Signup abuse detection and blocking [Paid] 1.20.4

[smallwheels]

Re "UserCheck - Block Disposable Emails" add-on:

You obviously did still not read the discussion or the definition for "unmaintained":

That often does not mean much. It simply means that the author of the add on has not logged onto this forum for more than 45 days which makes the label massively misleading in many cases and does not say anything about wether an add on works or not or about the quality of the add on.

 

[Xon]

Xon updated Signup abuse detection and blocking with a new update entry:

1.20.4 - Maintenance update

• Fix multiple account reports did not respect the "View IP addresses" permission.
• Update various usages of MaxMind's "GeoIP" trademark to use the phrase "IP geolocation" instead.

Read the rest of this update entry...

 

[Xon]

@Xon it would be great if you could implement the following:

1. Detect VPNs/proxies for each post, not for signup/registration only

This can easily exhaust API calls when using various backend providers.

1. Detect disposable emails using Free e-mail verification API, DISIFY, Block Temporary Email, UserCheck or similar

I have been considering email verification, but simply haven't had time to research these.

1. Add fingerprinting as another method for multiple accounts detection using FingerprintJS, Evercookie or similar

I've found fingerprinting is very difficult and often doesn't give useful results when identify an exact individual and this add-on is already complex enough without introducing fuzzy matching for possible multiple accounts.

 

[Robert9]

Perhaps it is due to the update, or perhaps I changed something myself. I do not know.
I have not had a single registration in a week. The usual average is more than 50 per day.
Is there any setting I should check that might be blocking new registrations?
Normally, all registrations were simply sent to moderation.

 

[Robert9]

Uninstalling and reinstalling seems to have solved the problem.

 

[Xon]

Is there any setting I should check that might be blocking new registrations?

Check the spam trigger log, it logs rejected signups there.