XF 2.1 Unique Spam

[Chad]

Every day I get 1 or 2 of these exact type of spam registrations that land in my approval queue.

" 116 row a seat 20 "

I have these already enabled too:
StopForumSpam
Project Honey Pot
Akismet

 

[l3ta]

You need the Spaminator!

 

[ActorMike]

Every day I get 1 or 2 of these exact type of spam registrations that land in my approval queue.

" 116 row a seat 20 "

I have these already enabled too:
StopForumSpam
Project Honey Pot
Akismet

@Chad We're getting worn out on these subdomain email addresses as well. We use Signup abuse detection and blocking 1.6.4.

Signup abuse detection and blocking

From (simple) multiple accounts detection to isp/connection fingerprinting with score-based moderating/rejecting logic. These are very effective low-hanging fruit at reducing spam. Supports migration configuration from the following XF1 add-ons...

xenforo.com

I created a rule for them under Connection Profiling - Passive

+7|*.*.*.*.*@*
+7|*@*.*.*

Then make sure the box is checked at the top of your settings for "Do not save users rejected on signup". You also need to upgrade the plugin to version 1.6.4.
I discovered a bug in the 1.6.2 version that was not actually deleting them on signup and @Xon fixed it.

There is one drawback. There are emails that are legit like "*@neb.rr.com" So you have to decide the number of points that work for you. It's actually quite rare, but there are still some old "Road Runner" ISP email accounts out there.

 

[Baby Community]

You need the Spaminator!

Yes you are right, I need it too, but it only sells with paypal. It does not accept credit cards.

 

[ActorMike]

Yes you are right, I need it too, but it only sells with paypal. It does not accept credit cards.

Based upon my experience on user registration, it's better for user registration to be seamless where the valid user isn't jumping through hoops like a circus animal. You will lose user signups with all those anti-bot measures, which in turn you lose money. Our forum runs great without all that using https://xenforo.com/community/resources/signup-abuse-detection-and-blocking.6812/

I don't even require email confirmation. Again, you just lose more users by making them jump through hoops, this is not 2001. If they put in the wrong address, the bounce handler will take care of that and prompt them to correct their email address.

 

[Max Taxable]

Based upon my experience on user registration, it's better for user registration to be seamless where the valid user isn't jumping through hoops like a circus animal

Entire purpose of the Spaminator.

 

[ActorMike]

Oh, I see. I've never used it so I had to go read the description again. I'd really have to see it work on a large volume site to see if there were any legit users turned away. It definitely sounds too good to be true, but hey, you never know!

 

[Baby Community]

as if I solved this problem with cloudflare ..
free version cloudflare and three firewall rule recaptcha active.


https://www.bebekforum.net.tr/

test it working?

 

[Max Taxable]

Oh, I see. I've never used it so I had to go read the description again. I'd really have to see it work on a large volume site to see if there were any legit users turned away. It definitely sounds too good to be true, but hey, you never know!

Tested for years, large volume sites. It cant turn anyone away ever, since it doesnt block. It just creates no account if triggered. False positives ARE possible when the addon is in Test mode. It automatically disengages Test mode after 5 minutes if the admin forgets to turn it off.

 

[ActorMike]

Definitely not a fan of this!
View attachment 20200428_185057.mp4

 

[Baby Community]

Definitely not a fan of this!
View attachment 223613

Yes sir, thank you very much ...
It really works ..