# How to block a spam attack?

**URL:** https://meta.discourse.org/t/how-to-block-a-spam-attack/31255
**Category:** Support
**Created:** [July 21, 2015, 2:45pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255 "2015-07-21T14:45:02Z")
**Posts on this page:** 11
**Page:** 1

<div class="post-metadata">

### Author: ![CamilleRoux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/camilleroux/32/119575_2.png) [@CamilleRoux](https://meta.discourse.org/u/CamilleRoux)
#### Post date: [July 21, 2015, 2:45pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/1 "2015-07-21T14:45:02Z")

</div>

Hi,

Since this morning, my Discourse is under a spam attack. They create a new account and post 5 messages.  
I delete the spammer each time, but since they continue to create new accounts, I don’t know what to do.

Here the spams, maybe some of you get the same:

 ![](https://global.discourse-cdn.com/meta/original/3X/b/8/b80c33405f79a25941ff8d2c57c5064583af3080.png)

Thank you for your help

---

<div class="post-metadata">

### Author: ![strager](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@strager](https://meta.discourse.org/u/strager)
#### Post date: [July 21, 2015, 2:57pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/2 "2015-07-21T14:57:12Z")

</div>

Do you have askimet installed/configured?

---

<div class="post-metadata">

### Author: ![CamilleRoux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/camilleroux/32/119575_2.png) [@CamilleRoux](https://meta.discourse.org/u/CamilleRoux)
#### Post date: [July 21, 2015, 2:58pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/3 "2015-07-21T14:58:15Z")

</div>

No, how can I do that?

Edit: I found the discourse-askimet plugin. Should I install this version?  
[https://github.com/discourse/discourse-akismet](https://github.com/discourse/discourse-akismet)

---

<div class="post-metadata">

### Author: ![strager](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@strager](https://meta.discourse.org/u/strager)
#### Post date: [July 21, 2015, 3:06pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/4 "2015-07-21T15:06:23Z")

</div>

That’s the one unless there’s another version somewhere… it’s pretty straightforward from what I saw- as our site isn’t live yet I can’t attest to its effectiveness, but others I’ve spoken to have had nothing but praise for it.

Let me know how it goes - We’ve been hit by a Bamwar (on our old forum) in the past and it gets quite annoying to clean up after…

---

<div class="post-metadata">

### Author: ![CamilleRoux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/camilleroux/32/119575_2.png) [@CamilleRoux](https://meta.discourse.org/u/CamilleRoux)
#### Post date: [July 21, 2015, 3:26pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/5 "2015-07-21T15:26:40Z")

</div>

Ok thanks,  
I found no mention of this plugin on this forum. Can someone give me some feedback on it?

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [July 21, 2015, 4:02pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/6 "2015-07-21T16:02:36Z")

</div>

Akismet is **the** reference when it comes to spam. It takes a bit to learn about the content of your site, but once it’s rolling, it’s awesome.

_Do you see much spam on meta? 😉_

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [July 21, 2015, 8:12pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/7 "2015-07-21T20:12:57Z")

</div>

To be clear, these are human beings, so they will easily bypass any Capcha. You need the official Akismet plugin to block them based on Bayesian content filters.

(Can also block by IP, but they have a lot of IPs…)

---

<div class="post-metadata">

### Author: ![CamilleRoux](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/camilleroux/32/119575_2.png) [@CamilleRoux](https://meta.discourse.org/u/CamilleRoux)
#### Post date: [July 22, 2015, 12:54am UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/8 "2015-07-22T00:54:27Z")

</div>

I just installed the [Akismet plugin](https://github.com/discourse/discourse-akismet) and it already blocked the first spam 😄  
Thanks !

PS: I’m translating the plugin into French

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [September 27, 2016, 10:22am UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/10 "2016-09-27T10:22:45Z")

</div>

The Korean bamwar human spammers are still around and still pernicious enough to be effective even with fast typist and Akismet checking and new user post limits and IP limits. @sam will add language specific site settings (we need this for all uppercase checks and other stuff anyway) to make sure the common thread of Korean text is a huge red flag for a new user post.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [February 20, 2017, 6:46pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/11 "2017-02-20T18:46:32Z")

</div>

> [@codinghorror](#):
>
> add language specific site settings

This is something that comes up a fair bit, I am adding the feature to the 1.8 list

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [June 8, 2024, 12:44pm UTC](https://meta.discourse.org/t/how-to-block-a-spam-attack/31255/12 "2024-06-08T12:44:54Z")

</div>

This topic was automatically closed after 3244 days. New replies are no longer allowed.
