Russian spammers

[PatrickRQ]

We recently experience spam frim Russia.

It is trough contact form for guests. Captcha is there, bypassed by them. No way to prevent that with stock options.

Edited April 11, 2022 by PatrickRQ

[PatrickRQ]

Ability to include Q/A would be enough to prevent that. Seems Google captcha is s***, can be bypassed easily.

Edited April 11, 2022 by PatrickRQ

[Kjell Iver Johansen]

Remove guest access to that form?

 

[PatrickRQ]

Thanks. This is sort of workaround. Best would be to implement simple QA. I know no robot that can pass some sort of smart questions. At same time we would filter out dumb clients. Two birds with one stone 😂

Edited April 11, 2022 by PatrickRQ

[Sonya*]

2 hours ago, PatrickRQ said:

It is a trough contact form for guests.

Give a CleanTalk a try.

1. Install a free plugin via Marketplace
2. Register with CleanTalk for 7-days-trial (8$/year after the trial period)
3. Put your API key in AdminCP
4. Enable contact form protection

I have never gotten any spam through the contact form since then.

It also protects from spam registrations. And includes a firewall. 

Edited April 11, 2022 by Sonya*

[Marc]

At present there is only recaptcha available for spam prevention within that area. Please feel free to post up within our suggestion area if you wish to see additions in future releases

[AlexWebsites]

I get spam through contact as well that I have creating tickets. I always mark them in IPS as SPAM, but I'm not really sure what that does because they keep coming back. Is there a log that holds this info? Not sure. Would be good if I marked it as SPAM they would not be able to create a new contact/request or were automatically marked for the next time.

[Randy Calvert]

8 minutes ago, AlexWebsites said:

I get spam through contact as well that I have creating tickets. I always mark them in IPS as SPAM, but I'm not really sure what that does because they keep coming back. Is there a log that holds this info? Not sure. Would be good if I marked it as SPAM they would not be able to create a new contact/request or were automatically marked for the next time.

Setting them as Spam does not report them to IPS or do anything special.  It is just a status for the ticket.  It helps by not skewing reports on agent resolution, etc if you use the ticket reports.  But you could also just delete the ticket.  

I personally just use CleanTalk.  It's cut down on the contact us form spam by about 95%.  For my site, I would average 1-2 spam messages PER DAY...  now only about 1-2 a MONTH get through.  

I had a new spam ticket this morning, but it turns out it was not even from the contact us form...  it came from them emailing the support queue directly since we allow tickets to be opened via email.