It's been three days and we haven't had any real spam bot attack. I must say I'm pretty proud of myself from stopping these attacks.
What all I've done to stop them:
- Banned common email addresses (Ex. the email (something)@chongsoftware.com was common, so I banned the email address "*@chongsoftware.com", which bans every email address that ends with "@chongsoftware.com".)
- Banned com common IP addresses (Ex. the IP addresses 123.456.1.1 - 123.456.999.999 were used for bots, so I banned the IPs 123.456.*. So every IP that starts with 123.456. is banned.)
- Added harder registration questions and captcha images. This doesn't help too much because a lot of people now manually register their bots and then let the bot take over after registration.
- Lastly I added a feature that scans every new post from any member with under 25 posts. If this scan finds any keywords linked to spam bots it will require Moderator approval before being posted. This will stop any bots posts that managed to get past everything else from above from being seen by the entire forum.
Also, thanks to the moderators and admins who helped delete the spam and delete the bots before they managed to post too much. I hope that we have defeated the bots once and for all.