martinibuster - 2:34 pm on Aug 27, 2013 (gmt 0) [edited by: aakk9999 at 1:49 am (utc) on Aug 28, 2013]
Interesting. Just found some spam on the user blogs.
It is indeed interesting that you found spam on the user blogs and I'm glad that you found it. There may be spam elsewhere on the site. You may want to recall some of the anchor text commonly used by spammers on your site and run a site:search with quotation marks with those phrases and partial versions of those phrases. You might find more spam.
Forum spammers drop links wherever a link is allowed, including in profiles. Sometimes they don't post links, just fluff. The link is either in their profile.
Sometimes there is no link, not anywhere. I think they're building inventory to sell to a client, the link is added later. So even if you catch the realtime link drops, you may not catch the links dropped weeks or months later.
Do your mods know to look out for spoofed IP addys? Spam doesn't always drop a link. If you see a fluffy post (translated/garbled English, "great post!" or "Thanks for posting this!") and the IP addy is spoofed, deactivate the account, even if no link is posted anywhere.
[edited by: martinibuster at 2:39 pm (utc) on Aug 27, 2013]
[edited by: aakk9999 at 1:49 am (utc) on Aug 28, 2013]