Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

Quick Links


Categories

In this Discussion

› › Preventing Spam Orders in WHMCS
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Preventing Spam Orders in WHMCS

UchihaUchiha Member
in Help

I've been encountering a problem with spammers creating accounts on my site and placing orders using temporary emails. I'm currently using WHMCS. Is there a specific method within WHMCS or any other effective way to prevent this spam activity? Thanks in advance for your help!

Comments

  • tentortentor Member, Patron Provider

    Captcha

  • EthernetServersEthernetServers Member, Patron Provider

    If these are automated signups, have you considered enabling captcha on the Shopping Cart Checkout and Client Registration pages?

  • UchihaUchiha Member

    @EthernetServers said: If these are automated signups

    Yeah, I don't use CAPTCHA because I dislike it, but I'm considering enabling it. However, I think these orders are manually processed

  • tentortentor Member, Patron Provider
    edited November 2023

    @Uchiha said: I think these orders are manually processed

    Nowadays, bots mimic real browsers well enough

    We had ticket spam (using web interface) few month ago and were forced to force our visitors to login to have ability to create ticket. Even captcha was not sufficient :disappointed:

    Thanked by 3sasslik crunchbits 0xC7
  • DavidAtInfraveoCloudDavidAtInfraveoCloud Member, Patron Provider

    Now-a-days people uses 2captcha for google recaptchas. Dirt cheap.

    Using maxmind really helps along with setting auto discarding orders which are not paid within 60 minutes or so.

  • LeviLevi Member

    Best and time proven filter is to set high price. Low end is doomed to spam, scam etc.

    Thanked by 1MannDude
  • UchihaUchiha Member

    @tentor said: Nowadays, bots mimic real browsers well enough

    You're right, I think. When I checked the customer using Fraudrecord, I saw they've been involved in spam since 2012, even recently. WTF!

  • tentortentor Member, Patron Provider

    @Uchiha said:

    @tentor said: Nowadays, bots mimic real browsers well enough

    You're right, I think. When I checked the customer using Fraudrecord, I saw they've been involved in spam since 2012, even recently. WTF!

    Have you checked if the IP address (during registration/last login) is public proxy like Tor? I suspect it is.

  • UchihaUchiha Member

    @tentor said: Have you checked if the IP address

    Can you tell me how to check it, please?

  • tentortentor Member, Patron Provider

    @Uchiha said:

    @tentor said: Have you checked if the IP address

    Can you tell me how to check it, please?

    wget -O tor-exit.lst "https://github.com/SecOps-Institute/Tor-IP-Addresses/blob/master/tor-exit-nodes.lst"
grep -e IP tor-exit.lst

    If IP address is IPv6 it may require adjust your format to be able to find it in the list

  • nullednulled Member

    Choke them out with CIDRAM https://github.com/CIDRAM/CIDRAM

  • tjntjn Member

    @nulled said:
    Choke them out with CIDRAM https://github.com/CIDRAM/CIDRAM

    Never heard of this, anyone else using it?

  • blackblack Member

    Checking IPs for malicious / automated activity would probably help. If it's email specific, there are lists of disposable email domains on github. Make sure the list matches with the temp emails you're seeing in your WHMCS.

  • nullednulled Member

    Install it and play around with it, you can filter on a huge multitude of variables.

    It is especially useful on shared hosting where you don't control the machine firewall.

    @tjn said:

    @nulled said:
    Choke them out with CIDRAM https://github.com/CIDRAM/CIDRAM

    Never heard of this, anyone else using it?

Sign In or Register to comment.