I’m wondering if anybody else has noticed these. We’ve had around 30 that I’m aware of in the last couple of weeks, and none at all before that, AFAIK. We changed our sign-on system about the same time, and I’ve no idea if there’s a connection, or it’s just coincidence. We have been having issues since the change with recording IP addresses, and none of these has an IP recorded. They all follow the same pattern: the website link is left blank, and the profile text is curtailed at 250 characters. Most have no links, and where there are links they are invariably in the form of a bald URL - no anchor text used. I’ve even seen one where the 250-character cut-off came in mid-URL. Many of them have the distinctive tone of “spun” content. [image] All accounts have read 0 posts. While I’m not suggesting this is bot activity, it’s horribly bot-like. Any suggestions for combating it would be welcome. (I would still like to see an option to block profile text for TL0 users.)

I do believe that accounts that fill the bio before posting/reading get on the /admin/users/list/suspect list already.

Yes, I periodically go through and check these about once a month on boing boing for example. They get about 1 per day like this. These users never post, so their spam is the profile, but remember that new users do not show (are not allowed) clickable links on their profiles. And we actually suppress the about me text to other users for TL0 new users. So the impact is low. Compare: [image] [image] The only proposed fix is to pass new user “about me” through Akismet but we have not gotten around to it.

My point in posting here was not to discuss Spam profiles in general, but to see if anybody else has noticed this exact pattern of Spam. As I say, it started on our instance around the same time we changed the log-in system. I would like to know if that’s just coincidence. Have other sites seen this particular pattern cropping up? Do other sites have any information (such as IP ranges) which could help block these, given that we seem to have an issue with recording the IP addresses.

Very related… @Roman is planning on adding akismet spam scanning to user profiles.

This feature is live on meta since last week. It was added to discourse-akismet and is turned off by default (it depends on test-passed code).

"Chopped" Spam in New User Profiles

Product Support

TechnoBear (TechnoBear) November 11, 2016, 4:55pm 3

Yes - they do. But that still requires somebody to go through the list and manually delete them.

Topic		Replies	Views
Lots of Spam New User Registrations? Product Support	42	6376	April 7, 2020
Bot-like accounts Product Support	7	2017	April 12, 2019
Only allow user profiles for TL1 and above? Feature	72	8644	August 14, 2015
Review queue: New user entered profile information without reading any topics or posts. Advise welcome Product Support	7	942	June 15, 2022
Spam alert: sneaky spammers Community Building spam	3	299	September 20, 2024

"Chopped" Spam in New User Profiles

Related topics