I have a number of spammers showing up on my forum trying to register all the time - dozens every day - we block 99% of them but they must have a scruipts that throws a 500 server
I'd like to look for a partial string and not get an email notification - here the error I'm getting can I somehow look for "GET /image.php?type=hv&hash=" and not have an email sent to me? thanks in advance. 2013 May 28 10:46:44 Received From: (dot-42) 77.38.221.82->/usr/local/website-logs/mysite_access.log Rule: 31122 fired (level 5) -> "Web server 500 error code (Internal Error)." Portion of the log(s): 117.26.202.249 - - [28/May/2013:12:47:39 -0400] "GET /image.php?type=hv&hash=1a13e59cbc94d1701e139ef552e0e0c1 HTTP/1.1" 500 - " http://www.mysite.com/forums/register.php/"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;)" -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
