How do I stop human spammers?

(Mohammad Mustafa Ahmedzai) #1

I am unfortunately tired of deleting Spammers on my discourse forum. Above 200 user logins have been registered within the past few hours and have been posting spam on the forum. I have now allowed only Trust Level 1 users to create topics.

From what I observed it looks like a Spam bot or some sort of software that creates user profiles and penetrates through Discourse Security. I am really worried about fighting so much spam on my forum. I have never experienced this before. It is happening since 3 days.

The “Needs approval” system is ignoring most of the spam and is really not helpful in this case.

Would really need some serious help on this.

(Régis Hanol) #2

I highly recommend that you install and enable the akismet plugin.

(Sam Saffron) #4

What version of Discourse are you running, when did you last upgrade?

(Régis Hanol) #5

Meta tag says

Discourse 1.4.0.beta12 - GitHub - discourse/discourse: A platform for community discussion. Free, open, simple. version 82e5f55011586b9bd690b09ee5a89d827e354bcc

So about 3 days ago.

(Sam Saffron) #6

Yeah, akismet then, not much choice.

(Jeff Atwood) #7

Akismet is what you need, so install the plugin ASAP.

Did you change any Discourse security setting defaults? We’ve seen sites get in massive trouble when they do highly inadvisable things like setting new user default trust level to 1, etcetera.

p.s. These are 100% humans spamming you, not bots. Trust me, we know.

(Jeff Atwood) #8

First, definitely install the Akismet plugin. You are getting human spammers for sure. Look in /admin/logs/screened_ip_addresses and you’ll see all the auto-banned IPs are from a huge variety of IP addresses, too.

(@zogstrip I did a manual rollup here and it captured a bunch of stuff… is auto-rollup not working?)

I took a look at your overridden settings and most of them look fine, I only saw one that was problematic:

  • rate limit new user create post = 5 seconds

That’s … way low, you want to make new users wait a LOT longer than 5 seconds before posting again! I reset that to the default of 30 seconds. But I didn’t see any issues with your settings with regards to spammers, other than that minor one.

And to reiterate: you want Akismet real, real bad for what you’re seeing. It’s the only effective way to stop human spammers.

(Mohammad Mustafa Ahmedzai) #9

Thank you Jeff! For the urgent help and support. You guys are great when it comes to customer service. :thumbsup:

I will only wish that Plugin installation is made easy in Discourse just like it is for Wordpress CMS where even a non-techy can easily install plugins. I will try if I can install this plugin myself. I hope I get rid of this problem the sooner possible. This tutorial is surely not for beginners or non-techy.

Thank you a lot. let me get back to you guys

(Mohammad Mustafa Ahmedzai) #10

I always keep it updated. It is

    v1.4.0.beta12 +102