XMPP Service Operators - 2024-11-07

Hi everyone, I finally build a script that automatically bans spammers. I have it running now since 1 day and it banned about 100 accounts in 12h. I hope that fixes the spam problem on my server now. It works by parsing ejabberd log and looking for multiple parameters (client type, using tor, flooding, ...) that I found out all spammers on my servers have. For me less than 1% of spammers are reported. They even started using the ejabberd matrix bridge

https://xmpp.07f.de/upload/0daf8769e14e15db29f265ce1080b18efef91768/9xYnKdNFR2uxzAC4sc1T1yvTpW5JE8ruZdO2D9EM/1000046893.png

very nice

/nfo marzzzello (07f.de)

That sounds really promising marzzzello! My mind immediately goes to panic about false positives with stuff like this (removing valid users instead of spammers by mistake). How confident are you that you've tackled that?

> That sounds really promising marzzzello! My mind immediately goes to panic about false positives with stuff like this (removing valid users instead of spammers by mistake). How confident are you that you've tackled that? well I banned one account by mistake but that was manually. With the script I have a better control and can inculde more parameters to make sure I only ban spammers. I calculate a score and if a threshold is reached they get banned. There are positive and negative indicators that I factor in Also the script sends me a message when someone is banned with the score and all parameters. If I see some problems I can easily adopt the script I just had to do something because everyday I get about 50 new registrations from spammers ↺

Is this a tool that would be usable by other admins? You're not the only one that's suffering from spammers, I think :)

sure maybe it needs some adoption based on your environment. It relys strongly on ejabberd logs I wrote it in Python and it's about ~400 lines

Oh, I'm personally not using ejabberd, but a bunch of other people are.

hmm, that would need very verbose logging for ejabberd, no?

> hmm, that would need very verbose logging for ejabberd, no? I've set it to info yeah ↺