: How to handle spammy registrations (mostly yandex) (tens in couple of days) We have deployed beta version of our web page (Django) on Digital Ocean VPS. The problem is that week ago started

@LarsenBagley505

You can do a lot of things. What works for you is dependent on your situation.


Live with it.
In a dev version, having IP restrictions and/or additional HTTP auth might be perfectly acceptable. This could even work in production in some cases.
You could try to alter your login/registration process so that it doesn't look like a standard (Django) login process for scanners anymore.
In the same direction, you can alter the login/registration process with a very lightweight "captcha" by just adding another input field that is non-standard and can't be answered by the bots without being adapted to your site. Something like "What's the color of grass?" can be astonishingly effective as long as you have a relatively unknown site that doesn't get targeted directly.
Using a captcha. Unfortunately, most captchas are broken and for a good one you end up feeding your visitor data to Google.
Some combination of the above.

Vote Up Vote Down