Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.
By akakoko on
Hello,
some weeks ago I deleted a suspicious user-account and turned off the comment-module because I think somebody is trying to hack the site. Now the user is back (I think its a script) trying to login many times with his username.
I have the troll-module installed but the IP-Adress is mostly different, only the username is always the same.
What is the user/script trying? How can I prevent the user/script from login in?
Many Thanks!
Prevent user/script from login in.
Comments
take a look at access rules
take a look at access rules in admin >> users - pretty sure you can block usernames there.
Recreated the account
Thank you. I recreated the suspicious user-account, because I deleted it, and blocked it.
Take a look
At the Spam module. Is the user something like Naremanuut? He's been after one of my sites. This module is consistently blocking him, without impacting real people.
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
NancyDru
Yes, you are right, the
Yes, you are right, the username is naremann! - I installed the the spam module.
Thank you for your advice!
Need further assistance
I blocked nareman/naremann a few weeks ago, and deleted 'him' last night. Since then he has attempted to log in every ten seconds, and my site log is now a 9-page list of failed attempts.
So, one, how do I clear the log, and two, is there some way of getting the log to ignore his login attempts? Or do I have to re-create the username and then block it? Seems a poor solution...
---
new, green, and learning: that's me!
currently running at http://nunovo.org.uk/drupal/
Clearing the log
Clearing the log is done by Cron in accordance with your settings in admin/settings/error-reporting. Set the interval down lower and run Cron more frequently.
I never allowed him to create an account, he just keeps hitting me with comment spam, which gets blocked by the spam module.
I think some people do the blocked user technique. I don't know any other way.
Nancy W.
Drupal Cookbook (for New Drupallers)
Adding Hidden Design or How To notes in your database
NancyDru