# Lots of Spam New User Registrations? **URL:** \ **Category:** Product Support\ **Created:** [2016 年2 月 2 日 21:22 UTC](https://meta.discourse.org/t/lots-of-spam-new-user-registrations/38925 "2016-02-02T21:22:35Z")\ **Posts on this page:** 1\ **Showing post:** 33
作者： ![RChesley](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@RChesley](https://meta.discourse.org/u/RChesley)\ 发布日期： [2016 年7 月 28 日 19:11 UTC](https://meta.discourse.org/t/lots-of-spam-new-user-registrations/38925/33 "2016-07-28T19:11:11Z")
This topic is not closed and I am not trying to hijack it. It seems very relevant as I look at what is in place to prevent spammers from automatic or manual registration abuses. I do like the thought that forum users who have not read any content should be suspected – just wondering how “auto delete of users who never come back and never read anything” could affect users who register with the main intention to interact via mailing list mode with e-mail-in and reply by mail features. I suspect you are mostly thinking forum, yet the mailing list features are a huge asset and I would like to keep this user from getting auto deleted, and perhaps consider ways to assure they are able to gain reputation, reference other users with @ user etc. Mailing list users may only come to the forum to create the account and access public content without logging in (unless we force private content so they must login to read it, or educate them on the value of logging in for personal messages, profile updates, etc. Rather than try to punish the spammer after they log in, why not just prevent them from registering in the first place? I have experienced automated registration and profile spamming on previous forums. There are characteristics that do stand out and most of them include adding URLs in the profile – perhaps that should be or already is denied for a TL0 user. I found some solutions that worked with add-ins/plug-ins/mods to eliminate most spammers. Before that I was banning users, blocking IPs, and spending too much time policing and cleaning up after the mess. Why not tap into the already existing databases of known spammers? I am definitely not a plug-in developer. I hope perhaps this might inspire someone to consider the possibilities of using something like these solutions: 1. [www.projecthoneypot.org](http://www.projecthoneypot.org) – seems to work very well to stop folks from accessing the forums if they are a known spammer. 2. [StopForumSpam.com](http://StopForumSpam.com) – ties in with the admin list of members and adds options to select users and check them against the database by e-mail address, IP address and username with a status returned (green=good, yellow=caution, red=blocked). The check can be automated at registration or run manually. If there are matches on at least two pieces of information, the user is allowed to register but is held in limbo until someone reviews the registration issue and decides their fate. There are some false positives occasionally. If a spammer slips through the cracks on registration, the solution also includes the ability to report them and update the database so they are blocked from all other subscriber sites. Discourse might benefit from either or both of these resources as part of pre-registration. --- _[View the full topic](https://meta.discourse.org/t/lots-of-spam-new-user-registrations/38925)._