Tons of vBulletin attacks
 

I'm getting literally thousands of requests for stuff like this in my error logs:

[Mon Nov 16 21:26:47 2009] [error] [client 67.18.253.74] script '/home/mysite/public_html/newthread.php' not found or unable to stat* referer: http://www.mysite.com/newthread.php?do=newthread&f=23

This is obviously an attack because my forums are in a forum directory* not the root. When I look up the IP address I see it listed (as well as many others) as spam sources. I get many requests for newthread.php* login.php and a few others. Apparently the target is some root directory file in vBulletin or an attempt to create newthreads like the one above.

I'm not sure what is going on but there is a huge force coming from China* Russia* Vietnam* Amsterdam* some compromised servers in Texas and a few other places that is specifically trying to exploit vBulletin. I keep on adding them to deny the IP and my error logs are filling up with deny requests. Be on the lookout for this.