Support > Security

Bots user registration?

(1/3) > >>

MG01:
Hi all,

in last two week i am getting lots of bots user registration requests!
My users account registration is enabled and manual activation.

Is there some better "captcha like" form  protection?

Thanks and best regards,
MG

datahell:
In Elxis 4.x??? And they manage to register??? Use Elxis defender to block these requests.

MG01:
Yes, on Elxis 4!
Can you help me with defender settings?

datahell:
You must inspect server logs to find out how they manage to register and then block them.

datahell:
Report after checking the site.
All registrations were from a specific IP range (from Ukraine) which I blocked in Elxis Defender. Also they used specific email domains which I excluded from registration in Elxis configuration.

How to ban/block IPs in Elxis Defender
Open custom rules file:
includes/libraries/elxis/defender/custom.php

For each IP you want to ban add an entry like that (exact match):
array('match', 'address', 'xxx.xxx.xxx.xxx', 'Access denied'),
Where "xxx.xxx.xxx.xxx" the IP you want to block.

If you want to block all IPs starting from "xxx.xxx.xxx" add an "lmatch" rule like this (left match):
array('lmatch', 'address', 'xxx.xxx.xxx', 'Access denied'),

You can block any level, for example:
array('lmatch', 'address', '999.55', 'Access denied'), This will block all IPs starting from "999.55"

You can even block an IP range like that:
array('iprange', 'address', '999.55.243.0', '999.55.243.255', 'Access denied'),

Make sure the Defender's C (Custom) rules are enabled in Elxis configuration.

Navigation

[0] Message Index

[#] Next page