Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

flood - DC++ hub script?

Discussion in 'General Discussion' started by marius, Jan 30, 2007.

  1. marius

    marius Well-Known Member
    PartnerNOC

    Joined:
    Jun 10, 2002
    Messages:
    157
    Likes Received:
    0
    Trophy Points:
    316
    Location:
    Bucharest
    We have a small problem :) it seems one dc++ owner put a script in his dc++ hub and everytime a user connects to his hub sends a request to my server. this kinda sucks because there is no way to identify the hub.

    the logs looks smth. like:

    Code:
    89.38.254.175 - - [30/Jan/2007:19:35:29 +0200] "$MyNick [RO][B][wan]PuffyDawg|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.698ABCABC|" 400 371
    194.126.186.88 - - [30/Jan/2007:19:35:52 +0200] "$MyNick [RO][B][XCLUSIV]nana|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.306ABCABC|" 400 371
    89.36.234.49 - - [30/Jan/2007:19:36:01 +0200] "$MyNick [RO][B][Ch-Net][Coco]|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.306ABCABC|" 400 371
    86.55.117.134 - - [30/Jan/2007:19:36:03 +0200] "$MyNick [RO][B][K-NET]Anitaaa|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.674ABCABC|" 400 371
    86.55.117.134 - - [30/Jan/2007:19:36:04 +0200] "$MyNick [RO][B][K-NET]Anitaaa|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.674ABCABC|" 400 371
    84.232.216.82 - - [30/Jan/2007:19:36:10 +0200] "$MyNick [RO][B][RDS][SILVANADDD]|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.674ABCABC|" 400 371
    84.232.216.82 - - [30/Jan/2007:19:36:10 +0200] "$MyNick [RO][B][RDS][SILVANADDD]|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.674ABCABC|" 400 371
    
    any suggestions about hot to stop this affecting the server?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. gupi

    gupi Well-Known Member

    Joined:
    Apr 27, 2004
    Messages:
    125
    Likes Received:
    0
    Trophy Points:
    166
    a custom mod_security rule may help you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. marius

    marius Well-Known Member
    PartnerNOC

    Joined:
    Jun 10, 2002
    Messages:
    157
    Likes Received:
    0
    Trophy Points:
    316
    Location:
    Bucharest
    yup. too bad will slow down the server quite a bit :)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. katmai

    katmai Well-Known Member

    Joined:
    Mar 13, 2006
    Messages:
    537
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    Brno, Czech Republic
    it won't help as it's not a valid httpd request
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice