1
Hi all,
Just thought I'd post the following as warning to other xoopsers and as an example of why GIJOE's Protector module is essential.
My site (see sig) was subject to a prolonged SQL-Injection/U-N-I-O-N/I-S-O-C-O-M attack (remove the "-"
) between 21:56 and 22:09hrs GMT on Sat 21st Feb 2009.
From having 5 records Protector's "Protect Centre" before the attack I ended up with 97 pages - i.e. over 1900 separate attacks on my site in 13 minutes. In logging these attacks, Protector added 1.6MB of info to my database!!
The attacks came from the following 20 IP Addresses:
le="color: #000000"><?php 157.100.84.131 75.57.78.240 200.220.152.70 66.191.15.242 81.221.124.242 24.239.114.16 89.138.185.227 189.163.170.240 157.100.84.131 68.154.238.168 98.203.45.111 70.110.131.146 84.58.78.100 75.27.147.224 69.29.224.145 76.240.47.130 68.192.254.156 75.9.141.31 189.79.232.61 24.224.103.60
I've pasted this list of IP addresses to Protector's "bad ips" file and suggest that everyone else does the same.
If ever I meet GIJOE I'm going to buy him a shed-load of beer
