roly
06-29-2002, 12:54 AM
I looked in access.log in my Apache 1.3.26/Windows 98 and it had this added to it (see the attatchment)
![]() | View Full Version : Wtf? roly 06-29-2002, 12:54 AM I looked in access.log in my Apache 1.3.26/Windows 98 and it had this added to it (see the attatchment) roly 06-29-2002, 12:57 AM And heres what I found added to error.log It says a lot of times 'Possible DoS attempt?' roly 06-29-2002, 12:58 AM error.log was too big to attatch, here is part 2 of it roly 06-29-2002, 01:47 AM The IP address is owned by securityspace.com:rolleyes: I did say I wanted a free test a couple of days ago, but my ip address has changed since:eek: webx 06-29-2002, 01:02 PM :eek: roly 06-29-2002, 08:06 PM what? Shyne 06-29-2002, 08:20 PM Maybe you should contact securityspace.com Don't see how we can help you. mwatkins 06-29-2002, 10:00 PM Someone is certainly running an automated probe or attack at you. You are running windows - this a personal server at home or something? The IP address is coming from here: Registrant: Korax Inc. 439 University Avenue, Suite 850 Toronto, ON M5G 1Y8 CA Domain Name: KORAX.COM Administrative Contact: Hostmaster, DNS hostmaster@korax.net 439 University Avenue, Suite 850 Toronto, ON M5G 1Y8 CA 416-979-2112 Technical Contact: Hostmaster, DNS hostmaster@korax.net 439 University Avenue, Suite 850 Toronto, ON M5G 1Y8 CA 416-979-2112 Registrar of Record: TUCOWS, INC. Record last updated on 27-Apr-2002. Record expires on 25-Jul-2003. Record Created on 26-Jul-1996. Domain servers in listed order: AUTH01.NS.KORAX.NET 216.201.96.33 AUTH02.NS.KORAX.NET 216.201.96.34 AUTH03.NS.KORAX.NET 216.201.96.35 If you don't think its legit, contact abuse@korax.net and send them your logs. ljprevo 07-01-2002, 01:02 PM You sure the IP address is not spoofed? |