Hi All, I've been running my web server for a week or two now, and I'm getting accessed by, at present, 13 unique IP addresses other than my own IP when I test the server using a D7 thick client program. One access sequence is particularly disturbing because it seems to be time spaced in a variable way, and the user never accesses web pages - just logs in and then out immediately after.
Here's a section of the log my Indy HTTPServer program made: User logged in 24.130.81.58:1730 at 7/18/2006 10:56:21 AM User logged out at 7/18/2006 10:56:21 AM User logged in 24.130.81.58:1741 at 7/18/2006 10:56:21 AM User logged out at 7/18/2006 10:56:22 AM User logged in 24.130.81.58:2659 at 7/18/2006 11:07:52 AM User logged out at 7/18/2006 11:07:52 AM User logged in 24.130.81.58:2677 at 7/18/2006 11:07:52 AM User logged out at 7/18/2006 11:07:52 AM User logged in 24.130.81.58:3304 at 7/18/2006 11:25:57 AM User logged out at 7/18/2006 11:25:57 AM User logged in 24.130.81.58:3332 at 7/18/2006 11:25:57 AM User logged out at 7/18/2006 11:25:57 AM Note that 10:56:21 AM plus 00:11:30 gets to 11:07:52 AM, plus another 00:18:05 gets to 11:25:57 AM. So the time lags between accesses seem long enough to be a human hacker rather than a web bot scanning for sites. Also, the 13 IPs my HTTPServer logs include some (see the "*"s) which have accessed multiple times: http://124.0.90.2 http://132.248.133.225 http://24.10.33.13 http://24.111.87.129 http://24.130.201 http://24.130.201.47 * http://24.130.80.56 http://24.130.81.58 * http://24.163.81.123 http://24.207.242.67 http://24.210.196.74 http://24.24.174.20 http://24.98.49.155 * Does anyone recognize this kind of pattern? Thanks, Rich _______________________________________________ Delphi mailing list -> Delphi@elists.org http://www.elists.org/mailman/listinfo/delphi
