Ticket #821 (new maintenance)
Projects forms being hammered by Spam
| Reported by: | ed | Owned by: | sam |
|---|---|---|---|
| Priority: | critical | Milestone: | Maintenance |
| Component: | Drupal modules & settings | Keywords: | |
| Cc: | chris, annesley, paul, ade | Estimated Number of Hours: | 0.0 |
| Add Hours to Ticket: | 0 | Billable?: | yes |
| Total Hours: | 1.39 |
Description
Projects forms being hammered by spammers. I got 24 in the last 45 minutes.
What to do?
- Lock off to a certain type of user?
?
Adding Sam as owner to follow this up
Change History
comment:2 Changed 23 months ago by ed
They can add to the forms as pre-authenticated users. Drupal forms - to create projects.
comment:3 Changed 23 months ago by chris
That should make it quite easy to identify the user accounts that are spamming and disable them?
comment:4 Changed 23 months ago by chris
- Add Hours to Ticket changed from 0.0 to 0.33
- Total Hours changed from 0.0 to 0.33
These are the top abusers today:
- 110.139.90.201 - 31 POSTs
- 117.207.181.216 - 13 POSTs
- 182.72.107.78 - 46 POSTs
- 206.217.196.129 - 9 POSTs
- 223.225.203.240 - 7 POSTs
- 36.84.143.237 - 9 POSTs
- 50.115.127.36 - 10 POSTs
These were found using this command line:
grep "/var/log/nginx/node/add/project-profile" access.log | grep "POST /node/add/project-profile" | sort | vim -
There are others with smaller numbers of POSTs, it does look like a botnet based attack, the IPs are from all around the world and they are using different User Agent strings. I suggest:
- Blocking these IP addresses using IP tables
- At a Drupal level trying to find the user(s) accounts use for the spam and then suspend them and try and contact the owners of the accounts to tell them their accounts have been compromised.
Have there been any legitimate submissions using this form today?
Ed, are you happy with me doing 1.?
These are the logs that result from the above grep:
"110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:07:13 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96116 11092 97036 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.150 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:07:39 +0000] "POST /node/add/project-profile HTTP/1.0" 200 112683 11239 113603 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.779 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:08:55 +0000] "POST /node/add/project-profile HTTP/1.0" 200 123070 16647 123990 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.259 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:11:48 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 16290 1009 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.460 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:26:05 +0000] "POST /node/add/project-profile HTTP/1.0" 200 105348 80940 106268 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.330 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:27:09 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 16020 1018 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.676 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:49:06 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 54319 1010 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.491 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:00:34 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 17841 1033 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 8.867 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:10:26 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 17930 1030 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.404 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:15:33 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 15628 1013 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.445 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:25:10 +0000] "POST /node/add/project-profile HTTP/1.0" 200 103529 16145 104449 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.987 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:25:37 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 15953 1020 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.260 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:30:37 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 16575 1026 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.260 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:41:19 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 16096 1019 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.393 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:02:42 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 17780 1029 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.385 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:12:50 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 17348 1035 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.431 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:25:58 +0000] "POST /node/add/project-profile HTTP/1.0" 200 103626 16116 104546 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.952 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:26:30 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 16315 1021 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.323 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:35:56 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14532 1010 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.620 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:40:45 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 16912 1030 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.401 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:47:11 +0000] "POST /node/add/project-profile HTTP/1.0" 200 103009 15630 103929 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.035 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:49:08 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 15375 1019 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.401 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:54:01 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 15164 1013 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.306 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:07:23 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 15100 1012 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.440 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:11:52 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14725 1007 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.382 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:17:16 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14540 1013 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.355 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:23:30 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 15528 1018 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.281 "-" "110.139.90.201, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:08:31 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14342 734 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0" 2.482 "-" "110.139.90.201, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:15:54 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12100 1015 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0" 2.446 "-" "110.139.90.201, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:22:46 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 16617 1030 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0" 2.368 "-" "110.139.90.201, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:44:01 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96162 11773 97082 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0" 0.984 "-" "110.139.90.201, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:44:28 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11806 1009 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0" 2.346 "-" "115.118.236.124, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:12:33 +0000] "POST /node/add/project-profile HTTP/1.0" 200 97666 12895 98586 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.941 "-" "115.118.236.124, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:14:09 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12982 1016 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.354 "-" "115.118.236.124, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:17:40 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12048 1018 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.392 "-" "115.118.236.124, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:20:43 +0000] "POST /node/add/project-profile HTTP/1.0" 200 100261 15296 101181 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.142 "-" "115.118.236.124, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:21:13 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 