SID-00700: Bot Registration

Status:	Answered	TWiki version:	4.2.4	Perl version:	This is perl, v5.8.8
Category:	CategorySecurity	Server OS:	Ubuntu 8.04.2 - Kernel 2.6.24-23-generic	Last update:	16 years ago

It looks like a bot registered for my TWiki install. As admin I received the following mail:

This is an automated e-mail notification of user registration in TWiki.
AerxolF has been registered with e-mail cxvzxbvxcb@hotmail.com
Submitted content:
	*  LoginName: AerxolF
	*  FirstName: Fonter
	*  LastName: Aerxol
	*  Email: cxvzxbvxcb@hotmail.com
	*  Password: *******
	*  OrganisationName: 
	*  OrganisationURL: 
	*  Country: USA
	*  Comment: <a href="http://wiki.Clamav.Net/bin/view/Main/AerxolF">buy cipro online</a><br><a href="http://avr32linux.Org/twiki/bin/view/Main/AerxolF">buy clomid online</a>
Saved to:
http://ScottsDomain.com/twiki/bin/view/Main/AerxolF

What pages or enters should i remove to stop further invasion of my install? Is there a way to prevent this? Thanks, Scott

-- ScottFreeman - 2009-12-30

Discussion and Answer

Wiki spam is a problem with public TWiki. Please read WikiSpam and HtmlAttachmentSpam and install the BlackListPlugin.

Remove the Main.AerxolF page and the entry in twiki/data/.htpasswd

-- PeterThoeny - 2009-12-30

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.