- Issue created by @rclemings
Spambot lately is failing to block a growing number of spammy user registrations on my site. But not all of them. I can see watchdog entries for a few. No obvious differences between the hits and misses.
Here's an example of a miss:
Type user
Date Thursday, August 29, 2024 - 07:49
User Anonymous (not verified)
Location https://xxx.xxxx.xxx/user/register
Referrer https://xxx.xxxx.xxx/user/register
Message New user: Michaelvex <pamela15peckz1w@hotmail.com>.
Severity Info
Hostname 178.68.118.172Stopforumspam has 97 hits for that email address, dating back to May. So it should have been blocked. And in fact Spambot returns this if I use the "check" button on the user profile's spam tab:
This account's pamela15peckz1w@hotmail.com address matches 97 times: pamela15peckz1w@hotmail.com.
Warning message
This account's Michaelvex address matches 4907 times: Michaelvex.
So for whatever reason, it looks as if Spambot is failing -- sometimes/often -- to check the user's details with Stopforumspam when the user/register form is submitted.
Here are some of my Spambot settings. Let me know if others would be useful for diagnosis:
Spammer criteria: Number of times the email has been reported is equal to or more than: 1
Whitelist: none
User registration: Protect the user registration form: On
Scan existing accounts: Maximum number of user accounts to scan per cron: 0
Log information: Log information about blocked registrations into Drupal log: On
Caching: Enable result caching: OffAs I said, Spambot isn't failing completely, just for a certain percentage of new registrations. Maybe half. It's a fairly low volume site, maybe 10-20 new users per day at most, including the spammers, so I don't think it could be a rate limit issue. (And even so wouldn't that be recorded in watchdog?)
Any suggestions welcome for diagnosing this.
Drupal 10.3.2, Spambot 8.x-1.3
Active
1.3
Code