Two of the users who spammed Wiki. Each created a few pages and left:
This is when the user has signed up:
kohsuke@cucumber:/srv/accountapp$ grep -C1 kumpulancara log - Pre-instantiating singletons in org.springframework.beans.factory.support.DefaultListableBeanFactory@6415f8f1: defining beans [propertyConfigurer,jiraSoapClient,contextSource,ldapTemplate,ldapClient,jiraLdapSyncer]; root of factory hierarchy - Adding new ldap user kumpulancara into Jira Aug 31, 2012 6:29:44 PM org.jenkinsci.account.Application createRecord INFO: User kumpulancara signed up: daenk2008@yahoo.co.id - Refreshing org.springframework.context.support.ClassPathXmlApplicationContext@58796a05: display name [org.springframework.context.support.ClassPathXmlApplicationContext@58796a05]; startup date [Fri Aug 31 19:47:57 EDT 2012]; root of context hierarchy
Corresponding record from Apache:
123.136.106.150 - - [31/Aug/2012:18:27:14 -0400] "GET /account HTTP/1.1" 200 10558 "https://wiki.jenkins-ci.org/display/JENKINS/Home" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0" 786 10558 123.136.106.150 - - [31/Aug/2012:18:27:33 -0400] "GET /account/ HTTP/1.1" 200 6398 "https://jenkins-ci.org/account" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0" 1106 6398 123.136.106.150 - - [31/Aug/2012:18:27:53 -0400] "GET /account/signup HTTP/1.1" 200 746 "https://jenkins-ci.org/account/" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0" 549 746 123.136.106.150 - - [31/Aug/2012:18:29:42 -0400] "POST /account/doSignup HTTP/1.1" 302 5961 "https://jenkins-ci.org/account/signup" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0" 1810 5961 123.136.106.150 - - [31/Aug/2012:18:29:45 -0400] "GET /account/doneMail HTTP/1.1" 200 570 "https://jenkins-ci.org/account/signup" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0" 789 570
Another user:
- Pre-instantiating singletons in org.springframework.beans.factory.support.DefaultListableBeanFactory@4ec2de5: defining beans [propertyConfigurer,jiraSoapClient,contextSource,ldapTemplate,ldapClient,jiraLdapSyncer]; root of factory hierarchy - Adding new ldap user farukganteng into Jira Sep 2, 2012 9:05:55 AM org.jenkinsci.account.Application createRecord INFO: User farukganteng signed up: aroblogaktiv4@gmail.com - Refreshing org.springframework.context.support.ClassPathXmlApplicationContext@2cb2b77a: display name [org.springframework.context.support.ClassPathXmlApplicationContext@2cb2b77a]; startup date [Sun Sep 02 09:08:34 EDT 2012]; root of context hierarchy
Same record from Apache:
103.3.220.50 - - [02/Sep/2012:09:05:05 -0400] "GET /account/signup HTTP/1.1" 200 746 "https://jenkins-ci.org/account/" "Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20100101 Firefox/14.0.1" 778 746 103.3.220.50 - - [02/Sep/2012:09:05:51 -0400] "POST /account/doSignup HTTP/1.1" 302 5961 "https://jenkins-ci.org/account/signup" "Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20100101 Firefox/14.0.1" 1771 5961 103.3.220.50 - - [02/Sep/2012:09:05:56 -0400] "GET /account/doneMail HTTP/1.1" 200 570 "https://jenkins-ci.org/account/signup" "Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20100101 Firefox/14.0.1" 778 570
User agent is different.