RE: Malicious host is crashing my server

2010-11-08 Thread Martin Gainty
importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. > Date: Mon, 8 Nov 2010 01:09:12 -0800 > From: ass...@yahoo.com > Subject: Re: Malicious

Re: Malicious host is crashing my server

2010-11-08 Thread Ronald Klop
tions? Assaf - Original Message From: Marc Boorshtein To: Tomcat Users List Sent: Sun, November 7, 2010 6:29:09 PM Subject: Re: Malicious host is crashing my server JDBC? Are you sure its not an attempted SQL Injection attack? On Sun, Nov 7, 2010 at 12:23 PM, Assaf wrote: > Hello, &g

Re: Malicious host is crashing my server

2010-11-08 Thread Assaf
Users List Sent: Mon, November 8, 2010 12:00:49 AM Subject: Re: Malicious host is crashing my server You could modify the RequestDumpFilter to only dump the request for that ip address. Regards, Dave Sent from my iPhone On Nov 7, 2010, at 12:28 PM, Assaf wrote: > A filter to block is good.

Re: Malicious host is crashing my server

2010-11-07 Thread David Fisher
> Assaf > > > - Original Message > From: "Caldarale, Charles R" > To: Tomcat Users List > Sent: Sun, November 7, 2010 6:48:20 PM > Subject: RE: Malicious host is crashing my server > >> From: Assaf [mailto:ass...@yahoo.com] >> Subject: M

Re: Malicious host is crashing my server

2010-11-07 Thread Darryl Lewis
a how to find if this > is > the case? > > > - Original Message > From: Marc Boorshtein > To: Tomcat Users List > Sent: Sun, November 7, 2010 7:08:01 PM > Subject: Re: Malicious host is crashing my server > > Do a search on SQL injection and you will get ple

Re: Malicious host is crashing my server

2010-11-07 Thread Marc Boorshtein
Original Message > From: Marc Boorshtein > To: Tomcat Users List > Sent: Sun, November 7, 2010 7:08:01 PM > Subject: Re: Malicious host is crashing my server > > Do a search on SQL injection and you will get plenty of results > > Sent from my iPad > >

Re: Malicious host is crashing my server

2010-11-07 Thread Rainer Jung
On 07.11.2010 18:23, Assaf wrote: Hello, I have a recurring visitor (from a fixed IP address: bzq-79-177-23-102.red.bezeqint.net) who is constantly visiting my site and EACH time causes the server to crash. My server actually gets a JDBC begin failed error for the next http calls. Can you elab

Re: Malicious host is crashing my server

2010-11-07 Thread Ziggy
l Message > From: "Caldarale, Charles R" > To: Tomcat Users List > Sent: Sun, November 7, 2010 6:48:20 PM > Subject: RE: Malicious host is crashing my server > > > From: Assaf [mailto:ass...@yahoo.com] > > Subject: Malicious host is crashing my server > >

Re: Malicious host is crashing my server

2010-11-07 Thread Assaf
A filter to block is good. But then I would not be able to see him doing it again and then find out the issue. Assaf - Original Message From: "Caldarale, Charles R" To: Tomcat Users List Sent: Sun, November 7, 2010 6:48:20 PM Subject: RE: Malicious host is crashing my serv

Re: Malicious host is crashing my server

2010-11-07 Thread Assaf
: Malicious host is crashing my server Do a search on SQL injection and you will get plenty of results Sent from my iPad On Nov 7, 2010, at 1:03 PM, "Caldarale, Charles R" wrote: >> From: Martin Gainty [mailto:mgai...@hotmail.com] >> Subject: RE: Malicious host is crashi

Re: Malicious host is crashing my server

2010-11-07 Thread Marc Boorshtein
Do a search on SQL injection and you will get plenty of results Sent from my iPad On Nov 7, 2010, at 1:03 PM, "Caldarale, Charles R" wrote: >> From: Martin Gainty [mailto:mgai...@hotmail.com] >> Subject: RE: Malicious host is crashing my server > >> the culp

RE: Malicious host is crashing my server

2010-11-07 Thread Caldarale, Charles R
> From: Martin Gainty [mailto:mgai...@hotmail.com] > Subject: RE: Malicious host is crashing my server > the culprit will change IPs That's why I said it was a temporary workaround. However, given the DNS name in use, it is likely assigned via DHCP by the perp's ISP, so a

RE: Malicious host is crashing my server

2010-11-07 Thread Martin Gainty
ni. > From: chuck.caldar...@unisys.com > To: users@tomcat.apache.org > Date: Sun, 7 Nov 2010 11:48:20 -0600 > Subject: RE: Malicious host is crashing my server > > > From: Assaf [mailto:ass...@yahoo.com] > > Subject: Malicious host is crashing my server > > &g

RE: Malicious host is crashing my server

2010-11-07 Thread Caldarale, Charles R
> From: Assaf [mailto:ass...@yahoo.com] > Subject: Malicious host is crashing my server > what can I do to better protect? As a temporary preventive measure, you can disable access from this particular IP address by configuring the RemoteAddrValve in server.xml: That should give

Re: Malicious host is crashing my server

2010-11-07 Thread Assaf
Hi, It might be. But I am not sure how to find out more. Any suggestions? Assaf - Original Message From: Marc Boorshtein To: Tomcat Users List Sent: Sun, November 7, 2010 6:29:09 PM Subject: Re: Malicious host is crashing my server JDBC? Are you sure its not an attempted SQL

Re: Malicious host is crashing my server

2010-11-07 Thread Marc Boorshtein
JDBC? Are you sure its not an attempted SQL Injection attack? On Sun, Nov 7, 2010 at 12:23 PM, Assaf wrote: > Hello, > > I have a recurring visitor (from a fixed IP > address: bzq-79-177-23-102.red.bezeqint.net) who is constantly visiting my > site > and EACH time causes the server to crash. My

Malicious host is crashing my server

2010-11-07 Thread Assaf
Hello, I have a recurring visitor (from a fixed IP address: bzq-79-177-23-102.red.bezeqint.net) who is constantly visiting my site and EACH time causes the server to crash. My server actually gets a JDBC begin failed error for the next http calls. Analyzing the logs, I cannot find out what is