[ic] continuing problems with routine to stop DDos attack

davideth at whojamadoogle.com davideth at whojamadoogle.com
Tue Aug 12 19:27:51 UTC 2025


The problem is that interchange is now generating excess resource usage 
which locks up interchange.

In session.pm

sub new_session {
     my($seed) = @_;
     my($name);
     my $Val;

     ::logError("getting valid session id=$Vend::SessionID 
name=$Vend::SessionName   !!!");    # 11 Aug 2025 DLE
# clear valid page and continue
     if (::display_init_page('valid') eq 0 )
     {
     ::logError("valid session id=$Vend::SessionID failed");
     close_session();
     return;
     }

# continue normal session generation

     ::logError("rcvd valid session id=$Vend::SessionID  !!!"); # 12 Aug 
2025 DLE

     open_session();

# ...

}

sub display_init_page
     {
#    my ($field,$value,$opt) = @_;
     my $mv_verified = "";
     my ($name1);
     my $start_time = time();
     my $timeout = 60; # 120 seconds
     my $timeout2 = 5; # 120 seconds
     my $i = 0;
     my $ref;

     ::display_page('valid');   # this send the checkbox to remote IP

     while (time() - $start_time < $timeout)    # wait for a response
         {
         if ($mv_verified) # mv_nextpage
             {
             ::logError("rcvd valid verification page");    # 5 Aug 2025 DLE
             return(1);
             }
         }

     ::logError("timeout getting valid");    # 8 Aug 2025 DLE

return(0);

}


# from error.log in huldacpz showing 2 failed requests

213.230.93.86 uFZa8o7Q:213.230.93.86 - [12/August/2025:12:57:18 -0500] 
huldacpz /cgi-bin/cart.cgi/aboutus getting valid session id=uFZa8o7Q  
name=uFZa8o7Q:213.230.93.86   !!!

213.230.93.86 uFZa8o7Q:213.230.93.86 - [12/August/2025:12:58:18 -0500] 
huldacpz /cgi-bin/cart.cgi/aboutus timeout getting valid
213.230.93.86 uFZa8o7Q:213.230.93.86 - [12/August/2025:12:58:18 -0500] 
huldacpz /cgi-bin/cart.cgi/aboutus valid session id=uFZa8o7Q failed


14.169.226.68 RUbpxrpm:14.169.226.68 - [12/August/2025:12:57:22 -0500] 
huldacpz /cgi-bin/cart.cgi/zappercomparisonchart getting valid session 
id=RUbpxrpm  name=RUbpxrpm:14.169.226.68   !!!

14.169.226.68 RUbpxrpm:14.169.226.68 - [12/August/2025:12:58:22 -0500] 
huldacpz /cgi-bin/cart.cgi/zappercomparisonchart timeout getting valid
14.169.226.68 RUbpxrpm:14.169.226.68 - [12/August/2025:12:58:22 -0500] 
huldacpz /cgi-bin/cart.cgi/zappercomparisonchart valid session 
id=RUbpxrpm failed




More information about the interchange-users mailing list