Access attempts

the wizkids let loose?

[Staffa]

Anybody else seeing a marked increase of attempts to access form mail scripts?

The last two weeks I've had a good number of attempts and repeat attempts. They always come in bunches of three to six and 1 to 2 seconds apart. All IPs in one bunch are different but that's neither here or there. Some IP numbers have been used 4 times now.

I don't use any of these scripts but I find it very annoying to watch them try.

Any thoughts? Thanks

[keyplyr]

Yes, an ongoing nuisance.

[larryhatch]

Same thing here.
I used to see those, bogus formmail attempts etc.
Then it went away for a while, and now its back.
I presume its email spammers looking for address lists.
- Larry

[Staffa]

Thank you guys, I needed a bit of moral support. Ready to carry on again :o)

[incrediBILL]

Yep, I see them too, amid other things that would make the hair stand up on the back of your neck.

A 16oz. gin and tonic seems to make it more tolerable.

[piskie]

I put a file or 2 up for them with plain text explaining that I thought they were "Nosey Buggers"

[pmkpmk]

There's a significant increase over the last couple of days. What's funny though is, that the requests come in quick blasts, but all from different IP adresses. This means that someone has set his botnet of hijacked dialup-PC's onto the task. I guess we are facing a major wave of attacks to webservers vulnerable to it within days or weeks. What we see today are just the scouts...

@piskie: Useless. Those are automated scripts which simply check if the thing is there or not. Nobody will ever see your page, because the second set of scripts which exploits the vulnerability is automated as well.

[larryhatch]

At one time I put up a few misnamed / renamed image files for the spammers to feed on.
That way they didn't go away empty handed. - Larry

[walrus]

I seeing them daily now, i made a post with a few of
the offending ips but the mods yanked it. I thought it was okay cause ive seen them in other htaccess info in the forum but i guess mayb i was breaking the tos.
PS My apologies to WW, im going to go reread the tos right now.

[pmkpmk]

Those IP's are of no use since they most likely belong to innocent 3rd parties, who'se only fault is that their PC is vulnerable to viruses and/or spyware.

[walrus]

Thanks for clarifying that, I really have to be more careful when posting cause im just getting familiar with tracking and log analysis and ive made this mistake once here already.