Bogus Customer Registrations -- Hacker attempts

Over the past week I have been hit with dozens and dozens of bogus registrations.
Customer names are random strings of letters. There is what appears to be a valid email address, but doubtful they are real. Customer type is listed as Reseller, which is impossible because the customer type default is Default and only i can change customer type.

Anyone experiencing this issue?
Any suggestions for next steps?
OC 4.0.2.2 harbor-sales.com

GAdrfZtB svhvePUMgB francisco.espinoza@piveg.com Reseller Enabled 02/25/2025
pFIdZWMq NFRXAulPpL balampakimuskan@gmail.com Reseller Enabled 02/25/2025
mAmFFNGvh VnWgUCEdtkNp fleetcommo@hotmail.com Reseller Enabled 02/25/2025
JhjTGehAmZX MKTnHYHzhxwn joshuadevega15@gmail.com Reseller Enabled 02/25/2025
mrYLNXJDis vfHkNhRAHIRT elliottnatelie@gmail.com Reseller Enabled 02/25/2025
XfPJWcHLsOEoS oxpaprQslCJBy t2tsqd@gmail.com Reseller Enabled 02/25/2025
ttWwaHndLgRiTT lxiadiPaA kylebryant040@gmail.com Reseller Enabled 02/25/2025
YqaVUvNfSwsR irkJgSqt markina@gmail.com Reseller Enabled 02/25/2025
aDjfpXHIaWfpNZC NKPbTnmt janalynn76@gmail.com Reseller Enabled 02/25/2025
aPpeWKDvspNfipO UThZiucHBBte info@dutchmill.co.uk Reseller Enabled 02/25/2025
qMmUcYBTKHr vsQQLrYFDzTo mkeene@athenahealth.com Reseller Enabled 02/25/2025
UnqHfNDKbnjUAz cmXAKcDLA mau.rgl@gmail.com Reseller Enabled 02/25/2025
zQZvBrUSOO ZVXbBzepGmPXOjt j2m24l82@gmail.com Reseller Enabled 02/25/2025

Probably just a bot. Adding some form of CAPTCHA may help. Looking at your web access logs may tell you more.

Are you using any extension that changes the customer accounts or is Reseller just a customer group?

DaveRiba wrote: ↑

Wed Feb 26, 2025 12:12 pm

Any suggestions for next steps?

https://www.opencart.com/index.php?rout ... er=antropy

DaveRiba wrote: ↑

Wed Feb 26, 2025 12:12 pm

OC 4.0.2.2

Ahh our extension won't work for that version and most top devs don't recommend OC 4 yet.

Our SpamBot Buster should be able to help you here, preventing fake customer registrations from spambots.

I have SpamBot Buster 2.5.3 installed. Is there a setting to control this behavior?

DaveRiba wrote: ↑

Wed Feb 26, 2025 11:42 pm

I have SpamBot Buster 2.5.3 installed. Is there a setting to control this behavior?

Try the latest Version 2.5.9. To upgrade, do these steps:
1) Save the oc_spambot DB table via PHPMyAdmin
2) Uninstall the old SpamBot Buster
3) Install the latest 2.5.9 version and configure it
4) Restore the oc_spambot DB table from step 1)

Recommended settings:
Block Session: Yes
Incidents: 3
Honey Trap field name: <enter a name of your choice>
Check Form Scripts: Yes (assuming you are using a standard-compliant web theme)
Debug Log: Yes
Status: Enabled