CiviCRM Community Forums (archive)

We are encountering a large number of username requests that are clearly bogus.   

They take the form of a request for a login to drupal/civicrm where
the username is some random string  (e.g. kuhdesgv)
The name is malformed (e.g.:   "Velvet Cancino Waldo Bartlet ")
Address is clearly outside of our service area (e.g.   Virgin Islands, North Dakota, ...)

They don't get in because the accounts are blocked by default and I never enable them.   However, it's a nuisance since Civicrm automatically adds them to the contacts, creating a pollution that has be deleted. 

Longer term, I've disabled via Drupal the ability to request a login.  It's annoying that our legitimate users can not employ the "request a login" form any more.

My question:   Does anyone know what is really going on here?  Are they looking for some exploit?