Fake users - ip tracking

[Niwde23]

Recently I get constant registration of fake users. Everytime I delete them manually. I am using recaptcha. Some fake users are also registering manually. How can I track e.g. the ip address, the new user registration message sent by Joomla is not showing ip addresses. The server log is not showing any ip address of that fake user when I compare server activity with corresponding time of receipt of the registration message.

[mjparadac]

These extensions could help you in something, the first to block users by IP or country, and the other to protect your site from spam attacks.
https://extensions.joomla.org/extension ... -blocking/
https://extensions.joomla.org/extension ... t-factory/

Hope this helps.

Regards,

[Micky701]

Hi,
Is it possible to do the same in the .htaccess file with this code?

Code: Select all

#BLOCKIP_START
<IfModule mod_authz_core.c>
<RequireAll>
require all granted
require not ip xxx.xxx.xxx.xxx xx.xx.xx.xx
</RequireAll>
</IfModule>
#BLOCKIP_END

And below, this code to block Russia, Ukraine and China for example:

Code: Select all

#BLOCKCOUNTRY_START
<IfModule mod_authz_host.c>
<RequireAll>
require all granted
require not host .ru .ua .cn
</RequireAll>
</IfModule>
#BLOCKCOUNTRY_END

Thank you for your reply

[Webdongle]

https://extensions.joomla.org/extension ... or-joomla/

There is also an extension that prunes users but it is old


Oh https://www.hostinger.co.uk/tutorials/h ... g-htaccess

[Micky701]

Hi,

Thanks for the information and the links.

The "deny from" commands are deprecated since Apache 2.4:
https://httpd.apache.org/docs/2.4/fr/howto/access.html

A stupid question:
How does blocking IP addresses and countries in the .htaccess file work as shown above?
Does it hide my website from users or does it just redirect all urls entered by these users on the 404 page?

[Webdongle]

Not sure what error code is generated

[leolam]

IP blocking is useless... Most hackers or scripts are run from alternate IP-addresses through a VPN

Leo

[Micky701]

Hi Leo,

I know that.
But I mostly still have the same 3 static IPs attacking my site every day and throwing thousands of 404 errors.
So I would like to block these 3 IP addresses so that they do not access my site.
Is it feasible?

Michel