• caglararli@hotmail.com
  • 05386281520

Is this a strange kind of attack? Creating random users on a website but never show interaction [closed]

Çağlar Arlı      -    23 Views

Is this a strange kind of attack? Creating random users on a website but never show interaction [closed]

For a few years now I have witnessed the following type of "attack" on my website (which is an online service used by companies and individuals):

The "attacker" creates user account using random strings a first name/last name like these:

yErYTxBmSXbP OQnNfbHKYGJVC
iWrlpLQGqOFua vVBtJioLpNcTdYX
yCtIZEoxqu mATbPazZOtou
GQrFbfmOdLDYKt AMCUhXsuI
sckhuRqNtlg ZwkYXdNSVUm
...

The emails used for the account creation is not a random string but something that looks like a real email address.

Once the accounts have been created, there is no further interaction. No login, not even a single visit. The "attacker" uses a different ip address every single time (could be spoofed, of course). Also, the attacks always create 10 accounts within 30 seconds. Then, a few hours later, the next batch of 10 accounts is created (by a different IP address).

This has been going on for years and I have failed to get my head around why this is happening and what the goal of this attack might be. It can't be a DDoS because there is no significant traffic generated. The website does not get any other traffic from said IP addresses.

Has anybody witnessed anything similar to this?