Ghost User Registrations

Resolved rusty10
(@rusty10)

9 years, 3 months ago

Hello. I am receiving many email notices of website user registrations. This happens once in a while, second time this year. I don’t know what is going on.

I have no user registration on the site. I have no newsletter thing or subscription anything.

I do have a simple Contact Form 7 with a Captcha and All in One Website Security plugin.

What’s got me confused is where are these registrations coming from, how are they entered into my admin security user registrations? There are no sign ups on the site.

Could someone unknown be registering email address in to my site security from a remote location? How could they do this? I’m baffled. Thanks for any info or assist.

Viewing 7 replies - 1 through 7 (of 7 total)

Thread Starter rusty10
(@rusty10)

9 years, 3 months ago

One more thing. I attempted deleting of the registrations yet they keep coming back or won’t delete from my admin. I’m just scratching my head on this one?

ccorleyjd
(@ccorleyjd)

9 years, 3 months ago

My webhost technical people found that one of my plug-ins had allowed this type of phantom user and one of them had facilitated a complete hack of three blogsites and my main page. Therefore, I encourage you to look at your plug-ins and consider that one of your plug-ins is the problem. It’s kept my site down for a week and cost me well-spent funds to get the tech folks to clean my site. Good luck.

Moderator t-p
(@t-p)

9 years, 3 months ago

– We have a few recommendations at https://codex.ww.wp.xz.cn/Combating_Comment_Spam
– consider a plugin like https://ww.wp.xz.cn/plugins/akismet/
or
https://ww.wp.xz.cn/plugins/stop-spammer-registrations-plugin/
– Also, harden WP: http://codex.ww.wp.xz.cn/Hardening_WordPress

Thread Starter rusty10
(@rusty10)

9 years, 3 months ago

Thanks t-p but I don’t have any comment or registration forms on the site.

So far the only thing that’s helped is taking the site completely offline.

I’ve been deactivating plugins one at a time in an attempt to isolate the one that’s being used to attack. It’s not All In One Security, not Yoast SEO, not Sassy Social.

Moderator t-p
(@t-p)

9 years, 3 months ago

– consider a plugin like https://ww.wp.xz.cn/plugins/akismet/
or
https://ww.wp.xz.cn/plugins/stop-spammer-registrations-plugin/
– Also, harden WP: http://codex.ww.wp.xz.cn/Hardening_WordPress

Thread Starter rusty10
(@rusty10)

9 years, 3 months ago

If you get this issue Do this:

Buy CleanTalk plugin – good people there, very helpful.
Disable “Anyone can register” feature in WordPress admin settings.
Also you may want to restrict access via .htaccess to the WP login/register page. The bots love it and anyone can type in your domain’s WordPress registration url, every WordPress site has one. Not everybody using WordPress knows this.

Thanks for input guys! You are appreciated.

Moderator t-p
(@t-p)

9 years, 3 months ago

Glad to know it 🙂

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Ghost User Registrations’ is closed to new replies.

Ghost User Registrations

Tags

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics