Theme editor

Signup abuse detection and blocking

Signup abuse detection and blocking

Signup abuse detection and blocking 1.20.3

💲XF 2.3 Add-ons · by Staraddons · StarAddons Verified Vendor
2 Downloads 98 Views 8 Version
From (simple) multiple accounts detection to isp/connection fingerprinting with score-based moderati
Price
Free
Available
Download

Overview Version (8) Discussion (8)

  • Signup abuse detection and blocking
    Signup abuse detection and blocking
    From (simple) multiple accounts detection to isp/connection fingerprinting with score-based moderati
    signup
    signup abuse detection
    signup abuse detection and blocking
    About this resource
    From (simple) multiple accounts detection to isp/connection fingerprinting with score-based moderating/rejecting logic. These are very effective low-hanging fruit at reducing spam.

    Supports migration configuration from the following XF1 add-ons;
    • TPU Spam Detect
    • Alter ego Detector
    See the FAQ Known Issues for known limitations. This is not a turn-key solution, and each site may require customization!

    For multiple account detection, supports reporting to reports/threads. And will send reports to the same report/thread. To send to thread you must select the "Multi-account to thread" extra.

    For connection fingerprinting more additional information is collected and recorded on the account.

    Note; Configuration defaults are conservative, aimed at blocking VPNs and proxies. There are a large number of configuration options for this add-on!

    Link content spam checking

    Instead of adding the spam phrases http:///https:// which generate lots of false positives; this allows controlling how links are treated by the content spam checker;
    • Explicitly allow URLs with a given domain
    • Explicitly moderate URLs with a given domain
    • Explicitly reject URLs with a given domain
    • Default allow/moderate/reject for unclassified URLs
    Multiple account handling permissions
    • Bypass multiple account checking
    • Can enable / disable alerting for user
    • Can enable / disable alerting for log
    • View reportings.
    Use Multiple account to thread add-on to send multiple account reports to threads.

