Ok so I changed the “authorize-email” wrong link to the correct one and a few hours later I received again spam:
It is normal that discourse installations receives spambots that way? I don’t think so… but why changing this confirmation email makes spambots to attack the forum?
What is even more confusing is that I don’t see any logs from them, in fact there’s no “new registered users” (even more confusing the relation of that confirmation link here):
So where these spambots come from? looking at one of them it looks like it was created in 2020, ok…
Question: when the post is flagged (so I added many keywords on the flag list), what is the correct action for the spammy accounts? (delete all his posts, delete account, delete traces, etc).
On the other hand I see that the user has 11 posts created, on his profile I see the option to “delete all posts” but not to “see” them (very needed link), how I can see which posts the user created? In fact it looks to be a legit user (on his first post from 2020, so the account of this user was hacked on discourse?)
Back to the topic, I still confused what can be the relation of the confirmation link with these spam actions, but I just seen that a NEW user was created 32 minutes ago trying to spam gibberish:
