Web Hosting Talk







View Full Version : Wtf?


roly
06-29-2002, 12:54 AM
I looked in access.log in my Apache 1.3.26/Windows 98 and it had this added to it (see the attatchment)

roly
06-29-2002, 12:57 AM
And heres what I found added to error.log
It says a lot of times 'Possible DoS attempt?'

roly
06-29-2002, 12:58 AM
error.log was too big to attatch, here is part 2 of it

roly
06-29-2002, 01:47 AM
The IP address is owned by securityspace.com:rolleyes:
I did say I wanted a free test a couple of days ago, but my ip address has changed since:eek:

webx
06-29-2002, 01:02 PM
:eek:

roly
06-29-2002, 08:06 PM
what?

Shyne
06-29-2002, 08:20 PM
Maybe you should contact securityspace.com

Don't see how we can help you.

mwatkins
06-29-2002, 10:00 PM
Someone is certainly running an automated probe or attack at you.

You are running windows - this a personal server at home or something?

The IP address is coming from here:

Registrant:
Korax Inc.
439 University Avenue, Suite 850
Toronto, ON M5G 1Y8
CA

Domain Name: KORAX.COM

Administrative Contact:
Hostmaster, DNS hostmaster@korax.net
439 University Avenue, Suite 850
Toronto, ON M5G 1Y8
CA
416-979-2112

Technical Contact:
Hostmaster, DNS hostmaster@korax.net
439 University Avenue, Suite 850
Toronto, ON M5G 1Y8
CA
416-979-2112



Registrar of Record: TUCOWS, INC.
Record last updated on 27-Apr-2002.
Record expires on 25-Jul-2003.
Record Created on 26-Jul-1996.

Domain servers in listed order:
AUTH01.NS.KORAX.NET 216.201.96.33
AUTH02.NS.KORAX.NET 216.201.96.34
AUTH03.NS.KORAX.NET 216.201.96.35


If you don't think its legit, contact abuse@korax.net and send them your logs.

ljprevo
07-01-2002, 01:02 PM
You sure the IP address is not spoofed?