[ic] RE: Help - Under Attack!

[Andrew Rich]

Hi Again

I think that I may be winning.

I have put an entry in iptables to prevent hi ip address from accessing our
system and the log entries have stopped!

I will keep you posted on success or otherwise.

Does anyone else had this type of attack.

Thank you
Andrew

 -----Original Message-----
From: 	Andrew Rich [mailto:andrew@mapsdownunder.com.au]
Sent:	Sunday, 10 November 2002 3:45 AM
To:	'interchange-users@icdevgroup.org'
Subject:	Help - Under Attack!

Hi

I am getting a error log entry every few minutes for same person and my Site
Traffic is showing this also.

I am on RH7.3 and are very up2date
Just upgraded from 4.8.5 to 4.8.6

Log entries:

trek17.sv.av.com mq4baQ3f:av.com - [10/November/2002:03:18:55 +3500] mapshop
/cgi-bin/mapshop/scan/MM=8c9748c472bfd680c77252ce15356f10:1450:1499:50
search error: Object saved wrong in
/var/lib/interchange/mapshop/tmp/m/mq4baQ3f.8c9748c472bfd680c77252ce15356f10
for search ID mq4baQ3f.8c9748c472bfd680c77252ce15356f10. trek17.sv.av.com
XD6nwQQk:av.com - [10/November/2002:03:26:49 +3500] mapshop
/cgi-bin/mapshop/scan/MM=66d2d5d78561f9ce8ff00dc1d5824c22:950:999:50 search
error: Object saved wrong in
/var/lib/interchange/mapshop/tmp/X/XD6nwQQk.66d2d5d78561f9ce8ff00dc1d5824c22
for search ID XD6nwQQk.66d2d5d78561f9ce8ff00dc1d5824c22. trek17.sv.av.com
wQQkxzG5:av.com - [10/November/2002:03:27:13 +3500] mapshop
/cgi-bin/mapshop/scan/MM=8c9748c472bfd680c77252ce15356f10:250:299:50 search
error: Object saved wrong in
/var/lib/interchange/mapshop/tmp/w/wQQkxzG5.8c9748c472bfd680c77252ce15356f10
for search ID wQQkxzG5.8c9748c472bfd680c77252ce15356f10. trek17.sv.av.com
WF4974sM:av.com - [10/November/2002:03:29:43 +3500] mapshop
/cgi-bin/mapshop/scan/MM=1e725eade4b819beb204e31aee102288:400:421:50 search
error: Object saved wrong in
/var/lib/interchange/mapshop/tmp/W/WF4974sM.1e725eade4b819beb204e31aee102288
for search ID WF4974sM.1e725eade4b819beb204e31aee102288. trek17.sv.av.com
RCSdIWZc:av.com - [10/November/2002:03:33:26 +3500] mapshop
/cgi-bin/mapshop/scan/MM=8c9748c472bfd680c77252ce15356f10:1400:1449:50
search error: Object saved wrong in
/var/lib/interchange/mapshop/tmp/R/RCSdIWZc.8c9748c472bfd680c77252ce15356f10
for search ID RCSdIWZc.8c9748c472bfd680c77252ce15356f10.
Any help is greatly accepted.

Thank you
Andrew