如何防止注册垃圾信息

支持
23

I used to have this spam signup problem on my personal forum too but it has slowed down quite a bit. Now I only get one or two or max (like today) 5 a day. Diligently deleting spam accounts and adding to block lists seems to do the trick. I have “Staff must approve all new user accounts before they are allowed to access the site.” enabled which puts the new users in the handy new review queue so it takes just a moment to jam through them. Adding a custom question helps too in order to identify the obvious spammers.

On my work forum I use wp-discourse wordpress plugin and SSO, and have a very long signup form. We very rarely get spam signups that way.

2 个赞
24

Is the new sign-up / login plugin a solution to prevent spamming ?

1 个赞
25

请问如何提取类似的数据？

26

出于好奇，这些如何通过验证码？注册过程如何在不解决验证码的情况下完成？

27

您还应该记住，在这种情况下，如果分发了过多的表单垃圾邮件，您自己的邮件服务器可能会被列入黑名单。

如果机器人使用真实地址进行注册，这种情况会发生得非常快。
我通过使用外部 nginx 作为 discourse docker 实例的代理，并使用 fail2ban 监控日志文件来解决此问题，即：

/etc/fail2ban/filter.d/nginx-discourse.conf

[Definition]
failregex = ^<HOST>.*"GET /u/account-created HTTP/2.0" 200.*$

/etc/fail2ban/jail.d/defaults-debian.conf

[nginx-discourse]
enabled = true
port = http,https
filter = nginx-discourse
logpath = /var/log/nginx/your.discourse.access.log
bantime = 43200
findtime = 3600
maxretry = 3
banaction = ufw

此示例表示，如果有人在一小时内从同一 IP 尝试注册 3 次，则该 IP 将被阻止 12 小时。
请根据您的目的和系统环境调整这些值！

2 个赞
28

我收到了大量来自已验证的机器人（使用 Gmail 账户，竟然是 Gmail！）的垃圾注册，它们都来自印度。也有一些来自其他域名，但 Gmail 账户的出现令人惊讶。

Screenshot 2025-03-17 at 1.42.51 PM
Screenshot 2025-03-17 at 1.42.51 PM2090×1324 280 KB

谷歌这是怎么了。

3 个赞
29

我也是。
如果他们不发帖，他们就是无害的。新创建的不活跃用户账户不会对访客或普通用户显示，用户的个人资料也不会被索引；所以这些垃圾账户基本上对除管理员/版主之外的所有人都是不可见的，经过一段时间后会自动被删除，这要归功于定期清理的助手任务。

2 个赞
30

即使他们无法发帖，他们也会做一些随机的事情，比如搜索查询，

Screenshot 2025-03-17 at 4.34.59 PM
Screenshot 2025-03-17 at 4.34.59 PM824×882 39.9 KB

或者似乎在试图破解认证系统：

Job exception: Net::SMTPAuthenticationError
(google_oauth2) Authentication failure! invalid_credentials: OAuth2::Error, invalid_grant: Bad Request { "error": "invalid_grant", "error_description": "Bad Request" }
(google_oauth2) Authentication failure! csrf_detected: OmniAuth::Strategies::OAuth2::CallbackError, csrf_detected | CSRF detected
1 个赞
31

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.