Mick Dawlings
Posted in Technical Support 1 year ago
I assume there is a component or something that can help with spammers?
We've not even advertised the site but we're getting hit hard by what seems to be bots creating useless accounts.
Arsalan Shah
Replied 1 year ago
Did you searched for mj12bot ? its a search engine. Same like google , you need to find a way to stop search engine bots crawling your site.
Mick Dawlings
Replied 1 year ago
I'm going away for a few days as of tomorrow. I cannot imagine how many accounts I'll have to manually delete, one by one, will take a long time.
I tried that component but see no options. Even enabled, this is happening, someone is playing with a bot against my site.
I'm watching the logs and see this, over and over again. I block his IP and he just comes back with another one, of course.
www.domain.com 37.187.89.104 - - [25/Oct/2023:16:35:09 -0700] "GET / HTTP/1.1" 200 4056 136366 136014 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
www.domain.com 37.187.89.104 - - [25/Oct/2023:16:35:11 -0700] "GET /action/social/login/apple?ossn_ts=1698207523&ossn_token=9d226fc294c772397bce191b4eb702f55943d8aaaa49f407bdc6cbcaaf71b10f HTTP/1.1" 302 20 161182 160681 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
www.domain.com 37.187.89.104 - - [25/Oct/2023:16:35:13 -0700] "GET / HTTP/1.1" 200 4053 187950 187348 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
www.domain.com 37.187.89.104 - - [25/Oct/2023:16:35:16 -0700] "GET /action/social/login/apple?ossn_ts=1698207530&ossn_token=8538a93aacb8367334353b6381ecc3904531107ff8adb320723213b9bdc64171 HTTP/1.1" 302 20 161818 161224 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
Annoying. All day long, all night long, bot signups and bot password resets. Any ideas of what I should be looking for to help stop this?
I thought I saw somewhere a way to have admin moderate all signups? I'm not sure if it was this software or something else.
This was updated a couple of weeks ago. It does not solve my problem but could help for now.
https://www.opensource-socialnetwork.org/component/view/3684/disable-member-self-validating
It installs on 7.2 but I see now configuration for it.
How does an admin know when someone signed up?
Mick Dawlings
Replied 1 year ago
Could you please add a column to the user list so we could delete multiple users with one click?
Manually removing spammers is taking up a lot of time.
One spammer for example is using the password reset repeatedly which could get our mail server blocked if he figures out how to automate this too much.
Maybe there needs to be a limit to the number of emails you can send when resetting passwords, at least throttling.
Due to the many requests in the past for additonal features and components we have decided to develope a premium version. Features like Hashtags, Videos, Polls, Events, Stories, Link Preview, etc included in it.
$199 (Life Time)
