Drupal — Abuse & Scraping
Bot traffic, scraping, enumeration — separating real users from resource-eaters.
Drupal contact / webform submission spike — telling spam from real engagement
Your Drupal site is fine — but your inbox isn't. Since roughly 03:00 UTC, the contact form has been firing one notification email every 4 seconds.…
Read guide →
Drupal REST/JSON:API enumeration attempts — how to detect them
Your Drupal site is up. The status page is green. Pageviews on the dashboard look slightly elevated but nothing alarming.…
Read guide →
Drupal site under backdoor probing — detecting webshell scanners and known-CMS probes
You opened the access log this morning and the screen would not stop scrolling. Hundreds of 404s a minute, all for files that have never existed on a Drupal sit…
Read guide →
Why is my Drupal site getting WordPress scanner traffic? (and what to do about it)
You run a Drupal site. You don't run WordPress. You've never run WordPress. And yet your nginx access log is full of this: 185.220.101.42 - - [27/Apr/2026:14:03…
Read guide →
