Nearly 1,000 attempts to create a user account...

As I was looking at the number of users trying to create an account on one of my websites, I noticed that the reCAPTCHA counter was at about 950. This means that this one single robot tried that many times, in the last 2 weeks alone, to create an account on our website.

Robots try to do that because with an account they may then be able to add content to the website. You can imagine the type of content they're interested in adding...

Noticing that, I decided that enough was enough, and I wrote a small script that detects such attacks and blocks those IP addresses in the server firewall. This is neat. It prevents those robots from doing anything as they cannot even access any website on the site.

Not only that, the IP is blocked until I restart the firewall so, more or less, for a long time. I really don't need those people to access my system. Checking the source, it is anyway often servers that are not named (no DNS define their IP address) so in other words, not computers that common users use.

I use the iplock tool that I wrote for Snap! although it is used for Drupal at this point.