solved Spammers & Hackers etc

Ceri
Ceri
@adolygwr
8 years ago
370 posts
Everyday...3 or 4 times a day actually....I see the following url in my logs:-

/activity/log/rss?sitePageId=6652840:SitePage:10

The people concerned are usually from Romania but sometimes from Las Vegas. It's always from a different IP and when I check them, they usually don't look too good on sites like spamcop etc.

I know there is no such page on Jamroom but should I be concerned or take action of any kind?

I've given up blocking the individual IP addresses since I learned that at least one of them is associated with a bloke called Chritian Jahn ( or something like that ), a Romanian spammer who has over 4 million IP's at his disposal.

But...to repeat my question, should I be concerned or need I do anything about this?



--
Ceri Shaw - AmeriCymru

updated by @adolygwr: 05/08/16 12:17:44PM
michael
@michael
8 years ago
7,715 posts
nope.

He's fishing. Looking for some software that exists that would know what to do with that url and return a response, if it returns the response he's expecting then he would know that you are running some version of some software that has a known vulnerability in it which he's wanting to exploit.

You're not running wordpress, or whatever software he's looking for so you're good.

That URL is not one that's targeted at anything jamroom.
Ceri
Ceri
@adolygwr
8 years ago
370 posts
yeah I checked that it was a wordpress thing...just flabbergasted that these guys cant scroll to the bottom of the screen where it says "Powered by Jamroom" :)

Maybe it's an automated exploit? But thanks for putting my mind to rest anyway. I'll just let them have their 'fun" :)


--
Ceri Shaw - AmeriCymru