WordPress.org

Ready to get started?Download WordPress

Forums

[resolved] [closed] My Websit flooded with new users (11 posts)

  1. dbodnariuc
    Member
    Posted 3 years ago #

    Hi there,

    My website was flooded with new users. I got in 24 hours about 200 new users and I used to have only a couple of new users every week.
    What is strange is that they don't even appear on my javascript tracking method, (google analytics). I only have 50 visits for today and 200 new subscribers. ?!?

    By default any new user has subscriber role (subscribe plugin enabled). I also enabled, when I first sow the sudden increase, captcha on comments for logged-in users, and comments are subject to approval for all kinf of users.

    I would like to understand what could trigger this sudden increase of users. At some point someone sent me an email requesting permision to post "high quality articles" on my blog. I replied that I am interested, who wouldn't be, and inform them on the terms. I was to approve any submited articles and make sure they are originals and not copies of other articles on Internet. I asked the person to register and once that done I was to change their role to contributor. This might have triggered the flood of new users.

    I have reCaptcha enabled, Akismet enabled and Bad Behaviour enabled and I could see in my log that I had a lot of filtered hits. When I realized that the flood will not stop I just disabled the registration. These new users seem like spammers, do they realy took their time to register? They have a Captcha to pass and email to check and confirm the registration. There seems to be a lot of direct hits on /wp-cron.php?doing_wp_cron. Is this normal?

    If anyone has any clue what happened and how could this be avoided, please help. Any suggestion is good.

    Dorian

    PS: I use WassUp as log viewer. and my website is: Dorian's Blog for Internet Businesses

  2. Alex and Anthony
    Member
    Posted 3 years ago #

    Looks like bots are registering on your website, simple captcha methods can be cracked by bots. I recomend you use SI CAPTCHA Anti-Spam http://wordpress.org/extend/plugins/si-captcha-for-wordpress/ This stops the bot registrations if you enable registration captcha
    after you install it go to Plugins > SI Captcha Options and check off "enable CAPTCHA on the register form" then click "Update Options"

  3. dbodnariuc
    Member
    Posted 3 years ago #

    Thanks for the answer. I left the site without the registration option and had to register a couple of users manually. No big deal. I installed si capcha but didn't activate it yet. I will reactivate the registration when I have more time to watch the site.

  4. noyz319
    Member
    Posted 3 years ago #

    Problem is reCAPTCHA was cracked a few weeks ago, so it no longer works. My site's have also been flooded with spam-bot registrations since the crack was found. SI CAPTCHA, as with the official reCAPTCHA plugin are both no help.

    It's ugly and option-less (not even an option to disable/enable it separately for registration/comments), but "Animal Captcha" it's the only plugin that seems to be stopping the bot registers at this time. Hopefully google patches up reCAPTCHA to make it usable again.

  5. If can find any trend with the registrations, like an email domain, I highly recommend Ban Hammer. It basically applies your comment blacklist to new user registrations.

    http://wordpress.org/extend/plugins/ban-hammer/

  6. dbodnariuc
    Member
    Posted 3 years ago #

    Thanks for the answer.
    I just disabled the registration option and I do it manually on a per request basis.
    It works fine for my blog, i don't have too many users anyway.
    I guess the new spam-bot registration were tried in the hope that commenting was allowed for registered users. I disabled that since and any comment is held for approval.
    The site was open for this kind of spamming for one day. I was lucky they didn't act on time.

  7. bonoix
    Member
    Posted 3 years ago #

    I had the same thing happen today. Suddenly hundreds of new users appear and they all have names like bill@sellyourhouse.com.

    Does it matter if they register as long as the spam filters keep them from commenting? Is it a danger for them to exist on your site?

  8. Alex and Anthony
    Member
    Posted 3 years ago #

    They aren't dangerous to have but they are a nuisance knowing there not real people, and taking up space.

  9. Sy_cricket
    Member
    Posted 2 years ago #

    I'm getting spammed by spurious New Users now for past three days. Has anything else changed in the system?

  10. esmi
    Forum Moderator
    Posted 2 years ago #

    Please post a new topic.

  11. Sy_cricket
    Member
    Posted 2 years ago #

    unsubscribe me

Topic Closed

This topic has been closed to new replies.

About this Topic