stop him, sadly i deleted my forum.
 

Attachments

  • Screenshot_2025-03-23 Deleted threads by Admin Staff.webp
    Screenshot_2025-03-23 Deleted threads by Admin Staff.webp
    104.5 KB · Views: 41
Sounds awful, sorry you lost your forum. They try to get into mine 24/7, but are repelled every time. Also, have the first few posts set to post approval, so no one else sees them. You can then nuke them from on high.

I suggest going XenForo Cloud to mitigate against this problem as they won't be able to hack into that. If you still have the database, XF can import it for you for a fee. You can then clean it up before making the forum live again. On top of that, there are add-ons which you can install to make it even harder for spammers.
 
Don't worry. You can fix this. I use these addons by @Xon and @digitalpoint to address this type of situation:
  1. This addon will give you a very wide range of functions that will allow you to block spammers and malicious activity.
  2. This addon will allow you to manage compromised accounts and force new passwords if these are in Troy Hunt's Have I Been Powned database. i.e. if the password and email combination is for sale to hackers.
  3. This addon will allow you to Rollback edits for breached accounts:
  4. You are already using CloudFlare. Use advanced WAF rules to block this type of user and behavior. Block TOR & VPN, users with high treat level, high risk countries you don't need, ASN that are servers, ASN used by spammers, old http version, non-http requests, old user agents, many requests per minute, etc. This addon makes it easier to manage:
IMHO these addons should be in core.
 
Last edited:
sadly since few weeks my forum was under attack with spammer with multiple accounts, using old hacked accounts for creating mutiple threads, they create 100 threads in 1 minute, i tried many thing to stop him but failed, i tried hcaptcha,googecahptca,CF captcha, on login screen and on creating threads, but failed to stop him, sadly i deleted my forum.
To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.
 
Back
Top Bottom