Not quite a DDOS but-



  • Anyone got idea's what this is?   Second time it has happened in six months.  Up to 12 queries a second before I decided to just turn the webpages off for the weekend.  Last time it withered out after two days of me taking it down (also over the weekend)

    
    [Sat Mar 23 11:28:58 2013] [error] [client 67.198.152.226] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
    [Sat Mar 23 11:28:58 2013] [error] [client 192.154.105.245] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
    [Sat Mar 23 11:28:58 2013] [error] [client 174.139.127.11] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
    [Sat Mar 23 11:28:58 2013] [error] [client 199.36.73.20] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
    [Sat Mar 23 11:28:58 2013] [error] [client 199.192.154.220] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
    [Sat Mar 23 11:28:58 2013] [error] [client 67.198.152.226] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
    [Sat Mar 23 11:28:58 2013] [error] [client 67.198.152.226] File does not exist: C:/wamp/www/TagPublish, referer: http://spam-removed/
    
    




  • Original post edited to avoid promoting spammers' URLs.



  • @cmb:

    Looks like referer spam.
    http://en.wikipedia.org/wiki/Referer_spam

    Thanks!  Interesting that it suddenly appears so quick from so many different sources… Then it kinda rolls off after a couple of days and I won't see but one or two a week if things follow suit the same way as last time.

    Firewall is nowhere close to being saturated but Id like to make sure my webserver isn't infected.


Locked