Can Defender protect my site against ‘spam registrations’?

  • Resolved marbs

    (@marbs)


    2 years, 5 months ago

    My site is using all kind of protection to fight of spam registration since I installed buddyX theme (but the dev. of the theme says it’s not theme related):

    reCaptcha
    Cloudways bot protection
    Cloudflare firewall
    Honeypot
    Masked wp-admin login

    Per day I get around 40 spam registrations. I hope Defender can fight off spam registrations?

    ps: I also get “Error during scanning” message

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Adam – WPMU DEV Support

    (@wpmudev-support8)

    2 years, 5 months ago

    Hi @marbs

    I hope you’re well today!

    In context of “spammy registrations” Defender could help by

    – letting you block some IPs and user-agent strings (but you’d need to manually define them)
    – although its “Audit Logging” feature may be helpful in identifying such “offending” IPs as it would monitor what happens on site
    – letting you mask login area
    – and also check passwords against “HaveIBeenPwnd” database
    – and add reCaptcha to login/register forms

    I understand that you already have most of those feature implemented other ways but if all those tools are still not stoping such registrations it may mean that there’s some sort of a “hole” on site, like some “custom” unprotected form (e.g. via some plugin or built-in to theme) or some other vulnerability.

    Is your site using any custom(ized)/non-standard front-end login/registration? Is it fully up to date?

    Are there any additional “user-management” related plugins installed and if yes, what are they?

    I think it would also be worth to use Defender’s “Malware Scan” to make sure that site is not infected by any malware (as it can also cause such registrations) and enable Audit Logging option in Defender – then let it gather data for a few days and see if it helps you identify any specific IPs or some sort of a “pattern” (like e.g. requests for some “strange” links that are then followed by successful user account registration).

    Best regards,
    Adam

    Thread Starter marbs

    (@marbs)

    2 years, 5 months ago

    Hi @wpmudev-support8 I get “Error during scanning” message when trying to scan while I have reset folder rights to make sure plugin functionality.

    Below is a list of plugins I am using:

    Activity Plus Reloaded for BuddyPress
Ad Inserter
Ads for bbPress
Advanced noCaptcha & invisible Captcha
Akismet Anti-Spam
bbp style pack
bbPress
bbPress Voting
Bot Protection
BuddyPress
BuddyPress Favorite Notification
BuddyPress Member Blog
bunny.net
Classic Widgets
Contact Form 7
Contact Form Entries
Defender
Elementor
GamiPress
GamiPress - bbPress integration
GamiPress - BuddyPress integration
GamiPress - Invite Anyone integration
GamiPress - WP Ulike integration
GD bbPress Tools
Generate PDF using Contact Form 7
Give - Donation Plugin
Instant Indexing
Invite Anyone
Kirki Customizer Framework
Nav Menu Roles
PDF Poster
Profile Builder
Rank Math SEO
Regenerate Thumbnails
rtMedia for WordPress, BuddyPress and bbPress
Site Kit by Google
Ultimate Before After Image Slider & Gallery - BEAF
Under Construction / Maintenance Mode From Acurax
Visibility Logic for Elementor
Wbcom Designs - Ads Rotator for Buddypress
Select Wbcom Designs - Birthday Widget for BuddyPress	
Wbcom Designs - Birthday Widget for BuddyPress
Wbcom Designs - BuddyPress Activity Social Share
Wbcom Designs - BuddyPress Create Group Type
Wbcom Designs - BuddyPress Member Reviews
Wbcom Designs - BuddyPress Redirect
Wbcom Essential
WooCommerce
WordPress Importer
WP File Manager
WP Mail SMTP
WP Super Cache
WP ULike
    Thread Starter marbs

    (@marbs)

    2 years, 5 months ago

    Issue is solved after installing Cleantalk.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Can Defender protect my site against ‘spam registrations’?’ is closed to new replies.