15229 1015 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.460 "-" "115.118.236.124, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:26:08 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 15910 1023 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.347 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:28:35 +0000] "POST /node/add/project-profile HTTP/1.0" 200 115627 12168 116547 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.347 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:29:42 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13362 997 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.215 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:56:52 +0000] "POST /node/add/project-profile HTTP/1.0" 200 95033 11062 95953 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.875 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:57:32 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11077 1000 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.333 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:09:24 +0000] "POST /node/add/project-profile HTTP/1.0" 200 94737 10476 95657 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.904 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:10:26 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 10726 990 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.316 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:16:18 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 10903 992 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.220 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:22:51 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 10750 993 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.257 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:29:00 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11288 1004 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.288 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:41:23 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11964 1026 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.265 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:50:16 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12147 1025 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 11.929 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:55:40 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11929 1030 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.343 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:02:35 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 10162 1007 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.604 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:13:03 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14476 1011 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.419 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:06:35:20 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 52939 986 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.707 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:06:39:18 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 39195 991 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.215 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:06:43:29 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 46292 993 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.392 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:06:53:38 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 51299 1003 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.379 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:06:57:41 +0000] "POST /node/add/project-profile HTTP/1.0" 200 95520 11447 96440 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 1.425 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:02:33 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 50308 1002 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.559 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:11:57 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 39896 996 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.207 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:12:52 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11577 1006 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.222 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:16:43 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96992 12208 97912 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 1.255 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:16:56 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12476 753 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.512 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:17:22 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 43189 989 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.400 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:24:51 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 10772 1014 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.268 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:28:26 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14210 1006 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.287 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:29:47 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 46235 980 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.294 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:33:45 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11168 1009 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.310 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:36:42 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11637 1025 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.334 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:39:15 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 38186 999 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.373 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:46:53 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 42398 984 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.297 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:01:10 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 36918 995 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.304 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:08:38 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 45521 1006 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.398 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:12:56 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 55914 1006 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.513 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:24:05 +0000] "POST /node/add/project-profile HTTP/1.0" 200 94602 11346 95522 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 0.983 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:24:32 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11671 1011 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.222 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:28:33 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12458 1013 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.386 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:33:45 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11522 1026 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.273 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:37:54 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12225 1018 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.284 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:40:50 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14116 732 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.404 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:46:08 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13031 1017 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.323 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:49:34 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12409 1008 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.416 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:55:09 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14236 1026 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 3.121 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:03:32 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13003 1003 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.386 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:20:30 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11943 1008 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.423 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:26:10 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11858 1008 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.386 