LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
LinkBack Search this Thread
Old 08-25-2001, 10:34 PM   #1
mikeyt_3333
Member
 
Registered: Aug 2001
Distribution: Red Hat
Posts: 61

Rep: Reputation: 15
Exclamation Emergency


Isn't it ironic that right after I ask somebody to break my system the server I manage seems to be getting attacked.

I have numerous httpd daemons spawning on my server, also bringing up the cgi script we use over 30 times, and it is killing my systems performance. When I stop httpd, portsentry reports tons of port scans to port 80 from the same IP over and over, when I scan the logs this IP address is hitting my site every half second almost, and it has been happening for a long time now.

When I look at my apache logs I get a list that consists of the word "common" which is my log type, I get nothing else.

And to make things worse when I type the following:

ipchains -A INPUT -s xxx.xxx.xxx.xxx -j DENY

I get the following error:

[B]ipchains: No target by that name[B]

I have tried installing ipchains over and over, and nothing yet, any suggestions?

Thanks in advance.
 
Old 08-26-2001, 07:27 AM   #2
jharris
Senior Member
 
Registered: May 2001
Location: Bristol, UK
Distribution: Slackware, Fedora, RHES
Posts: 2,243

Rep: Reputation: 46
Re: Emergency

Quote:
Originally posted by mikeyt_3333
Isn't it ironic that right after I ask somebody to break my system the server I manage seems to be getting attacked.

<snip>

ipchains -A INPUT -s xxx.xxx.xxx.xxx -j DENY

I get the following error:

ipchains: No target by that name
Wasn't me!!

How about this instead
Code:
ipchains -A input -s xxx.xxx.xxx.xxx -j DENY
HTH

Jamie...
 
Old 08-26-2001, 09:53 AM   #3
jrmann1999
Member
 
Registered: Feb 2001
Location: Texas
Distribution: Slackware, Mandrake, LFS
Posts: 306

Rep: Reputation: 30
Did you check to see if these are code-red or code-red II scans? I've been getting them for almost a month solid...

J
 
Old 08-26-2001, 02:00 PM   #4
mikeyt_3333
Member
 
Registered: Aug 2001
Distribution: Red Hat
Posts: 61

Original Poster
Rep: Reputation: 15


Have you guys ever had one of those moments where you felt like a complete idiot? Well I'm having one right now, thanks jharris, your suggestions fixed it. Now if I can't figure that out maybe I should just cancel the test, and skip RHCE.
 
Old 08-26-2001, 02:04 PM   #5
jharris
Senior Member
 
Registered: May 2001
Location: Bristol, UK
Distribution: Slackware, Fedora, RHES
Posts: 2,243

Rep: Reputation: 46
Quote:
Originally posted by mikeyt_3333
Have you guys ever had one of those moments where you felt like a complete idiot?
Not very often, but when I do I make sure its a proper job that will lead to much embarassment for a great deal of time

cheers

Jamie...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Emergency !! Hampster Mandriva 4 10-31-2005 02:35 PM
Emergency help k1ll3r_x Linux - General 2 04-17-2005 07:32 PM
help emergency please AndrewZorn Linux - General 12 04-04-2005 09:28 PM
Emergency - Can't Boot Jaw3000 Linux - Newbie 5 03-13-2004 12:06 PM
Emergency Emergency kodiak Linux - Newbie 6 04-13-2003 12:00 AM


All times are GMT -5. The time now is 05:19 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration