Repeat registration attempts from same IP

[mjames]

For the last few weeks, I have noticed failed new registration attempts by what seems like a bot. I receive a handful of error e-mails each night from the same IP that is trying to register various random usernames. However, they are not successful because e-mail verification is enabled. What puzzles me is I have image verification enabled and I have banned the IP. What is going on?

Example:

<[email protected]>:
216.218.158.109 does not like recipient.
Remote host said: 550 <[email protected]>: User unknown in local recipient table
Giving up on 216.218.158.109.

<[email protected]>:
216.218.158.109 does not like recipient.
Remote host said: 550 <[email protected]>: User unknown in local recipient table
Giving up on 216.218.158.109.

[Steve Machol]

That means the user does not exist at that domain. Real people can register with phony email addresses too.

[conqsoft]

Do a Google search on "cashette.com". LOTS of strange activity from e-mail addresses at that domain in the recent past.

[mjames]

I agree, but the fact that I received NINE failure notice e-mails from the same IP/domain overnight all at the same time (2:03 AM) raises my suspicions. And I received several at the same time the day before, and before that, etc. It seems like bot behavior...

[mjames]

For now, I will ban @cashette.com and see if that eliminates this.