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:30:47 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12258 1020 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.544 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:37:33 +0000] "POST /node/add/project-profile HTTP/1.0" 200 91652 8854 92572 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 0.924 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:38:16 +0000] "POST /node/add/project-profile HTTP/1.0" 200 91754 9102 92674 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 0.986 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:38:34 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 9132 1018 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.243 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:44:48 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 9743 1016 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.284 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:50:20 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96493 12427 97413 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 1.088 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:52:00 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11165 1014 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.227 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:53:49 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12613 1008 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.397 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:57:37 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13832 1009 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.376 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:02:52 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11391 1016 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.336 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:03:14 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11553 1010 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.347 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:07:36 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 16718 1011 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.425 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:13:17 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12588 1010 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.411 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:18:28 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 10657 1014 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.329 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:22:09 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 8392 1010 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 2.286 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:27:29 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 10464 1010 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.275 "-" "206.190.136.246, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:26:15 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96148 12260 97068 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.965 "-" "206.190.136.246, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:27:06 +0000] "POST /node/add/project-profile HTTP/1.0" 200 115098 12339 116018 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.425 "-" "206.190.136.246, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:27:58 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13607 1026 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.269 "-" "206.190.136.246, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:39:52 +0000] "POST /node/add/project-profile HTTP/1.0" 200 95739 11774 96659 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.917 "-" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:42:30 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20733 19036 21679 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.155 "4.74" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:48:10 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23500 13226 24446 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.460 "5.04" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:50:43 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23511 14698 24457 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.344 "5.06" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:51:00 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14697 1027 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 2.396 "-" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:05:55 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20883 13202 21829 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.160 "4.74" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:06:38 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23086 13345 24032 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.561 "5.08" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:08:26 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23098 14660 24044 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.328 "5.09" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:10:28 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23126 14668 24072 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 14.831 "5.10" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:13:08 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23108 14580 24054 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.452 "5.09" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:13:33 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14579 1024 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 2.559 "-" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:22:32 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12942 1027 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 2.317 "-" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:29:19 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20513 12919 21459 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 0.980 "4.76" "209.197.26.73, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:06:56:05 +0000] "POST /node/add/project-profile HTTP/1.0" 200 95907 11174 96827 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 1.367 "-" "209.197.26.73, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:06:56:26 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11390 1000 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 2.551 "-" "223.225.203.240, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:33:10 +0000] "POST /node/add/project-profile HTTP/1.0" 200 83144 7714 84064 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.906 "-" "223.225.203.240, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:34:23 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 8266 979 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.723 "-" "223.225.203.240, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:38:14 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12937 1038 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.277 "-" "223.225.203.240, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:41:46 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12730 1033 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.382 "-" "223.225.203.240, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:50:14 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12883 1028 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 10.499 "-" "223.225.203.240, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:52:36 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13376 1028 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.289 "-" "223.225.203.240, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:57:36 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12939 1039 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.392 "-" "36.79.222.42, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:54:38 +0000] "POST /node/add/project-profile HTTP/1.0" 200 112376 11235 113296 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 5.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.366 "-" "36.79.222.42, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:54:40 +0000] "POST /node/add/project-profile HTTP/1.0" 499 0 11113 0 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 5.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.225 "-" "36.79.222.42, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:55:12 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12577 1012 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 5.