What is this fucking idiot faggot thinking?
 

http://24.media.tumblr.com/a8aa43a72...1ako1_1280.jpg

That shit has been going on for days....

What are you talking about?..

NEED MORE INFO.....

My log files.....

Oh shit... let me guess... Currently Sober will be the next who enters...

I should have avoided the words "faggot" and "shit" in the title....:1orglaugh

I see its log files - I'm just not sure what 'this faggot' has done - We need more info...

BTW - I would have asked even if you had not used the 'f' word:upsidedow.....

:1orglaugh:1orglaugh

:1orglaugh:1orglaugh

Like he said - more info needed.

It's probably bot trying to find some pages on your site, god knows maybe some exploit to run on such pages...

All i know is these lines are in my log report for the last 3 days...
The line starts with "user" so i guess he aiming at a user-list?
By now he should know that he will not get that user-list...
It's not even slowing down my server... no affect at all so if it was
some kind of attack it's a pretty shitty one.

But it's still annoying someone is fucking around...
I assume he dropped dead behind his computer and this is an
automated thing cause who has time to do this shit for 3 days?

Without seeing the complete log entries it's hard to tell.

I'm going to assume that "user" is your login page like this one http://www.strugglingbabes.com/user
It appears he is either trying to attack that page to try to get access or he has access and is just using an automated download program to rip the site.

http://25.media.tumblr.com/6b5ce5ea2...5b9o1_1280.png

He's not logged in as a user so that WOULD mean he has no acces to the secured video part....
The referrer is the 18+ page???

it also says "page not found".....

Humm don?t know. The URL (location) looks like a session ID in the member?s area? Maybe members are bookmarking a session ID and trying to access that?

Dude you should see my server's CSF and fail2ban logs...last night I probably banned several hundred IPs and it's non-stop bot action trying to brute-force postfix

Lots of mod_security trips in last few days also.

cPHulk is working overtime.

Some junior Hacker wannabe must have gotten some new softs and/or new botnet access recently.

That sound reasonable. Is it the same IP every time? Are the IPs different but on some sort of proxy network?

Do you think somebody is trying to brute force guess a session id? Different session ids every time in the log?

different "session ids" yes IF this what you call a session id is a session id.
Ip's are all different...

example of ip:

IP:173.254.234.212
Decimal:2919164628
Hostname:173.254.234.212.static.quadranet.com

ISP:Web Africa Proxy
Organization:Web Africa Proxy
Services: Recently reported forum spam source. (2)

He is absolutely NOT in the members area!

That looks like a job for cloudflare.com - Assuming it is causing problems and its not just a puzzle...

Thanks i'll take a look...