By Johnyp on

Just as of last week i've started to get registrations that looked very strange. Many of them had @cashette.com as their e-mail domain or some russian mail domain (.ru).
Non of the users have been loged in even once.

For now i've disabled user reigstrations and blocked those particular users, but i wonder if anyone has seen this or if there is known exploit/bot that allows mass registration on drupal?

I will try to get the captcha running, but that still won't block those will register by hand just so they can have an account on this drupal install.

Has anyone had this problem?
Thanks

⋅ Categories: Drupal 4.7.x

Comments

Johnyp’s picture

Johnyp commented

Also, it seems that some bots are constantly trying to create a new forum:node/add/forum/0 denied access

jfriesen’s picture

jfriesen commented

FWIW, I have a non-drupal forum (SMF) that is getting spammed by these same robots.

First, all applicants have to be approved by an admin. Then, I set rules to block those domain names, IPs, and email addresses that are obviously spam. The forums are getting hammered daily but the rules prevent them from signing up, and from the admin from even seeing most of them once they're banninated.

I'd like to know if there's something in drupal for this; captcha is not foolproof...

"Reality is what trips you up when you walk around with your eyes closed." F. Paul Wilson

divawebmistress’s picture

divawebmistress commented

Hi!

I've been getting those on my forum as well. It sucks! I first had my forum where users can create their own accounts, then I changed it to where admin has to approve them, NOW I've resorted to having "admin" creating user accounts. It's such a PAIN in the _$$!!!!!!!

How do I set the rules to block the domain names? The ones that's been coming on is viagra stuff and they are adding the links on the section where I ask about their hometown.

What is "captcha"?

I found this and installed it on my forum. Anyone has comments on it?

Well, I hope that my last resort will rid them from my site forever! Dealing with them is taking way too much of my valuable designing time.

Thanks,
Diva Webmistress

main site: http://ranchcardoso.biz
forum: http://ranchcardoso.biz/rcForum