vBulletin Mods

The Official vBulletin Modifications Site
https://www.vbulletin.org/forum/showthread.php?t=327813

How are you large sites dealing with Spam bots trying to register
by attroll
06 Feb 2020 21:51

I really need some help.
I have a very large VB site.
It has taken me 16 years to get where I am at with it.
I had to resort to manual approval of new users a long time ago to catch the spam bots trying to register.
Within the last year I have been having a large problem with spam bots registering on my site.
I have tried Captcha, I have tried image verification, I have tried the question and answer mode. You name it, I have probably tried it.
I spend over an hour every night proving users to verify they are not spam bots.
I am pulling my hair out trying to figure out how to deal with this.
How have some of you other large VB sites dealt with the spam bots that register on your site and how to stop it form happening?

Please help me.

Dave 06 Feb 2020 23:23

For me the question/answer combination usually worked pretty well (for example asking what the name of the site is). You could also try Cloudflare and then configure special anti-bot rules for the registration page.

attroll 07 Feb 2020 00:20

Quote:

Originally Posted by Dave (Post 2601969)
For me the question/answer combination usually worked pretty well (for example asking what the name of the site is). You could also try Cloudflare and then configure special anti-bot rules for the registration page.

I am going through Cloudflare right now and I am still having this issue.
Could you please explain what you mean by configuring special anti-bot rules for the registration page through Cloudflare?

In Omnibus 07 Feb 2020 00:33

Quote:

Originally Posted by attroll (Post 2601970)
I am going through Cloudflare right now and I am still having this issue.
Could you please explain what you mean by configuring special anti-bot rules for the registration page through Cloudflare?

The most effective solution I have found is to ask security questions only users with a genuine interest in your forums can answer. You can set up all the rules you like but spam bots and particularly human spammers can get around those rules using proxies or spoofed headers or other simple tricks.

If you want to try CloudFlare you might start here:

https://support.cloudflare.com/hc/en...Agent-Blocking

And here:

https://community.cloudflare.com/t/b...er-agent/84265

Dave 07 Feb 2020 02:31

Quote:

Originally Posted by attroll (Post 2601970)
I am going through Cloudflare right now and I am still having this issue.
Could you please explain what you mean by configuring special anti-bot rules for the registration page through Cloudflare?

Have you tried creating a page rule for the registration page that sets the security level to "I'm Under Attack" and turns on the browser integrity check?

https://i.imgur.com/HspuC03.png

Like In Omnibus said, there are also human spammers and spammers who pay people to manually create accounts for them on forums which allows them to bypass any anti-bot/anti-spam checks.

z3r0 07 Feb 2020 06:53

1 Attachment(s)
I've pretty but stopped all spambots at my site using Cloudflare by stopping registration of the worst offending counties using my mod and blocking registrations from datacenters that I've seen spam coming in from using CF firewall rules.


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Attachment 157545


All times are GMT. The time now is 02:31.

Powered by vBulletin® Version 3.8.14
Copyright © 2020, MH Sub I, LLC dba vBulletin. All Rights Reserved. vBulletin® is a registered trademark of MH Sub I, LLC
Copyright ©2001 - , vbulletin.org. All rights reserved.