    Signup abuse detection and blocking
  • Version
    1.20.3 Stable Available Feb 12, 2026 · 1
    File size: 1 MB
    SHA-256: a88ff9bfe48936336cfddddb9a1066a0b224939e742b9d2f71e3a64fbb57338f
    SHA-256 verified Package valid Compatibility checked Last verified:
    • Fix internal server error (Unsupported operand types: int + string) that could occur depending on what exact spam check results a new account has
    1.20.1 Stable Available Feb 10, 2026 · 1
    File size: 1 MB
    SHA-256: e7cc14b06ab8e0d20e008be22aa93955acdf7d2d579b4d1f538461051c334656
    SHA-256 verified Package valid Compatibility checked Last verified:
    • Add "Mute any Get IP Intel score if Apple iCloud relay is detected" option to apply relay detection configuration, and enable by default
    1.20.0 Stable Available Feb 7, 2026 · 0
    File size: 1,016.6 KB
    SHA-256: ca0c58fa03239307c5dae08ca1884d91b97d2351b84422e481c3efeef3f1bdcf
    SHA-256 verified Package valid Compatibility checked Last verified:
    • Fix XF2.3.9+ & XF2.2.18 compatibility
    • Update geoip2/geoip2 to v2.13, improve extendibility of who & which MaxMind database files are fetched.
    • Add additional information about a login when the 2fa email is sent to the user
      • Best effort to extract the browser/operating system from the user agent
      • Add the country the login was seen from (May report "Tor" if CloudFlare is used to indicate access via Tor)
    • Add Mute any ASN score if apple icloud relay is detected option to apply relay detection configuration, and enable by default
    1.19.0 Stable Available Jan 11, 2026 · 0
    File size: 512.3 KB
    SHA-256: fb6ed12bda1a86432be0f64c66813ec881887ddce459dfef3cf7de6c4df7d8db
    SHA-256 verified Package valid Compatibility checked Last verified:
    • Fix link for toggling multi-account logging on/off would generate a bad link if the user had been deleted in a report
    • Fix "Users => Anti-spam" admincp group didn't show for non-superadmins
    • Fix case where anti-spam admin permission was assigned but not working for non-superadmins
    • Add Apple Relay detection for registration spam detection (default enable, with a score of 3)
    1.18.2 Stable Available Dec 29, 2025 · 0
    File size: 515.2 KB
    SHA-256: 8e1131bf3603a495afd34656bcf269673cde9ded1262a13f97d89e15c0822513
    SHA-256 verified Package valid Compatibility checked Last verified:
    • Fix "ticket_spam_block() error: Cannot call fastUpdate until the entity is saved" when using @Naz 's Tickets
    1.18.1 Stable Available Dec 20, 2025 · 0
    File size: 515.2 KB
    SHA-256: 8b2e0d193921f668530eec1c20190afc56ee181bb9387e63d7c045ab3d1b7a5b
    SHA-256 verified Package valid Compatibility checked Last verified:
    • In approval queue when showing "Shared IP with banned user" or "Shared IP with rejected user", link to the user record.
      Note; only applies to new signups
    • Add "On login; Force two-step authentication if unknown ISP for user" option (default: false).
      This feature requires Password Tools v3.12.0+
    1.17.2 Stable Available Oct 27, 2025 · 0
    File size: 504.1 KB
    SHA-256: 0ec68244d7aa03fb4c41c597d05c1d62134287ebc45fbe6a1d544719b4e86287
    SHA-256 verified Package valid Compatibility checked Last verified:
    • Fix XF2.1 support
    • Fix missed removal of assert() usage for improve XF cloud compatibility
    1.17.1 Stable Available Oct 21, 2025 · 0
    File size: 516.5 KB
    SHA-256: 3aae5a6ac1882c5c08e6cd4ac45a73b1fa404a302838a7292395235d23ebb45c
    SHA-256 verified Package valid Compatibility checked Last verified:
    From (simple) multiple accounts detection to isp/connection fingerprinting with score-based moderating/rejecting logic. These are very effective low-hanging fruit at reducing spam.

    Supports migration configuration from the following XF1 add-ons;
    • TPU Spam Detect
    • Alter ego Detector
    See the FAQ Known Issues for known limitations. This is not a turn-key solution, and each site may require customization!

    For multiple account detection, supports reporting to reports/threads. And will send reports to the same report/thread. To send to thread you must select the "Multi-account to thread" extra.

    For connection fingerprinting more additional information is collected and recorded on the account.

    Note; Configuration defaults are conservative, aimed at blocking VPNs and proxies. There are a large number of configuration options for this add-on!

    Link content spam checking

    Instead of adding the spam phrases http:///https:// which generate lots of false positives; this allows controlling how links are treated by the content spam checker;
    • Explicitly allow URLs with a given domain
    • Explicitly moderate URLs with a given domain
    • Explicitly reject URLs with a given domain
    • Default allow/moderate/reject for unclassified URLs
    Multiple account handling permissions
    • Bypass multiple account checking
    • Can enable / disable alerting for user
    • Can enable / disable alerting for log
    • View reportings.
    Use Multiple account to thread add-on to send multiple account reports to threads.

    View attachment 252
  • Discussion

    This resource has a discussion thread on the forum where you can ask questions, report issues, and talk with the author and other users.

    Join the discussion (8)

Resource information
Category 💲XF 2.3 Add-ons
Author Staraddons
Date Oct 21, 2025
Latest version 1.20.3
SHA-256 a88ff9bfe48936336cfddddb9a1066a0b224939e742b9d2f71e3a64fbb57338f
Security
File integrity SHA-256 verified
SHA-256
a88ff9bfe48936336cfddddb9a1066a0b224939e742b9d2f71e3a64fbb57338f
How to verify this file
Statistics
Views 98
Downloads 2
Version 8
Developer
Staraddons
Resource author
More resources
Back
Top