• Resolved islainstruments

    (@islainstruments)


    My site is getting flooded with spam user account registrations.

    i can see that each time, the user-agent is python-requests/2.32.3

    problem is that I can’t choose that in your list to make a rule to block that user agent (at least temporarily)
    Please help.

    The page I need help with: [log in to see the link]

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Support dimitrycleantalk

    (@dimitrycleantalk)

    Hello @islainstruments,

    In your SecurityFireWall logs I see that they opened the registration page, but in the Anti-Spam logs I see that we blocked all their requests.

    Or do you still see them in the backend of your site? If so, could you send us the CleanTalk ID of the request that was blocked but appeared in the backend of your site? They are here: Your Anti-Spam Log [ https://cleantalk.org/my/show_requests ] → click “Details” in the record → copy the CleanTalk ID

    Plugin Support SergeM

    (@serge00)

    Hello @islainstruments,

    I checked your website requests and I see that some options are disabled that will help in catching those spammers. These options are enabled by default.

    Please, reset the plugin settings to the default values. The guide is here:
    https://cleantalk.org/help/plugin-template

    Then clear your website cache. Make sure that the website cache is 24 hours or less.

    It will fix the issue. Did it help?

    I’m having the same issue, my site is flooded with spam registrations from the python-requests user agent. My cleantalk dashboard is saying registration denied, but they are still getting into the db, and a registration approval email is being sent to admins. I have a custom PHP handler for admin_post_user_register_form maybe that has something to do with it.

    Thread Starter islainstruments

    (@islainstruments)

    It has slowed down, but it hasn’t stopped.

    as I asked in my original message, is there not a way to block python-requests user agent?
    I can’t think of a valid reason why I would want a python script to be able to register a user account on my website.

    thanks

    Plugin Support SergeM

    (@serge00)

    We will analyze the website requests to find the proper solution.

    Please, wait up to 3 business days.

    Plugin Support SergeM

    (@serge00)

    Hello and thank you for waiting.

    We have tuned the filters on the server side. Also, status of the suspicious networks are now also changed. The filtration issue should be resolved at the moment.

    Please, monitor your website requests for a few days. Your Anti-Spam Log is here:
    https://cleantalk.org/my/show_requests?int=week

    Let us know if everything is okay.

    ewd910

    (@ewd910)

    Hi @serge00 ,
    The filters were not an issue, the requests were correctly being marked as spam and responding with the Registration Denied status, however the registration was still going through and the users were added to the database

    Plugin Support katereji

    (@katereji)

    Hello @ewd910.

    Could you please mark these spam requests in your logs and send us the link to your website so we can find your account in our database and analyze marked requests? If you prefer not to post your website URL publicly please create a ticket here: https://cleantalk.org/my/support/open

    Plugin Support sergecleantalk

    (@sergecleantalk)

    For further investigation please contact us through our private Ticket System:

    https://cleantalk.org/my/support/open

    Plugin Support amagsumov

    (@amagsumov)

    Hello.

    We haven’t heard back from you in a few days, so I’m going to mark this topic as “resolved”.If you have any further questions, you can start a new topic or contact us via our private Ticket System: 

    https://cleantalk.org/my/support/open.

Viewing 10 replies - 1 through 10 (of 10 total)
  • You must be logged in to reply to this topic.