Not quite a DDOS but-

chpalmer

Anyone got idea's what this is? Second time it has happened in six months. Up to 12 queries a second before I decided to just turn the webpages off for the weekend. Last time it withered out after two days of me taking it down (also over the weekend)


[Sat Mar 23 11:28:58 2013] [error] [client 67.198.152.226] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
[Sat Mar 23 11:28:58 2013] [error] [client 192.154.105.245] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
[Sat Mar 23 11:28:58 2013] [error] [client 174.139.127.11] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
[Sat Mar 23 11:28:58 2013] [error] [client 199.36.73.20] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
[Sat Mar 23 11:28:58 2013] [error] [client 199.192.154.220] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
[Sat Mar 23 11:28:58 2013] [error] [client 67.198.152.226] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
[Sat Mar 23 11:28:58 2013] [error] [client 67.198.152.226] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/

cmb

Looks like referer spam.
http://en.wikipedia.org/wiki/Referer_spam

cmb

Original post edited to avoid promoting spammers' URLs.

chpalmer

@cmb:

Looks like referer spam.
http://en.wikipedia.org/wiki/Referer_spam

Thanks! Interesting that it suddenly appears so quick from so many different sources… Then it kinda rolls off after a couple of days and I won't see but one or two a week if things follow suit the same way as last time.

Firewall is nowhere close to being saturated but Id like to make sure my webserver isn't infected.