Support

 Hi, yesterday i see on one site (Not use admintools) 3000 registered users. I don´t have users there i delete all the users and install admintools configure firewall today i see the logs and say 506 failed login.
What can be? a spambot? a vulnerability on somewere? i updte everithiing ad have the firewall now bt i need know to prevent on other sites. Thanks.

Yes it is a bot. You can not stop it, but you can keep it from being able to log in and you can automatically clean up after it.

First, under Users Configuration, set "New User Account Activation" to "Self". That will send a confirmation to the email address that the bot uses for the registration, the email contains a link that has to be clicked to complete the registration. Since the bot uses a phony email address and can not click on a link, the registration never completes. No one can log in with that user.

Next edit the System - Admin Tools plugin. Near the bottom, change "Delete inactive users" to "Only if they haven't activated their account" and change "Delete after this many days" to "1". This will automatically delete all of the unactivated user accounts after one day.

Many Thanks. On this site i put the user registration on No i don´t need users on the site.
But you tip works on another site to cleanup the user database . Many thanks.

You are welcome!