Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 06 Feb 2020, 21:51
attroll's Avatar
attroll attroll is offline
 
Join Date: Jan 2003
How are you large sites dealing with Spam bots trying to register

I really need some help.
I have a very large VB site.
It has taken me 16 years to get where I am at with it.
I had to resort to manual approval of new users a long time ago to catch the spam bots trying to register.
Within the last year I have been having a large problem with spam bots registering on my site.
I have tried Captcha, I have tried image verification, I have tried the question and answer mode. You name it, I have probably tried it.
I spend over an hour every night proving users to verify they are not spam bots.
I am pulling my hair out trying to figure out how to deal with this.
How have some of you other large VB sites dealt with the spam bots that register on your site and how to stop it form happening?

Please help me.
Reply With Quote
  #2  
Old 06 Feb 2020, 23:23
Dave Dave is offline
 
Join Date: Jun 2010
Real name: Dave
For me the question/answer combination usually worked pretty well (for example asking what the name of the site is). You could also try Cloudflare and then configure special anti-bot rules for the registration page.
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.
Reply With Quote
  #3  
Old 07 Feb 2020, 00:20
attroll's Avatar
attroll attroll is offline
 
Join Date: Jan 2003
Originally Posted by Dave View Post
For me the question/answer combination usually worked pretty well (for example asking what the name of the site is). You could also try Cloudflare and then configure special anti-bot rules for the registration page.
I am going through Cloudflare right now and I am still having this issue.
Could you please explain what you mean by configuring special anti-bot rules for the registration page through Cloudflare?
Reply With Quote
  #4  
Old 07 Feb 2020, 00:33
In Omnibus's Avatar
In Omnibus In Omnibus is offline
 
Join Date: Apr 2010
Real name: Kris
Originally Posted by attroll View Post
I am going through Cloudflare right now and I am still having this issue.
Could you please explain what you mean by configuring special anti-bot rules for the registration page through Cloudflare?
The most effective solution I have found is to ask security questions only users with a genuine interest in your forums can answer. You can set up all the rules you like but spam bots and particularly human spammers can get around those rules using proxies or spoofed headers or other simple tricks.

If you want to try CloudFlare you might start here:

https://support.cloudflare.com/hc/en...Agent-Blocking

And here:

https://community.cloudflare.com/t/b...er-agent/84265
Reply With Quote
  #5  
Old 07 Feb 2020, 02:31
Dave Dave is offline
 
Join Date: Jun 2010
Real name: Dave
Originally Posted by attroll View Post
I am going through Cloudflare right now and I am still having this issue.
Could you please explain what you mean by configuring special anti-bot rules for the registration page through Cloudflare?
Have you tried creating a page rule for the registration page that sets the security level to "I'm Under Attack" and turns on the browser integrity check?



Like In Omnibus said, there are also human spammers and spammers who pay people to manually create accounts for them on forums which allows them to bypass any anti-bot/anti-spam checks.
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.
Reply With Quote
  #6  
Old 07 Feb 2020, 06:53
z3r0's Avatar
z3r0 z3r0 is offline
 
Join Date: Apr 2005
Location: Lancashire, UK
I've pretty but stopped all spambots at my site using Cloudflare by stopping registration of the worst offending counties using my mod and blocking registrations from datacenters that I've seen spam coming in from using CF firewall rules.


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

2020-02-07_07h47_09.jpg
__________________
Better VB.org search
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 15:35.

Layout Options | Width: Wide Color: