More Hacking / Span on the DNN sites;
Last Post 07/16/2014 1:52 PM by Joseph Craig. 6 Replies.
Author Messages
ollep
Nuke Master
Nuke Master
Posts:456


--
07/15/2014 3:50 PM
    Hello,

    It has come to our attention that your site "designerfashion-boutique.com" is being attacked by bots via the user registration.
    Thousands of users are being signed up to the site in order to send spam message to the associated email addresses.

    Please take a look at this article for assistance with resolving this issue:
    http://www.dnnsoftware.com/communit...istrations

    We have had to turn off the site as we received too many complaints regarding performance.
    We can add access to the site from your IP temporarily to make the changes to the dnn and you can connect remotely from sql management studio to your database to cleanup up the invalid users.

    Please let us know if you have any questions and provide us with your IP so we can add it to the site access list.

    Thank you,
    ResellerChoice Support
    ollep
    Nuke Master
    Nuke Master
    Posts:456


    --
    07/15/2014 3:53 PM

    Just about to read the article Resellers provided.

    Any other ideas about actions to prevent all this crap.
    Seem to be some new spamming / hacking every day lately.

    Either it's spam commenting on blogs or it's spam registration.

    "HELP"

    Cheers

    Olle...



    Joseph Craig
    DNN MVP
    Posts:11667


    --
    07/15/2014 5:44 PM
    The DNN Blog article is a useful one. People are also expecting a better solution from DNN, so we're all holding our breath.

    If you have a subscription to DNNHero.com, Aderson Olivera has a nice set of tutorials, too.

    If you are getting hit hard ... turn off Registration all together if that is possible. Also, if you can narrow the source of the problem to a range of IP addresses (see the Site Log or your Google Analytics, you can have those blocked by IIS with your host's cooperations.

    Joe Craig, Patapsco Research Group
    Complete DNN Support
    ollep
    Nuke Master
    Nuke Master
    Posts:456


    --
    07/16/2014 3:46 AM
    Thanks Joe.
    Yes I put registrations to "NONE".

    And yes, they "Hit Real Hard" this time.

    4,500 pages of registrations!!!!!!!!!!!!!!

    What's the best way to get rid of them?
    Database access tool?

    If I delete all users with a simple query, will that effect "super User / Host" and admin?

    Cheers Joe...

    Olle...




    Joseph Craig
    DNN MVP
    Posts:11667


    --
    07/16/2014 7:20 AM
    Did the new registrations happen after setting to NONE, or after?

    If you have a script to delete users, it should not affect host or admin users unless your script deletes them, too.

    Whatever you do, do it on a copy of the site and, when it is done, move that to live.

    Joe Craig, Patapsco Research Group
    Complete DNN Support
    Aderson Oliveira
    Nuke Active Member
    Nuke Active Member
    Posts:35


    --
    07/16/2014 7:59 AM
    Hi Olle,

    We have a good video on this topic:
    2 Strategies on how to deal with DNN Registration Spam

    You will be able to keep registration active and open but avoid spammers. This video will also show you how to get rid of the spam registrations already on your site.

    Best regards,
    Aderson
    Aderson Oliveira
    DotNetNuke Consultant - 1800DNN.com
    Joseph Craig
    DNN MVP
    Posts:11667


    --
    07/16/2014 1:52 PM

    Joe Craig, Patapsco Research Group
    Complete DNN Support


    ---