Your account script info

Posted: Thu Dec 06, 2012 8:01 pm

I usually go through IP logs daily, to see where all referrers and guests are going, and came by this and unsure what they where trying to do here:

Code:

/modules.php?name=Your_Account&&__csrf_magic=sid:c3d0e8b6f02e07966be207b7895ad04d5035678f,1354570921;ip:26d9c54daefc34676c906db078b6ba889f8fd8d1,1354570921&username=craigwhitelyzcq&gfx_check=!UNKNOWN_TYPE!&op=login&submit=Login

Posted: Fri Dec 07, 2012 8:22 am

They are probably trying to login using an automated program. The gfx_check entry indicates that they can't fill out the CAPTCHA. Despite claims that some hack scripts can read CAPTCHAs, I have not seen that in practice. Generally automated login programs will fail on the CAPTCHA entry ... which is a good thing.

Posted: Fri Dec 07, 2012 3:24 pm

So is this something to take action too?
Maybe add it to Nuke Sentinels script ran to ban?
Searched through logs again, and found multiple IPs running this script.

Code:

/modules.php?name=Your_Account&&__csrf_magic=sid:7c48db8cdf08dbbf1ef150396971a98230b56f42,1354809825;ip:08907491c1ef9401cdff31b51955fde47fa99733,1354809825&username=beliteaijjualoe&gfx_check=!UNKNOWN_TYPE!&op=login&submit=Login

Code:

/modules.php?name=Your_Account&&__csrf_magic=sid:922e015011c86a25d43a311fc053ce38d57dbc70,1354611378;ip:b9fb3534f5b381a2afea4f5a82f7ac28f5e1b2c0,1354611378&username=craigwhitelyzcq&gfx_check=!UNKNOWN_TYPE!&op=login&submit=Login