View Single Post
  #4  
Old 02-03-2009, 02:34 AM
kato13's Avatar
kato13 kato13 is online now
Administrator
 
Join Date: May 2007
Location: Chicago, Il USA
Posts: 3,656
Send a message via ICQ to kato13
Default

We get attacked by spam registration bots about 40-70 times a day. They really batter themselves against our outer walls. I'll take a look at the logs but it might just have been chance that so many hit us at once, or a single attacker assumed I was blocking bad IP addresses so he tried a dozen to see if any get through.


Edit
that was a weird one. 15 IPs in 2 minutes.

76.117.254.95 - - [02/Feb/2009:10:59:27 -0600] "POST /register.php HTTP/1.0" 200 13435
71.92.100.111 - - [02/Feb/2009:10:59:31 -0600] "POST /register.php HTTP/1.0" 200 13435
76.115.51.29 - - [02/Feb/2009:10:59:34 -0600] "POST /register.php HTTP/1.0" 200 13435
76.120.183.120 - - [02/Feb/2009:10:59:47 -0600] "POST /register.php HTTP/1.0" 200 13435
65.25.25.13 - - [02/Feb/2009:10:59:59 -0600] "POST /register.php HTTP/1.0" 200 13435
99.29.194.195 - - [02/Feb/2009:11:00:09 -0600] "POST /register.php HTTP/1.0" 200 13435
76.177.203.93 - - [02/Feb/2009:11:00:12 -0600] "POST /register.php HTTP/1.0" 200 13435
72.135.217.205 - - [02/Feb/2009:11:00:17 -0600] "POST /register.php HTTP/1.0" 200 13435
71.91.35.63 - - [02/Feb/2009:11:00:20 -0600] "POST /register.php HTTP/1.0" 200 13435
68.115.84.125 - - [02/Feb/2009:11:00:27 -0600] "POST /register.php HTTP/1.0" 200 13435
65.30.40.205 - - [02/Feb/2009:11:00:32 -0600] "POST /register.php HTTP/1.0" 200 13435
69.212.40.47 - - [02/Feb/2009:11:00:41 -0600] "POST /register.php HTTP/1.0" 200 13435
68.71.64.157 - - [02/Feb/2009:11:00:53 -0600] "POST /register.php HTTP/1.0" 200 13435
24.174.174.137 - - [02/Feb/2009:11:01:09 -0600] "POST /register.php HTTP/1.0" 200 13435
76.24.100.156 - - [02/Feb/2009:11:01:12 -0600] "POST /register.php HTTP/1.0" 200 13435

Last edited by kato13; 02-03-2009 at 02:50 AM.
Reply With Quote