1
Hi all,
Just thought I'd post the following as warning to other xoopsers and as an example of why GIJOE's Protector module is essential.
My site (see sig) was subject to a prolonged SQL-Injection/U-N-I-O-N/I-S-O-C-O-M attack (remove the "-"
) between 21:56 and 22:09hrs GMT on Sat 21st Feb 2009.
From having 5 records Protector's "Protect Centre" before the attack I ended up with 97 pages - i.e. over 1900 separate attacks on my site in 13 minutes. In logging these attacks, Protector added 1.6MB of info to my database!!
The attacks came from the following 20 IP Addresses:
157.100.84.131
75.57.78.240
200.220.152.70
66.191.15.242
81.221.124.242
24.239.114.16
89.138.185.227
189.163.170.240
157.100.84.131
68.154.238.168
98.203.45.111
70.110.131.146
84.58.78.100
75.27.147.224
69.29.224.145
76.240.47.130
68.192.254.156
75.9.141.31
189.79.232.61
24.224.103.60
I've pasted this list of IP addresses to Protector's "bad ips" file and suggest that everyone else does the same.
If ever I meet GIJOE I'm going to buy him a shed-load of beer
