Topic on Project:Support desk

Thousands of accounts created in last few days

4
170.199.249.136 (talkcontribs)

MySQL server crashed on Monday and in investigating a second crash today, I found that an open wiki that I host for an open group has tens of thousands of users, each with only one or two edits. The entire content of the project was edited away.

The last legitimate edit was about one month ago.

How can all changes within the past xxx hours be undone? It will take days to delete the users.

170.199.249.136 (talkcontribs)

If this is a massive task, it isn't unthinkable to revert the Main Page and cut paste the content. There were only 10-15 pages, but if there is a scriptable solution that I can implement in the future, it's nice to know about.

As the server is a solar/battery powered Raspberry PI, CPU time and RAM is pretty tight. I noticed an issue when spam mail stopped coming through the mail server. Their page loads caused Apache to consume all RAM+swap and other processes started thrashing. A beefier system would have allowed this unchecked for weeks.

170.199.249.136 (talkcontribs)

Does MediaWiki have any mechanism to remove such entries. I have over 10,000 new users that have been created. Is this a new type of attack that the developers aren't aware of yet?


Reply to "Thousands of accounts created in last few days"