: Why do we get bot registrations with fake data on a site where you can't post content? I run an ecommerce site where users need to sign up in order to make bookings for our transportation

@Berumen354

Bots and spammers find sites and forms by crawling and looking for known software. Usually a snippet of text or a meta tag or any consistent identifier. This usually applies to blog and forum software.

humans in poor parts of the world under cheap labour also look for forms that are easily exploitable as well as bots and adds them to a database. This usually applies to custom registration and contact forms.

All of this information is usually sold by spammers for money.

Bots/automated tools can try so many forms in a short period of time
for free so it makes sense for them to target absolutely everything.
Basically, any form is a potential target to bots and spammers as is
any page that accepts user input.

You can prevent them by tricking the bot within the form by using a
fake field that only bots will see. Then once this has been submitted
you can ignore it.

Another way you can prevent them is by adding a question to the form
or a bot field question such as "Click the image that contains a
car". Something only a human can answer in order for the form to be
submitted.

You can also look at repeated submissions from the same IP address and block/ ignore these forms as well.

Vote Up Vote Down

@Connie744

The internet is wide open to anyone to do anything. Some of those are tests by crackers to see how far they can get with your site. Some are hobbyists playing with software just to see what happens. Who knows?

Vote Up Vote Down