Hi

Try following

- Matt Becket's Spam Login Filter plugin - https://elgg.org/plugins/774755

access from spammer IP addresses is blocked -  Go to Code Repository for Elgg 3.x compatible version.

Very configurable in settings and effective.

- iionly's http:blacklist plugin - https://elgg.org/plugins/1641554

access from spammer IP addresses is blocked. Checks an IP database for that. Very effective 

- Matt Becket's Spam Throttle - https://elgg.org/plugins/821368

Beautiful idea and it works. If someone tries to spam you with a brand-new clean IP address, this plugin will spot and hammer down that spammer.As far as I know - unfortunatey - not available for Elgg 3. Still, check the code repository just in case.

And the last but not the least, it is good to use a captcha at least for registration. There are several, but iionly's captcha is google-free if you are sensitive about privacy of your users: iionly https://elgg.org/plugins/914006

Good luck

I decide recover from old-backup (I took before hypeAttachments and hypeDropzone install)

1-I careful fist take backup of current state (problem state)

2-rename data and source code directoryes to different names

3-restore data and source code directoryes from old-backup

4- run database script to restore from old-backup

5- I check owners and access rights for data and source code directories

6- I open website. Login. Flush caches and upgrade

Then I find problems:

1- In activity river previously rendered hypewall & hypeScraper images lost.

When I enter new links in hypeWall for most sites render of image work but some site not work (it worked before for them and they are in hypescraper settings),

2- A few (not many) images lost (example: an image embedded in an event entry body. When I click I get URL expired message).

Any reason you know and how I correct this? Thank you for help!

Perhaps, chown permission denied.

Try www-data instead of apache.

Use cat /etc/passwd | sed 's/\:.*//' to check.

By default,

/data www-data:www-data -R 770

/elgg localuser:localuser -R 755

I strongly suggest to stick with the LTS release of elgg

As of right now, there are far more tools/plugins/themes for the LTS release than from 3.x 

Check out this post:

https://elgg.org/discussion/view/2967226/comments-and-notifications