Welcome to Geeklog, Anonymous Saturday, April 19 2025 @ 09:07 pm EDT

Geeklog Forums

Anonymous users posting comments

Post New Reply

Author:

Mood:

Code

Font Color Font Size Close Tags

Forum BBCode Help

BBCode	Effect
[b]bolded text[/b]	bolded text
[i]italicized text[/i]	italicized text
[u]underlined text[/u]	underlined text
[s]strikethrough text[/s]	strikethrough text
[img]http://www.site.com/forum/images/forum.png[/img] OR [img h=65 w=50]http://www.site.com/forum/images/forum.png[/img]
[url=https://www.geeklog.net]Geeklog[/url]	Geeklog
[quote]quoted text[/quote]	To quote: quoted text
[size=15]Your Text[/size] "12" is usually standard on message boards. Usually measured in pixels (px).	Your Text
[color=red]Red Text[/color] OR [color=#FF0000]Red Text[/color] Can use many different color names or hex codes.	Red Text
[list] []List item 1 []List item 2 [/list] OR [list=1] []List item 1 []List item 2 [/list]	List item 1 List item 2 List item 1 List item 2
[code]monospaced text[/code]	monospaced text
[code=XYX]formatted code[/code] Where XYZ can be any of the following: c css html4strict java javascript jquery perl php plain python SQL and many more...	formatted code
To enter a backslash (\) in your post, use \\\\	\

Subject

[QUOTE][u]Quote by: Marites[/u][p]Our log for yesterday 30 May was 390,000 lines so I took a 3 hour period and checked comment postings with the relevant entry in the access log. These are the IP addresses noted in that time. It looks to me as if the person is using proxies as the log from the 29th is using a different list of IP's.

To those who run sites aimed at family audiences I suggest you dump the database and delete the messages 
from there (if you feel confident) as the items that list in the 'What's New' only show some of the postings.

When examining my database I found many porno, iffy postings, some with code and so on. Luckily we do have a custom script and can delete field content.

My concern is all these items seem to have been poted with uid 2.

With the speed that multiple items are posted to 4 domains within 2 seconds of each other it does seem like there is a script out there that can do this for them.

I have also found that the items choosen have all been listed by Google.

It is a very worrying situation.

I find that 3 of our sites are running 1.3.9 and 1 1.3.8, stangely the 1.3.8 site has had the least attacks - I have updated the comment.php in each as suggested by Dirk.

I will not waiting and see what happens.

Tess

[QUOTE]
69.5.72.104 epocketworks.com - 41 postings
dsl81-215-3442.adsl.ttnet.net.tr a IIS site under construction - 21 postings
117_pc6.ntcb.edu.tw - 18 postings
80.58.9.44.proxycache.rima-tde.net - 112 postings
200.48.218.178 - 6 postings
alfaproxy.pai.net.pl - 11 postings
216.157.225.37 - 3 postings
207.230.66.18 - 86 postings
host194-206.pool8016.interbusiness.it - 41 postings
203.162.3.146 - 12 postings
194.27.49.2 - 2 postings
12.36.104.2 - 61 postings
22.47.30.61.isp.tfn.net.tw - 91 postings
68.152.252.74 - 7 postings
[/QUOTE][/p][/QUOTE]

Options:

HTML Mode

Geeklog Forums

Search

Resources

About

Getting started

Support

Development

Topics

User Functions

What's New

Articles last 4 weeks

Comments last 4 weeks

Pages last 4 weeks

Links last 4 weeks

Downloads last 4 weeks