Create Account Issues

[Barks]

I've got someone bombarding my site with a script that is signing up as rogue users which contains the following :

firstname: Егор->

lastname : https://drive.google.com/file/d/0B2NsK5-axAtWWVZ4TEhXd2pNOFk/preview

I'm guessing they're doing this from the "create account" page as they're filling up my database... 

What can I do to stop it ?  I suspect that the ip address is changing, so an IP block might not be the answer.  They've sent out 10,000 emails and my email provider has blocked me from sending email now.... Grrrr

Any ideas ?

[Damian Culotta]

I've used an existing obsevrer that listen this event:

customer_save_before

There you can validate the lastname and thrown an exception.
Somthing like:

if (strpos($customer->getLastname(), 'drive.google.com')) {
    Mage::throwException('Spam registration');
}

[Tarandeep Singh]

@Barks:

I did handle the similar issue sometime back. Here is the list of IPs we blocked to temporarily stop the spam customer creation. 

deny from 185.154.13.60
deny from 185.154.13.54
deny from 185.203.242.133
deny from 185.154.12.78
deny from 185.154.12.209
deny from 212.86.109.164
deny from 185.209.23.43

More reliable solution to implement CAPTCHA on the registration form. You can enable the same from Magento Admin or install the plugin from Market place (FREE)  to avoid such issue to appear.

Solution @Damian Culotta will work with your particular case (fyi we had the same issue), however you can see the same issue with different details. Possibly instead of ".ru" in customer email you can see ".ch" and Chinese in first name and last name.

Problem Solved? Please give kudos and accept as solution.