Someone creating fake users every day. How to block?

  • Resolved jekka12

    (@jekka12)


    3 years, 3 months ago

    Good day!

    I have a problem. I’m using Wordfence free version on my website and someone or hacked or doing himself this annoying thing every day – creating fake users like:

    uxpjlesHgEdCvibZ or

    wUoWJriShMpxEdFI

    I’m blocking their usernames for signing in and deleting from users list but everyday I’m getting new users again. How to find their IP so I could block? Or there’s other way how to stop this?

    And the thing is that the website is under maintenance right now so it seems that someone is just hacking.

    Thank you.
    Jekaterina

    • This topic was modified 3 years, 3 months ago by jekka12.

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @jekka12, thanks for reaching out to us.

    If the fake users have “Administrator” roles, please tell me immediately as we may need to provide you with site cleaning instructions.

    However, if they have a lesser user level such as “Subscriber”, sometimes the WordPress registration page can be targeted by bots. The best way to combat this on a site in maintenance mode or a non-live state could be to uncheck WordPress > Settings > General > Membership > Anyone can register, or enable reCAPTCHA in Wordfence > Login Security > Settings so that the default WordPress registration page can only be used by humans.

    Let me know how you get on!

    Peter.

    Thread Starter jekka12

    (@jekka12)

    Hi there!

    Looks like 2FA helps because for about a week I don’t have any new fake users registered.
    Users always registered as subscribers.

    Thanks!

    • This reply was modified 3 years, 3 months ago by jekka12.
Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Someone creating fake users every day. How to block?’ is closed to new replies.