XF 2.1 Spam attacks

TechBill

Active member
We are using Google recaptura and Spam stop with some servers.

Today and yesterday, we were attacked over 200 spammers that spammed all of our 64k members with conversation about porn sites

How did they bypass those and create new account????
 
They are using a program such as xRummer. I have a paid addon that combats the registration bots, https://xenforo.com/community/resou...-spaminator-stop-spam-bot-registrations.7410/

Are you using a method called honeypot to stop spam bots? We have signup form on our main website where I used honeypot (hidden field) but browser auto fill keep filling it in with something sometime and preventing legitimate people from registering.

We will probably get your addon to see if it helps. Thank you

Another question

How do we tell if user registered with our registration or Facebook / Google account? We have those enabled on our forum to give new members easier way to register. Are there bots using those methods??
 
Thank you!

My philosophy on the registration form is to keep it simple as possible. It’s hard enough trying to get people to register, so why add a bunch of useless captchas or questions to answer. Crap like that just turns people off and drives them away from your site.
 
On top of what Ozzy recommended, you could try an add-on like this:

To limit posting of links to zero, while whitelisting your board URL. Make it so users have to be promoted to a new group that allows for links & whatnot. Do the same with Conversation access. New users must make 5+ public posts to get promoted into a group that'll unlock those access.

Not impossible to defeat, but definitely adds another layer.
 
On top of what Ozzy recommended, you could try an add-on like this:

To limit posting of links to zero, while whitelisting your board URL. Make it so users have to be promoted to a new group that allows for links & whatnot. Do the same with Conversation access. New users must make 5+ public posts to get promoted into a group that'll unlock those access.

Not impossible to defeat, but definitely adds another layer.
Thanks ... I will look into this. We do want to restrict the conversation on new member somehow .. the link restriction on new members sound like a good idea too ..

We had one sign up and posted a spam link today, but it was a human that sign up.
 
Thanks ... I will look into this. We do want to restrict the conversation on new member somehow .. the link restriction on new members sound like a good idea too ..

We had one sign up and posted a spam link today, but it was a human that sign up.

Yeah we've had humans that have gotten through, but due to the minimum post that's required before they can post any links or PM people, they usually give up and leave. The ones that try to rush by making quick posts to reach the minimum post count are usually caught easily, with members reporting on them too.
 
Yeah we've had humans that have gotten through, but due to the minimum post that's required before they can post any links or PM people, they usually give up and leave. The ones that try to rush by making quick posts to reach the minimum post count are usually caught easily, with members reporting on them too.
I set the promotion manually without use of an addon and use a regex in spam phrases that puts first X posts into moderation if they contain links. Moderated posts don't count in the post count total so they can post 1000 of them and their post count will still be zero. You still should be able to implement this regardless of the addon and they should work together.
 
Top Bottom