[Mediawiki-l] Am I under attack?

=James Birkholz= j.birchwood at verizon.net
Mon Jun 27 03:58:30 UTC 2005


I've just hacked in a "Pages Visited" logging system into my website, both 
the wiki and the non-wiki sections.

Below is a partial dump of the early loggings, and my question is should I 
be concerned about the entries that include URIs that have things like:
title=-&action=raw&gen=js
title=MediaWiki:Monobook.css&action=raw&ctype=text
title=-&action=raw&gen=css

? These are coming from an IP that isn't generating other "normal" page 
requests (192.122.250.250)
Is someone trying to hack me? It doesn't seem like something that might be 
a normal (but hidden) part of the wiki's internal workings...

       71.96.165.69      /GenWiki/index.php title=Special:Recentchanges 
2005-06-26 20:27:54
       71.96.165.69      /GenWiki/index.php title=Catholic_parish_of_Slupy 
2005-06-26 20:28:22
       71.96.165.69      /GenWiki/index.php title=Catholic_parish_of_Slupy 
2005-06-26 20:28:22
       68.142.250.112  /GenWiki/index.php 
title=Community_of_Zieliniec%2C_Kreis_Posen+Ost 2005-06-26 20:29:01
       68.142.250.112  /GenWiki/index.php 
title=Community_of_Zieliniec%2C_Kreis_Posen_Ost 2005-06-26 20:29:01
       68.142.250.112 /GenWiki/index.php 
title=Community_of_Zieliniec%2C_Kreis_Posen_Ost 2005-06-26 20:29:02
       192.122.250.250 /GenWiki/index.php title=-&action=raw&gen=js 
2005-06-26 20:34:27
       192.122.250.250 /GenWiki/index.php 
title=MediaWiki:Monobook.css&action=raw&ctype=text 2005-06-26 20:34:31
       80.239.38.65     /RschrDsply.php      Researcher=789 2005-06-26 
20:35:09
       192.122.250.250 /GenWiki/index.php title=-&action=raw&gen=css 
2005-06-26 20:35:16
       71.96.165.69      /RschrLst.php          startsWith=Recent 
2005-06-26 20:35:44


James Birkholz
administrator (Betreuer der), Posen-EN mailing list & website
http://www.Posen-L.com & http://www.birchy.com/GenWiki




More information about the MediaWiki-l mailing list