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 2.468 "-" "36.82.27.226, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:09:07 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 15010 1029 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0" 2.334 "-" "36.82.27.226, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:28:49 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 14074 1023 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0" 2.364 "-" "36.82.27.226, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:39:38 +0000] "POST /node/add/project-profile HTTP/1.0" 200 97442 13030 98362 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0" 0.919 "-" "36.82.27.226, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:40:26 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13228 1025 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0" 3.971 "-" "36.84.12.223, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:18:37 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11318 1000 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.274 "-" "36.84.12.223, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:19:59 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11458 993 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.301 "-" "36.84.12.223, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:22:52 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13212 1012 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.313 "-" "36.84.12.223, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:24:13 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11179 998 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.261 "-" "36.84.12.223, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:25:46 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20790 12031 21736 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.081 "4.70" "36.84.12.223, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:26:02 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12224 729 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.608 "-" "36.84.12.223, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:28:51 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11261 995 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.301 "-" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:59:00 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20458 13233 21404 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.940 "4.78" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:00:01 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13335 1004 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.352 "-" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:04:33 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 10835 993 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.239 "-" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:06:41 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11180 998 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.382 "-" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:08:30 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11084 995 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.282 "-" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:09:59 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11740 1003 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.411 "-" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:11:38 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12023 1009 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.335 "-" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:14:33 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11110 997 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.344 "-" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:16:09 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11670 1005 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.352 "-" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:51:21 +0000] "POST /node/add/project-profile HTTP/1.0" 200 21304 11761 22250 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.270 "4.64" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:51:50 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20962 11904 21908 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.102 "4.65" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:52:17 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20935 11899 21881 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.954 "4.66" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:53:16 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20987 11933 21933 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.947 "4.65" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:54:30 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20998 12171 21944 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.914 "4.64" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:55:37 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12212 1033 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.445 "-" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:01:25 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20625 37306 21571 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.304 "4.74" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:01:51 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 12509 1024 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.482 "-" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:19:35 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20379 10904 21325 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.976 "4.69" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:20:12 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11047 1000 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 4.417 "-" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:26:10 +0000] "POST /node/add/project-profile HTTP/1.0" 200 18443 11026 19389 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.005 "4.76" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:26:36 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11445 1009 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 2.444 "-" "81.171.110.21, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:12:26 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20351 12699 21297 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0" 1.002 "4.73" "81.171.110.21, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:13:36 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 13104 1021 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0" 2.561 "-" "81.171.110.21, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:21:02 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20495 11748 21441 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0" 1.002 "4.66" "81.171.110.21, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:22:09 +0000] "POST /node/add/project-profile HTTP/1.0" 302 0 11820 1029 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0" 2.338 "-"
comment:5 Changed 23 months ago by chris
Just realised a lot of the above are 302 redirects not 200 OKs, this is the list with the redirects omitted:
"110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:07:13 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96116 11092 97036 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.150 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:07:39 +0000] "POST /node/add/project-profile HTTP/1.0" 200 112683 11239 113603 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.779 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:08:55 +0000] "POST /node/add/project-profile HTTP/1.0" 200 123070 16647 123990 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.259 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:26:05 +0000] "POST /node/add/project-profile HTTP/1.0" 200 105348 80940 106268 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.330 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:25:10 +0000] "POST /node/add/project-profile HTTP/1.0" 200 103529 16145 104449 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.987 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:25:58 +0000] "POST /node/add/project-profile HTTP/1.0" 200 103626 16116 104546 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.952 "-" "110.139.76.20, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:47:11 +0000] "POST /node/add/project-profile HTTP/1.0" 200 103009 15630 103929 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.035 "-" "110.139.90.201, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:44:01 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96162 11773 97082 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0" 0.984 "-" "115.118.236.124, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:12:33 +0000] "POST /node/add/project-profile HTTP/1.0" 200 97666 12895 98586 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.941 "-" "115.118.236.124, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:20:43 +0000] "POST /node/add/project-profile HTTP/1.0" 200 100261 15296 101181 