Tracking IP + user pages suspected activities ?

Worker Joined: Mar 11, 2004 Posts: 209

Hello

After i have referers from a hackers show off site im trying to watch my site better.

I am checking tracking IPs and saw some which i cant understand so hope some one can help me .

- There is a new user which 85 hits and his logs starts like below

/modules.php?name=Your_Account&name=Your_Account&op=userinfo&bypass=1&username=JAGUAR_xxxxxx
at 2006-05-22 @ 20:01:44 after its been hit /modules.php?name=Your_Account&name=Your_Account page like 80 times till 2006-05-22 @ 20:02:22 and

/modules.php?name=Downloads&query=SCAN 121 SBC
/modules.php?name=Downloads&query=SBC SCAN 121

so if he able to register to my site how he can hit your account module so many times in 2 minutes and why? can be a innocent loop ?.Also do you know what is that sbc things .

-Another new user had the same for 1783 times

-Another user hit 396 times 390 of them for
/modules.php?name=Your_Account&name=Your_Account page and some downloads

-There are new other users whom has normal like 1-2 hits

Sentinel 2.4.2pl6

registered · Posted: Thu Jun 01, 2006 12:11 pm

This is definitely suspicious. It seems that there are spammers out there creating user ids and then automatically spamming comments and forums. This has been going on for a few weeks now and I wonder if this has anything to do with that. Unfortunately, I don't have much experience with this. Maybe someone like Evaders99 might know more.

Posted: Thu Jun 01, 2006 12:20 pm

Hi Montego

You right seems suspicious to me too but i m not good at codes and no idea whats them and how to stop .Its good, till now i dont have a spammer at my forums, comments but lookin for help or wanna know if others having this kind issues also .

Thanks

Posted: Thu Jun 01, 2006 12:46 pm

makes me wish some1 had a working flood blocker

Posted: Thu Jun 01, 2006 12:53 pm

montego wrote:

This is definitely suspicious. It seems that there are spammers out there creating user ids and then automatically spamming comments and forums. This has been going on for a few weeks now and I wonder if this has anything to do with that. Unfortunately, I don't have much experience with this. Maybe someone like Evaders99 might know more.

Ok, I was starting to think it was just MY site getting hammered.

registered · Posted: Sat Jul 08, 2006 1:23 am

I doubt it is an innocent user. The spamming attempts are pretty constant now, just like other mediums such as wikis or blogs. I have no quick fixes.. overall we need a better community based system, to stop the spread of such spam. I have tested all kinds of anti-spam blockers, with some fairly good results. I hope to work on the underlying architecture for a system to be pro-active, reactive, and fairly intelligent Smile