NYCPHP Meetup

NYPHP.org

[nycphp-talk] Urgent: Help in Defending Attack

Randal Rust randalrust at gmail.com
Thu Feb 28 10:41:44 EST 2008


On Thu, Feb 28, 2008 at 10:33 AM, Cliff Hirsch <cliff at pinestream.com> wrote:

>  What kind of hit? Does the url have "attack" strings? Check out phpids --
>  might help.

here is what i know:

1. got up this AM and was getting error messages that there are too
many connections to the database
2. the hosting company looked at the server logs and sent me this:

7-0 28568 0/1/1 W 0.08 5 0 0.0 0.01 0.01 64.185.201.77
ohiohistorycentral.org GET /entry.php?rec=891 HTTP/1.0
8-0 28573 0/1/1 W 0.00 4 0 0.0 0.04 0.04 210.89.51.41
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
9-0 28574 0/2/2 W 0.08 3 0 0.0 0.05 0.05 82.87.19.8
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
10-0 28575 0/0/0 W 0.00 4 0 0.0 0.00 0.00 58.0.11.65
ohiohistorycentral.org GET /entry.php?rec=1090 HTTP/1.0
11-0 28576 0/0/0 W 0.00 4 0 0.0 0.00 0.00 88.147.165.40
ohiohistorycentral.org GET /entry.php?rec=2127 HTTP/1.0
12-0 28581 0/0/0 W 0.00 3 0 0.0 0.00 0.00 68.193.145.89
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
13-0 28582 0/0/0 W 0.00 3 0 0.0 0.00 0.00 125.99.16.48
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
14-0 28583 0/0/0 W 0.00 3 0 0.0 0.00 0.00 58.0.11.65
ohiohistorycentral.org GET /entry.php?rec=1090 HTTP/1.0
15-0 28584 0/0/0 W 0.00 2 0 0.0 0.00 0.00 125.99.16.48
ohiohistorycentral.org GET /entry.php?rec=271 HTTP/1.0
16-0 28585 0/2/2 W 0.08 2 0 0.0 0.03 0.03 127.0.0.1
localhost.localdomain GET /dsm-server-status HTTP/1.0

-- 
Randal Rust
R.Squared Communications
www.r2communications.com



More information about the talk mailing list