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.142 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:28:35 +0000] "POST /node/add/project-profile HTTP/1.0" 200 115627 12168 116547 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.347 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:56:52 +0000] "POST /node/add/project-profile HTTP/1.0" 200 95033 11062 95953 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.875 "-" "117.207.181.216, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:09:24 +0000] "POST /node/add/project-profile HTTP/1.0" 200 94737 10476 95657 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.904 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:06:57:41 +0000] "POST /node/add/project-profile HTTP/1.0" 200 95520 11447 96440 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 1.425 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:07:16:43 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96992 12208 97912 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 1.255 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:24:05 +0000] "POST /node/add/project-profile HTTP/1.0" 200 94602 11346 95522 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 0.983 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:37:33 +0000] "POST /node/add/project-profile HTTP/1.0" 200 91652 8854 92572 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 0.924 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:38:16 +0000] "POST /node/add/project-profile HTTP/1.0" 200 91754 9102 92674 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 0.986 "-" "182.72.107.78, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:50:20 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96493 12427 97413 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:33.0) Gecko/20100101 Firefox/33.0" 1.088 "-" "206.190.136.246, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:26:15 +0000] "POST /node/add/project-profile HTTP/1.0" 200 96148 12260 97068 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.965 "-" "206.190.136.246, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:27:06 +0000] "POST /node/add/project-profile HTTP/1.0" 200 115098 12339 116018 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.425 "-" "206.190.136.246, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:39:52 +0000] "POST /node/add/project-profile HTTP/1.0" 200 95739 11774 96659 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.917 "-" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:42:30 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20733 19036 21679 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.155 "4.74" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:48:10 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23500 13226 24446 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.460 "5.04" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:50:43 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23511 14698 24457 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.344 "5.06" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:05:55 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20883 13202 21829 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.160 "4.74" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:06:38 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23086 13345 24032 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.561 "5.08" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:08:26 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23098 14660 24044 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.328 "5.09" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:10:28 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23126 14668 24072 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 14.831 "5.10" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:13:08 +0000] "POST /node/add/project-profile HTTP/1.0" 200 23108 14580 24054 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 1.452 "5.09" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:29:19 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20513 12919 21459 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 0.980 "4.76" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:30:15 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20511 12942 21457 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 10.729 "4.76" "206.217.196.129, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:31:03 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20517 12975 21463 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.6 Safari/537.36" 0.990 "4.76" "209.197.26.73, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:06:56:05 +0000] "POST /node/add/project-profile HTTP/1.0" 200 95907 11174 96827 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:34.0) Gecko/20100101 Firefox/34.0" 1.367 "-" "223.225.203.240, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:33:10 +0000] "POST /node/add/project-profile HTTP/1.0" 200 83144 7714 84064 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.906 "-" "36.79.222.42, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:54:38 +0000] "POST /node/add/project-profile HTTP/1.0" 200 112376 11235 113296 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 5.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 1.366 "-" "36.79.222.42, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:08:54:40 +0000] "POST /node/add/project-profile HTTP/1.0" 499 0 11113 0 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 5.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0" 0.225 "-" "36.82.27.226, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:39:38 +0000] "POST /node/add/project-profile HTTP/1.0" 200 97442 13030 98362 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0" 0.919 "-" "36.82.27.226, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:35:00 +0000] "POST /node/add/project-profile HTTP/1.0" 200 97846 13330 98766 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0" 0.973 "-" "36.84.12.223, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:25:46 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20790 12031 21736 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.081 "4.70" "36.84.143.237, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:59:00 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20458 13233 21404 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.940 "4.78" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:51:21 +0000] "POST /node/add/project-profile HTTP/1.0" 200 21304 11761 22250 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.270 "4.64" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:51:50 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20962 11904 21908 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.102 "4.65" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:52:17 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20935 11899 21881 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.954 "4.66" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:53:16 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20987 11933 21933 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.947 "4.65" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:09:54:30 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20998 12171 21944 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.914 "4.64" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:01:25 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20625 37306 21571 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.304 "4.74" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:19:35 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20379 10904 21325 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 0.976 "4.69" "50.115.127.36, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:26:10 +0000] "POST /node/add/project-profile HTTP/1.0" 200 18443 11026 19389 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 1.005 "4.76" "81.171.110.21, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:12:26 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20351 12699 21297 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0" 1.002 "4.73" "81.171.110.21, 127.0.0.1" www.transitionnetwork.org [07/Jan/2015:10:21:02 +0000] "POST /node/add/project-profile HTTP/1.0" 200 20495 11748 21441 "https://www.transitionnetwork.org/node/add/project-profile" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0" 1.002 "4.66"
comment:6 Changed 23 months ago by ed
I'm happy for you to bar IPs. The user accounts can be demolished - they are all new ones - no-one has been comprimised. Sam will pick up on this ...
comment:7 follow-up: ↓ 9 Changed 23 months ago by paul
- Add Hours to Ticket changed from 0.0 to 0.25
- Total Hours changed from 0.33 to 0.58
Followed along.
