Author: D.Zerkle (14 Mar 13 3:58pm)
I have a Drupal site with content creation and account creation turned off, but bots keep hitting my user/register URI (and get denied) to try to create accounts. These are not ordinary spiders, as there are no links to this URI. They created hundreds of junk accounts before I turned off self-registration.
The IP addresses are generally not showing up as problematic in the DB, but these are definitely problem bots that will clog up my user database. Does there need to be a user registration honeypot?
Some samples of bots that hit user/register: 184.108.40.206, 220.127.116.11, 18.104.22.168 (does show up), 22.214.171.124 (Google. What are they doing?), 126.96.36.199, 188.8.131.52, 184.108.40.206, and 220.127.116.11.