Script kiddies blech! Reply to topic

Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Fedora 25 / Apache 2.4.27 / MariaDB 10.1.26 / PHP 7.1.10 / Mercurial

Yeah, 'tis always the same. Not been able to identify them as you can, but they clearly weren't intended for a cpg-nuke site. Weird url's.

Pattern match, then add to banned IP lists as "insulting the developers"?

Pro_News CM™ - Content Management for Dragonfly CMS™

Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Linux / 1.3.39 - 2.4.9 / 5.5.42 - 5.6.16 / 5.4.37 - 5.5.11 / 9.4

Not blocking IP's as they change and they even use infected personal PC's with TeamViewer on port 80 and Java.
So instead i block user agents with "Chrome/[0-2]" as Chrome is on 30+ and "Firefox/([0-1]|2[0-4]".
If you need to visit dragonflycms.org just keep your browser updated

Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Fedora 25 / Apache 2.4.27 / MariaDB 10.1.26 / PHP 7.1.10 / Mercurial

Last edited by DJ Maze on Tue Jul 01, 2014 8:50 pm; edited 1 time in total

DJ Maze wrote

Why do they keep trying to hack this website with Joomla, WordPress, PHP-Nuke, CKEditor security exploits?
I'm getting frustrated of errors piling up in the logs 😢

I manage two big sites where they try to hack every minute.

One time I put a new module working in one of these sites and I have got hundreds of hacking attempt in a half of hour.

Most of the times is for money...

But I can not understand why this site. It's a bit stupid hacking a place like this one.

Aforo - Google Earth - WebNaranja - DFcms.es

Server specs (Server OS / Apache / MySQL / PHP / DragonflyCMS):
Centos 5/Apache 2.2.3/MySQL:5.0.45/PHP:5.2.10 /9.2