Let me know if you think we should turn on Database logging or Syslog.
comment:8 Changed 23 months ago by chris
- Add Hours to Ticket changed from 0.0 to 0.21
- Total Hours changed from 0.58 to 0.79
These are the IPs that have submitted the form 4 or more times today:
grep "node/add/project-profile" /var/log/nginx/access.log | grep "POST /node/add/project-profile" | grep -v " 302 0 " | sort | awk '{print $1;}' | sed -e 's/"//' | sed -e 's/,//' | awk '++A[$1]==4'
110.139.76.20
182.72.107.78
206.217.196.129
36.84.12.223
50.115.127.36
This was turned into a list to paste into a terminal to use csf to block them:
grep "node/add/project-profile" /var/log/nginx/access.log | grep "POST /node/add/project-profile" | grep -v " 302 0 " | sort | awk '{print $1;}' | sed -e 's/"//' | sed -e 's/,//' | awk '++A[$1]==4' | sed -s 's/^/csf -d /'
csf -d 110.139.76.20
csf -d 117.212.48.136
csf -d 182.72.107.78
csf -d 206.217.196.129
csf -d 36.84.12.223
csf -d 50.115.127.36
And they have all now been blocked and csf was restarted:
csf -r
Please let me know if we should block for less than 4 submissions and also if the abuse continues -- it is easy to re-run the above command.
comment:9 in reply to: ↑ 7 Changed 23 months ago by chris
Replying to paul:
Let me know if you think we should turn on Database logging or Syslog.
Ideally spammers would be blocked from creating accounts?
comment:10 Changed 23 months ago by chris
comment:11 follow-up: ↓ 14 Changed 23 months ago by ed
i've got alerts for at least 93 new projects all spam today. i'm happy to go for complete lock-down on submissions starting at 1, or change the rights to pre-moderated for now. so re-run the command regularly!
comment:12 follow-up: ↓ 15 Changed 23 months ago by ed
SAM i'm tempted to move to pre-moderate ALL TI and project submissions for now and put a block on the form explaining it. CHRIS could we then scan the pre-moderated submissions in some way to block the IPS?
comment:13 Changed 23 months ago by ed
- Cc ade added
Adding ADE to the cc list. LUCKY ADE to land at such an auspicious moment :)
comment:14 in reply to: ↑ 11 Changed 23 months ago by chris
Replying to ed:
i've got alerts for at least 93 new projects all spam today.
OK, all the IPs these came from have been blocked:
grep "node/add/project-profile" /var/log/nginx/access.log | grep "POST /node/add/project-profile" | grep -v " 302 0 " | sort | awk '{print $1;}' | sed -e 's/"//' | sed -e 's/,//' | awk '++A[$1]==1' | sed -s 's/^/csf -d /'
csf -d 110.139.76.20
csf -d 110.139.90.201
csf -d 115.118.236.124
csf -d 117.207.181.216
csf -d 117.212.48.136
csf -d 182.72.107.78
csf -d 206.190.136.246
csf -d 206.217.196.129
csf -d 209.197.26.73
csf -d 223.225.203.240
csf -d 36.79.222.42
csf -d 36.82.27.226
csf -d 36.84.12.223
csf -d 36.84.143.237
csf -d 50.115.127.36
csf -d 81.171.110.21
comment:15 in reply to: ↑ 12 Changed 23 months ago by chris
Replying to ed:
CHRIS could we then scan the pre-moderated submissions in some way to block the IPS?
I guess, how would one get a list of these and in what format would it be?
comment:16 follow-ups: ↓ 17 ↓ 18 Changed 23 months ago by sam
Hi I have only just seen this ticket.
Ed sent me a text earlier and I edited the permissions on these:
create project_profile content
create resource content
create forum topics
So that authenticated users could no longer submit them. This was just a temporary measure until we got something else in place.
Chris should I now re-edit these permissions so authenticated users can submit to see if you IP blocking has worked?
Thanks
Sam
comment:17 in reply to: ↑ 16 ; follow-up: ↓ 22 Changed 23 months ago by chris
- Add Hours to Ticket changed from 0.0 to 0.1
- Total Hours changed from 0.79 to 0.89
Replying to sam:
Chris should I now re-edit these permissions so authenticated users can submit to see if you IP blocking has worked?
