View Issue Details

IDProjectCategoryView StatusLast Update
5619Composrsecurityloggingpublic2024-08-04 22:49
ReporterPDStig Assigned ToPDStig  
PrioritynormalSeverityfeature 
Status assignedResolutionopen 
Summary5619: Scamalytics integration
DescriptionI think it would be useful to integrate the Scamalytics API into Composr.

https://scamalytics.com

It could be a new item on the investigate user page (Scamalytics would not be queried automatically, but an admin can click to query). There could also perhaps be a configuration option allowing site admins to specify whether or not to do a Scamalytics lookup on any IP addresses that trigger a hack attack and include the results in the hack attack message.

We might also consider the option to use Scamalytics in the antispam. However, we would strongly advise against this due to potential false-positives and because it would significantly increase the number of queries performed.

Composr should cache Scamalytics lookups to reduce API query hits as Scamalytics only allows a certain number of queries per month. Perhaps set the cache lifetime to 1 week.
TagsRoadmap: Sponsorship, Roadmap: v11 partial implementation
Attach Tags
Time estimation (hours)
Sponsorship open

Sponsor

Date Added Member Amount Sponsored

Activities

PDStig

2024-02-21 03:37

administrator   ~8343

For v11 at least, I think all I'm going to do is just include a link to perform an IP lookup directly on their site (from investigate user). Their site gives a lot of useful information which I'm unsure is included in the API itself.

PDStig

2024-03-30 14:48

administrator   ~8496

Marking as sponsorship. While I'm planning to do the above comment (simple link to the site), if anyone wants deeper API integration of scamalytics, they should sponsor this issue.

Chris Graham

2024-08-04 22:49

administrator   ~9094

Given this is a commercial service, I'd only really want to see it integrated as a non-bundled addon (aforementioned simple link is okay). Possibly new hook(s) would need implementing to allow that kind of thing to work.

Add Note

View Status
Note
Upload Files
Maximum size: 32,768 KiB

Attach files by dragging & dropping, selecting or pasting them.
You are not logged in You are not logged in. This means you will not get any e-mail notifications. And if you reply, we will not know for sure you are the original poster of the issue.

Issue History

Date Modified Username Field Change
2024-02-21 03:26 PDStig New Issue
2024-02-21 03:26 PDStig Status Not Assigned => Assigned
2024-02-21 03:26 PDStig Assigned To => user4172
2024-02-21 03:26 PDStig Description Updated
2024-02-21 03:28 PDStig Description Updated
2024-02-21 03:36 PDStig Tag Attached: Roadmap: v11 partial implementation
2024-02-21 03:37 PDStig Note Added: 0008343
2024-03-30 14:47 PDStig Tag Attached: Roadmap: Sponsorship
2024-03-30 14:48 PDStig Note Added: 0008496
2024-08-04 22:49 Chris Graham Note Added: 0009094