• March 29, 2018 at 3:32 pm #1342
      Mike Baker
      Keymaster

      Prevent Private Message Spam:
      BuddyPress allows messaging other users. BuddyPress spambots sign-in and begin to message all users. This plugin places a 24 hour restriction before one message can be sent.

      Add invisible Registration Options
      Use of a “Registration Honeypot” via All In One WP Security & Firewall. This feature allows you to add a special hidden “honeypot” field on the WordPress registration page. This will only be visible to robots and not humans. Since robots usually fill in every input field from a registration form, they will also submit a value for the special hidden honeypot field.

      Use Askimet Spam Protection
      It’s built into WordPress and free and it works wonders. It automatically eliminates spam from appearing. Yes it can be fooled from time to time but I run a few open commenting sites and one of them has had over 250,000 spam attempts blocked by Askimet.

      Ban Hammer
      Add known domain names that a offenders of hosting spammers using BanHammer. ex: anything ending in .ru or containing the word SEO, pill, best etc. Also adding IP addresses and IP address ranges from these offenders to a permanent blacklist.

    • March 29, 2018 at 4:54 pm #1347
      Apache
      Moderator

      not bad, any figures on how many attempts it has thwarted?

    • March 29, 2018 at 6:42 pm #1349
      Mike Baker
      Keymaster

      181 spambot accounts were prevented and Askimet has blocked 77 topics/replies from spammers that made it through. The others are unknown but based on the 2 messaging spammers I’d say a bunch there too. Now the spam will be limited to actual humans which is far easier to monitor. And, if I get hit with some brute force thing or some social media storm I can just block all new activity until it passes.

    • April 26, 2018 at 9:07 pm #1584
      Mike Baker
      Keymaster

      Quick note on this one, I went a tad aggressive and the site was locked out for a couple days while I was on vacation! Be careful when selecting IP address ranges.

    • May 17, 2018 at 1:30 pm #1662
      Mike Baker
      Keymaster

      I just cut out 97 spam accounts I had in a “holding cell”. Foreign IP addresses and known spam email addresses are all logged. I kind of want to launch a site and let it just get hammered by spammers to see what it would look like if left wide open.

You must be logged in to reply to this topic.