Just a heads up: On March 24, 2025, starting at 4:30pm CDT / 19:30 UTC, the site will be undergoing scheduled maintenance for a few hours. During this time, the site might be unavailable for a short while. Thanks for your patience.
×We suddenly get roughly 50 spam comments per day on our Confluence documentation site where we allow anonymous comments. The comments consist of keywords (e.g. "coach purse store ...") plus a list of URLs. We have captcha enabled but it doesn't help. It also seems like the spam comes from multiple IP addresses so blocking on IP does not seem to be a solution.
Is there a plugin that can analyze comment text before it is saved and filter out spam? I've looked but cannot find anything.
If not, what is the URL for posting a comment? I've analyzed the access log but cannot figure out which URL corresponds to "save comment"? I would expect it to be a POST request, but nothing seems to match. If I knew the pattern for a "save comment" request I may be able to develop my own ServletFilter and handle this.
I would appreciate any hints because it's getting really time consuming to clean upp this mess every day.
Best Regards,
Hans
Hi Hans,
Could this help you out? : https://confluence.atlassian.com/display/DOC/Configuring+Captcha+for+Spam+Prevention
Best regards,
Peter
Thanks for the pointer Florin. I have added my comment to the thread where Atlassian says they will not consider doing naything about this to show that there are others interested in this. I hope others do the same.
Peter, we have captcha enabled but it doesn't help. Please see the link Floring posted.
Thanks,
Hans
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You can find a similar discussion here: https://answers.atlassian.com/questions/251285/captcha-bypassaed
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Hans,
Do you have Captcha turned on for your Confluence instance?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Atlassian Government Cloud has achieved FedRAMP Authorization at the Moderate level! Join our webinar to learn how you can accelerate mission success and move work forward faster in cloud, all while ensuring your critical data is secure.
Register Now
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.