Forum Potential Security issue - Recieving new user registration emails when no user created
 

Hi,

I'm looking for some advice please. We have recently had a problem with a massive influx of spam user registrations. I had the human verification set to the GD style images.

The first change I made was going to the reCaptcha, which solved part of the problem. I no longer got any new users being created.

However... Despite the fact that no new spam users appear on the forums, I still keep getting emails saying that new users have signed up. However these users do not exist when I go into the user search or the "New registrations".

I have since tried adding Spam-o-Matic and bad-behaviour plugins both of which appear to be working and blocking some of the spam as well as the captcha. Though none of these are stopping the emails.

They seem to come through in groups of 6-8 all at the same time, then there will be a gap of anything from 10 minutes to several hours. Then I get another batch of emails.

vBulletin is fully up to date (PL3), as is all of the programs on the server on which it runs. I have confirmed the emails are from vBulletin, and not coming externally.

Any help would be greatly appreciated.