Hallo,

I'm watching the drug spammer on and on ...

67.154.54.242 - - [18/Dec/2009:19:29:45 +0100] "GET 
/Wiki/index.php?title=Special:UserLogin&type=signup HTTP/1.1" 302 - "-" 
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.1) Gecko/20061204 
Firefox/2.0.0.1"
67.154.54.242 - - [18/Dec/2009:19:29:45 +0100] "GET 
/Wiki/index.php?title=Spezial:Anmelden&type=signup HTTP/1.1" 200 9529 "-" 
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.1) Gecko/20061204 
Firefox/2.0.0.1"
67.154.54.242 - - [18/Dec/2009:19:29:48 +0100] "GET 
/Wiki/index.php?title=User:Online_Pharmacy_Azelaic_Acid_Generic_Azelex&action=edit
 HTTP/1.1" 200 12333 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; 
rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1"

confuses me a bit: "Special:UserLogin" leads to "302" (blocked), but  
"Spezial:Anmelden" leads to "200" (success).

Ok - I don't know if the spammer uses the same login string both times.  
But that looks like an incomplete barrier.

There is only one extension running (I'm trying what is necessary):
"PaddwordReset".

-------------------
By the way: sometimes "Special:Contributions" is visited by the spammer  
- I can't find the german name and location of this side.

Viele Gruesse!
Helmut

_______________________________________________
MediaWiki-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply via email to