Mike, out of curiosity, what seems to be motivating these attacks? Malware injections? Hacker cred? Revenge or grudge? Or just to vandalize and do damage? It seems like a LOT of effort. I am also surprised that they are using the same IP for so long and not changing proxies.
Thanx G! On Mon, May 2, 2011 at 10:42 AM, Mike Kear <afpwebwo...@gmail.com> wrote: > > As an interesting aside, the same ip address started trying to probe > my mail server a few minutes ago, and my version of cfformprotect > picked it up and added the ip address to the banned ips. Now that > same ip address is banned from using any forms on any site I > administer. > > Again, they get no feedback that they've been banned. Just seems > like they've successfully submitted a form, but in fact their > submission just gets dumped in the bitbucket and nothing gets done. > it doesn't even get to the database. The reason for not letting them > know they're banned is they can submit forms till the cows come home > and nothing will happen. It means they will be less likely to try to > find other holes in the defences to exploit. > > > Cheers > Mike Kear > Windsor, NSW, Australia > Adobe Certified Advanced ColdFusion Developer > AFP Webworks > http://afpwebworks.com > ColdFusion 9 Enterprise, PHP, ASP, ASP.NET hosting from AUD$15/month > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:344129 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
