spam accounts

[DreadsUK]

I've noticed that i'm getting spam accounts getting through with my current spam blocking software.

They always create accounts with these 4 charachter usernames like this

https://vborg.vbsupport.ru/external/2014/11/23.png

Whats would be the best way to automatically delete/block/stop accounts like this?

[ozzy47]

What mods are you using to stop the spammers?

[Max Taxable]

ReCaptcha. LOL.

[RichieBoy67]

Are these registrations verifying email accounts? if not please change this setting to make them verify. Change member list setting to only show members who have posted.

If they do not verify emails then they are not members really but just un verified pending addresses.

Also are these coming from a certain ip address or email domain? If so ban those at the server level.

[DreadsUK]

Spambot Stopper
just re enabled 'verify email before registration' (can't remember why it was turned off before)

Also change the name of the registration.php file

[RichieBoy67]

I doubt the name change of the reg file will help much because they get the new file right from your source code but turning on email verification will help for sure.

There are a few other spam mods that work well as well, I use Glowhost, ozzies mod and the SpamHammer one as well. A combo of these should help though you will still see people trying they just won't get in usually.

There are also things that can be done with usergroup permissions to stop spammers who do get in be able to post links, etc. I believe Ozzy has a mod for this as well.

[ozzy47]

I would suggest adding the rest of the mods listed here, http://ozzmodz.com/showthread.php/506-The-Era-Of-Big-Spam-Is-Over

[RichieBoy67]

I would suggest adding the rest of the mods listed here, http://ozzmodz.com/showthread.php/506-The-Era-Of-Big-Spam-Is-Over

Right! I forgot to mention the ones in your signature! I use all of those along with some htaccess filtering too.

[ForceHSS]

Spambot Stopper
just re enabled 'verify email before registration' (can't remember why it was turned off before)

Also change the name of the registration.php file

Did you install the new update of that one. I find it is no good and won't stop bots better to remove it and use these two only
https://vborg.vbsupport.ru/showthread.php?t=294633
https://vborg.vbsupport.ru/showthread.php?t=248042
This is all I use and it is all you really need

[Dave]

Spambot Stopper
just re enabled 'verify email before registration' (can't remember why it was turned off before)

Also change the name of the registration.php file

Did you update "verify email before registration" to the latest version? The older versions are vulnerable to SQL injection.

[ozzy47]

Did you install the new update of that one. I find it is no good and won't stop bots better to remove it and use these two only
https://vborg.vbsupport.ru/showthread.php?t=294633
https://vborg.vbsupport.ru/showthread.php?t=248042
This is all I use and it is all you really need

Are you talking about the rename register.php mod?

[ForceHSS]

Are you talking about the rename register.php mod?
Was telling him to update the verify email before registration mod

[ozzy47]

Ahhh, OK gotcha. :)

[Budget101]

Very Very Simple fix without installing mods:

Go to AdminCP> User Profile Field> Add new User Profile Field

Add New> Single Line Text Box

Title: Anti-Robot Field
Description: Type in ANY three, 4-letter words in the field above
Example: Dont SPAM Here
Required, yes at registration & Profile Updating
Editable

Regular Expression:
^\w{4}\s\w{4}\s\w{4}$


This forces users to type in 3 (four letter) words before they can register. Spam bots cannot do this.

[ozzy47]

Sure they can, if enough people use something like that, the bot can be coded to add that. :)

[Max Taxable]

Spam bots cannot do this.It was once believed they couldn't solve CAPTCHAs either. :D

For pennies, botnet admins get 3rd world humans to solve pesky problems such as this, the Q&A, and other such. Meanwhile all these really do is annoy legitimate applicants.