[server-admins] Forum junk accounts

[DM Smith]

While I was working on Jira today, I noticed that there are a lot of 
failed attempts to create forum accounts. Most of the names look 
entirely bogus. They are repeated many times. Often from the same ip.

Interestingly the registration page has captcha. This should have 
prevented junk accounts. I'm guessing that there is an api that can be 
directly called that doesn't require captcha.

I looked at the "who's online" page and its mostly search bots. Again 
just guessing, these junk accounts are relying on bot harvesting.

I'm wondering whether we can turn off robots?

Also noticed there's a newer version than we are running.

-- DM