How are you large sites dealing with Spam bots trying to register

[attroll]

I really need some help.
I have a very large VB site.
It has taken me 16 years to get where I am at with it.
I had to resort to manual approval of new users a long time ago to catch the spam bots trying to register.
Within the last year I have been having a large problem with spam bots registering on my site.
I have tried Captcha, I have tried image verification, I have tried the question and answer mode. You name it, I have probably tried it.
I spend over an hour every night proving users to verify they are not spam bots.
I am pulling my hair out trying to figure out how to deal with this.
How have some of you other large VB sites dealt with the spam bots that register on your site and how to stop it form happening?

Please help me.

[Dave]

For me the question/answer combination usually worked pretty well (for example asking what the name of the site is). You could also try Cloudflare and then configure special anti-bot rules for the registration page.

[attroll]

Originally Posted by Dave

For me the question/answer combination usually worked pretty well (for example asking what the name of the site is). You could also try Cloudflare and then configure special anti-bot rules for the registration page.

I am going through Cloudflare right now and I am still having this issue.
Could you please explain what you mean by configuring special anti-bot rules for the registration page through Cloudflare?

[In Omnibus]

Originally Posted by attroll

I am going through Cloudflare right now and I am still having this issue.
Could you please explain what you mean by configuring special anti-bot rules for the registration page through Cloudflare?

The most effective solution I have found is to ask security questions only users with a genuine interest in your forums can answer. You can set up all the rules you like but spam bots and particularly human spammers can get around those rules using proxies or spoofed headers or other simple tricks.

If you want to try CloudFlare you might start here:

https://support.cloudflare.com/hc/en...Agent-Blocking

And here:

https://community.cloudflare.com/t/b...er-agent/84265

[Dave]

Originally Posted by attroll

I am going through Cloudflare right now and I am still having this issue.
Could you please explain what you mean by configuring special anti-bot rules for the registration page through Cloudflare?

Have you tried creating a page rule for the registration page that sets the security level to "I'm Under Attack" and turns on the browser integrity check?



Like In Omnibus said, there are also human spammers and spammers who pay people to manually create accounts for them on forums which allows them to bypass any anti-bot/anti-spam checks.

[z3r0]

I've pretty but stopped all spambots at my site using Cloudflare by stopping registration of the worst offending counties using my mod and blocking registrations from datacenters that I've seen spam coming in from using CF firewall rules.

(http.request.uri.path contains "/register.php" and ip.geoip.asnum in {9009 8100 27411 20860 46562 60068 14061 7203 20473 29802 13739 63949 36351 62240 202422 40861 61317 43350})

Attachment 157545