node/add - what's the deal?

WillowDigit's picture

Hi to all,

I have a site that is constantly being probed with node/add (request denied). Registration requires email verification and includes a CAPTCHA. These node/add requests come from both registered and unregistered users. There are at least 20 new registrations a day (I keep blocking their IP addresses) and just as many or more probes. It's been going on for a month now. Can anyone explain to me the logic and intentions behind this?



Uneducated guess...

catchlight's picture

I'm not sure what the baddies are trying to achieve by doing this either, but my guess is that they are hoping that one day you'll accidentally change their application for for an account from blocked to active by accident. Thus, giving them an automated email granting them access to the site. Not sure, not a spammer! But this seems to be a common Drupal problem. :)