In the last couple of days I experienced strange visitors on our holiday apartment site. They came through a TOR network and were trying to create users on the page. Apparently they understood that it was a Drupal site, because they had the right URL and everything.

I had never heard of TOR before, so I’m quite amazed to see visitors from the dark side of the internet. On the other hand, its a pain-in-the-butt to delete the 30+ users that they create on a normal day. Does anybody out there have experience with these types of attacks?