Take the 2-minute tour ×
WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.

I maintain a blog for a friend of mine. It's basically an aggregater of videos from other embeddable video sites, and provides a way for users to comment on those videos. Not really high-value content, but it's a suitable placeholder until we come up with a better concept for what to do with what is arguably a pretty-valuable domain name.

Commenting is open without registering ... but for the most part commenting activity is very, very low.

Over the past week the site has seen a spike in Wordpress new-user enrollment. These new users haven't commented on any of the videos, or interacted with the site in any other noticeable way, but they're all enrolling with .pl (Poland) email addresses, and not a single one of them has commented after enrolling. I also haven't noticed anything in my analytics that leads me to believe this is due to a referral link.

So what gives?

Why would users register with a blog only to not do anything with that account? Has anybody had this experience with a coordinated wave of user-registrations that led to something malicious? I've locked down commenting so that they'll only show up on the site after approval, but I'm just trying to plan ahead for what may be a coordinated attack, and would like to know if anybody has experienced this trend with sites they've operated.

share|improve this question
add comment

2 Answers 2

Sometimes people who run these bots or do this manual are paid for the amount of accounts they create. So the more accounts they create the more rewards they get.

Only after such a run the list goes to the original client who then uses the list of accounts to perform (comment) spam runs or whatever he thinks is needed.

So this can be a reason why you first get a load of accounts created and then later by someone else other actions.

share|improve this answer
add comment

To break this down:

  • If this is potential security issue? Unlikely.

  • Do bots register for a reason? Maybe, maybe not. It can just as well be some fluke, bots often do weird things just-because.

  • What to do? Nothing except cleaning up fake accounts. Close registration if you don't really need it.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.