Been invaded by unique Russian user registration - how to bulk delete them?

[Arne Boye-Møller]

We have nearly 400 fake russian service desk customer accounts where the names appears to be links to most likely fraudulent services.

How do we correctly delete these accounts (apparently never logged in).

Yes, we have now activated CAPTCHA.

Best regards,

Arne

[Andy Heinzer]

Sorry to hear that you are adversely impacted by this problem.  Given your description, I believe you are effected by this bug: https://jira.atlassian.com/browse/JSDSERVER-5706

There also exists a different work-around where you can run specific SQL commands to clean up the internal user directory that is listed on that bug ticket, although this rest method by Edwin looks promising as well.

I would recommend watching that bug ticket for updates on this.

[Arne Boye-Møller]

Thanks. That helped also.

[Edwin Kyalangalilwa]

Hi Arne,

Using REST API.

1. Loop through all users

   1. /rest/api/2/user/search?username=.&maxResults=1000

2. Use Regex to match

   1. @.*ru$

3. If matches, delete

   1. /rest/api/2/user?username=<username>

[Arne Boye-Møller]

Thanks.