Just how rubbish is your "security" that some random bot (not controlled by you) can register and post at will?

I looked at your registration page, and it needs both a valid email address AND a CAPTCHA phrase. I'm also guessing here that you also send a confirmation email with a link that must be clicked before allowing a post.

Here's a heuristic for you.
If something clicks on the registration page, "registers", "presses the confirm link" and presses "submit post" all within say 30 seconds, then assume it is a bot and deal with it. No actual human could manage all that in less than 90 seconds - probably longer (try it).

What about those links we've highlighted?
a) you haven't taken them down yet
b) what do the registration IP addresses and email addresses tell you?

What is your background joining rate for new members? I'm guessing that you never get anywhere near "4 in one minute", so that should be another red flag in your system.

Updating to a newer version of vbulletin wouldn't be a bad idea either.


Maybe one of your members has something to do with it.

bitwise hack for swapping
compare with
bitwise hack for swapping - C++ Programming
Now I wonder where the reply on your cloned thread came from

They're not above copy/pasting answers from someone else without due credit as well.