I noticed today that 30 people or so registered to my Joomla site (I don't expose a registration/login form), most of them appear to be spammers/bots, somehow they must've found a way to register via hidden URLs. All of these users are disabled (the default) but what's bothering me is that some of these users are in the group
Notably there are the users with emails
firstname.lastname@example.org. If you google for these addresses, you can find a bunch of sites - they seem to be other Joomla installations that have been hacked or something like that?
I am really not sure what to make out of this. The
Activated checkboxes in the Joomla admin panel are both disabled for all these, i.e. show red crosses. Can these users still do harm in any way? Should I be worried?
I wasn't sure whether to post this here, in the Joomla SE or security SE. Hope it's ok here.