Signup abuse detection and blocking [Paid] 1.18.2

[smallwheels]

Any recommendations on what I should change/adjust?

How about "change the default settings"? As the add on description states in red:

This is not a turn-key solution, and each site may require customization!

Useful settings have to evolve over time and they are individual per forum, highly dependent from in which countries your audience lives, what providers they user and which e-mail domains they use. So what you have to change is individual and can be learned from the status messages of the add on. This add on clearly requires a small amount of basic knowledge about networks to be usefull and a period of learning.

 

[Xon]

I have default settings and I'm getting a lot of false positeves on users not being able to register, I have default settings. Any recommendations on what I should change/adjust?

You need to check the signup logs and see if there are 'reject' rules which are unexpectedly triggering and then soften those to 'moderate' or to disable them.

But without examples it is very hard to recommend changes

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.18.1 - Feature update

• In approval queue when showing "Shared IP with banned user" or "Shared IP with rejected user", link to the user record.
  Note; only applies to new signups
• Add "On login; Force two-step authentication if unknown ISP for user" option (default: false).
  This feature requires Password Tools v3.12.0+

Read the rest of this update entry...

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.18.2 - Bugfix update

• Fix "ticket_spam_block() error: Cannot call fastUpdate until the entity is saved" when using @Naz's Tickets

Read the rest of this update entry...

 

[Alpha1]

I'm regularly seeing rejects from Apple users are using iCloud Private Relay. ASN 13335, CLOUDFLARENET (iCloud+ subscription, that encrypts Safari browsing)
As IPs from this block are blacklisted by SFS, such registrations are automatically rejected. Normally SFS IP hits are a good reason to reject registration. But this is the exception.

Is there a way to whitelist this so these get moderated instead of rejected?
Many of these valid users get rejected, then try to register a new account which is then also rejected because of multiple accounts.

 

[ENF]

(iCloud+ subscription, that encrypts Safari browsing)

That's not really encrypted browsing other than HTTPS. It just relays traffic through one of their exit nodes based on geographic location.

I don't know why you are having issues with SFS, we don't see this at all. It's possible that it doesn't flag high enough (for us) but we also have those ASN's set to moderate since we still have a manual validation procedure.

 

[Alpha1]

I prefer to immediately ban or reject accounts with SFS IP hit. No moderation, because you will end up with an approval queue filled with spammers.
But this is one of the few exceptions.
To avoid valid users getting rejected, I did lower the weight from 9 to 5 for now.
5 is the moderation threshold, while 10 is rejection threshold for my site.

This is a good example why the CleanTalk database is so much better. Instead of hit or no hit, it measures the spam rate for IP and ASN.