SMF 2.1 RC4 has been released! Try it out and help us test! Read more.
Started by Tripredacus, July 16, 2021, 09:31:19 AM
Quote from: efk on July 16, 2021, 11:36:56 AMQuestion for you, are they real humans or bots? What they are posting, what they are doing around your forum?
Quote from: Tripredacus on July 16, 2021, 12:08:58 PMI was looking at the registrations and the accounts that get created by these users do not usually post or use the rest of the site. Only in the past couple of weeks have a couple of these accounts decided to wake up and post spam topics (but not replies) in Russian or Ukranian (I know these languages are different but I do not know how to tell the difference.)
Quote from: Tripredacus on July 16, 2021, 12:08:58 PMNow some of them are sharing IPs but some of them aren't. So I can and have been able to add a couple IPs to the ban list. The one I posted above has made around 100 accounts in the past year but has not posted, and have used maybe 10 different IPs. Obviously banning IPs is dumb, but can be temporarily done in cases where there are 50 spammers on the same IP.
Quote from: Tripredacus on July 16, 2021, 12:08:58 PMThe email addresses I posted in the ot can be found on StopForumSpam's database. I do not believe that the site owner pays for an anti-spam service, which certainly would handle these automatically. Another forum I do work on does have a service like this and we just have to handle stragglers that manage to slip through the cracks.
Quote from: Tripredacus on July 16, 2021, 12:08:58 PMObviously preventing them from registering is the way to go, but in this situation I am operating as forum admin and no access to the actual site itself (for example, no access to modifying templates/skins/emoticons, etc) So when I post into here with questions, it is only based on what I can do in admincp, and if there are mods or addon services that can accomplish this then I can only make those recommendations.
Quote from: Tripredacus on July 19, 2021, 02:39:34 PMAdmin Approval won't work due to custom integration, however a dev is working on a similar concept that will prevent users from just posting into the forum.
Quote from: Tripredacus on July 19, 2021, 02:39:34 PMThe forum already has set the antispam methods (captcha + question/answer) so I think that these are not bots but are humans. Then again, I have found there may be close to a thousand of these spam accounts registered over the past 4 years but only a handful have actually posted into the forum. I believe that 99.9% of these spammers are indeed bots and are getting stopped by the captcha.
Quote from: Tripredacus on July 19, 2021, 02:39:34 PMUsing a ban trigger with the multiple wildcards does work. Can't ban a whole country as we provide a service to people around the world and actually want real people from countries like Russia to contribute.
Quote from: Tripredacus on July 19, 2021, 02:39:34 PMI agree about IP bans, in reality it may only be viable for 3 hours to 3 days and should only be used as a defence in an active attack. Otherwise it shouldn't be used. Same goes for hostname bans because a lot of spammers come through VPNs and guess what, so do actual people.
Quote from: efk on July 19, 2021, 07:26:55 PMAdmin Approval at least how I understand it is manual work, I'm saying this because I never used it and from what I saw in past and from what it was told to me, it is stupid and useless, once I got approved on one forum after 2 months of waiting, and it was something important.. And if you guys have all day to approve every single account and posts and do other job, good luck, for me its wasting of time. Approving posts/topics is more than enough.
Quote from: efk on July 19, 2021, 07:26:55 PMGood for you if captcha is working. Better disable captcha and save your users from that annoying thing. They can look like real humans sometimes and they are bots, so there is very small chance to be real human in action.
Quote from: Tripredacus on July 20, 2021, 02:55:12 PMAdmin Approval on registrations is not ideal unless you want to run a public "private" forum. Ghosting/Mod Review on posts is a thing you use for problem members. Using it sparingly on posts... but I do not see an option to either use post hiding, which is how IPB handles that. I am somewhat new to SMF Admin but I have coming up to 20 years on forum admin experience, with Ikonboard and IPB primarily. I always see SMF as a bare bones type thing, and despite hating where IPB has gone (and is going) there are still some good things about it.
Quote from: Tripredacus on July 20, 2021, 02:55:12 PMQuote from: efk on July 19, 2021, 07:26:55 PMGood for you if captcha is working. Better disable captcha and save your users from that annoying thing. They can look like real humans sometimes and they are bots, so there is very small chance to be real human in action.It has a low threshold, like 5 posts. Anyone who makes a 6th post and isn't a scammer or spammer doesn't have to use captcha.In the end, we cannot know for sure if it is a bot or a person. Doesn't really matter I guess.