I don't doubt that the IP address blocking has worked, in as much as those IPs can no longer access the server, however it seems clear to me that the attack is from a botnet, so it's a game of whack-a-mole and there will probably be loads more...
But yes, you could try re-enabling these perms and then we can see what happens...
Is it possible to do something like not allowing new users to submit these forms until they have been whitelisted?
Or even better can more anti-spam measures be deployed on the account creation process?
Are these bots verifying their email addresses? If not can form submission be blocked till email addresses are verified?
comment:18 in reply to: ↑ 16 ; follow-up: ↓ 19 Changed 23 months ago by chris
Replying to sam:
I have only just seen this ticket.
Are you getting emailed comments from this ticket? If not it means that we need to Cc everybody, including ticket owners -- look at the settings for this ticket, you are not a Cc, but I guess that Ed, reasonably, assumed that owners get copies without being Cc'd (I also assumed this).
comment:19 in reply to: ↑ 18 ; follow-up: ↓ 21 Changed 23 months ago by paul
- Add Hours to Ticket changed from 0.0 to 0.25
- Total Hours changed from 0.89 to 1.14
Are these bots verifying their email addresses? If not can form submission be blocked till email addresses are verified?
A spammer would have to validate their email address before they are given 'authenticated user' permissions .
@Sam
We can also block email domains from registering (using wildcards) ..
comment:20 Changed 23 months ago by paul
- Add Hours to Ticket changed from 0.0 to 0.25
- Total Hours changed from 1.14 to 1.39
Nice post.
https://www.ostraining.com/blog/drupal/block-spam-registrations-drupal/
#5 and #9 are worth exploring if we need more protection for our forms
https://www.transitionnetwork.org/admin/user/settings << All good
comment:21 in reply to: ↑ 19 Changed 23 months ago by sam
Replying to paul:
Are these bots verifying their email addresses? If not can form submission be blocked till email addresses are verified?
A spammer would have to validate their email address before they are given 'authenticated user' permissions .
Yes most are validated I think. It's fairly trivial for them to do.
comment:22 in reply to: ↑ 17 Changed 23 months ago by sam
But yes, you could try re-enabling these perms and then we can see what happens...
OK I'll allow authenticated users to submit those forms for an hour or two and see how it goes.
Is it possible to do something like not allowing new users to submit these forms until they have been whitelisted?
How would they get added to the whitelist?
Or even better can more anti-spam measures be deployed on the account creation process?
I think this is the best way to approach it.
Thanks
Sam
comment:23 Changed 23 months ago by sam
I enabled authenticated users to submit the forms again
This user immediately splurged a load of spam into the project profiles.
https://www.transitionnetwork.org/user/21746/spambot
I then blocked this user and unpublished the spam.
I then noticed that although Mollom text analysis is enabled on the project profile it was only set to analyse the title. I have edited the setting so it now analyses all the text fields. I also changed it from the 'normal' to the 'strict' setting.
comment:24 Changed 23 months ago by chris
- Type changed from defect to maintenance
- Component changed from Unassigned to Drupal modules & settings
comment:25 Changed 23 months ago by sam
Just to update this. Changing the Mollom settings has stopped the spam form submissions.
However we still have a lot of spam users registering.
There was some discussion of using Annesley's anti spam technique to the registration form.
Ade do you think this is worth a try?
Thanks
Sam
Note: See
TracTickets for help on using
tickets.
Do people have to be logged in to use these forms? If not then perhaps making it so they do would solve this?
Are these Drupal or 3rd party forms, if they are 3rd party forms then take the matter up with the 3rd party?
If they are not 3rd party forms and I had the URLs of the forms I could try to find Ngnix server logs (if they exist?) to see if it is coming from a small number of IP addresses and then we could block them, however if it's a botnet then this won't help.