The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

flood - DC++ hub script?

Discussion in 'General Discussion' started by marius, Jan 30, 2007.

  1. marius

    marius Well-Known Member
    PartnerNOC

    Joined:
    Jun 10, 2002
    Messages:
    157
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Bucharest
    We have a small problem :) it seems one dc++ owner put a script in his dc++ hub and everytime a user connects to his hub sends a request to my server. this kinda sucks because there is no way to identify the hub.

    the logs looks smth. like:

    Code:
    89.38.254.175 - - [30/Jan/2007:19:35:29 +0200] "$MyNick [RO][B][wan]PuffyDawg|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.698ABCABC|" 400 371
    194.126.186.88 - - [30/Jan/2007:19:35:52 +0200] "$MyNick [RO][B][XCLUSIV]nana|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.306ABCABC|" 400 371
    89.36.234.49 - - [30/Jan/2007:19:36:01 +0200] "$MyNick [RO][B][Ch-Net][Coco]|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.306ABCABC|" 400 371
    86.55.117.134 - - [30/Jan/2007:19:36:03 +0200] "$MyNick [RO][B][K-NET]Anitaaa|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.674ABCABC|" 400 371
    86.55.117.134 - - [30/Jan/2007:19:36:04 +0200] "$MyNick [RO][B][K-NET]Anitaaa|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.674ABCABC|" 400 371
    84.232.216.82 - - [30/Jan/2007:19:36:10 +0200] "$MyNick [RO][B][RDS][SILVANADDD]|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.674ABCABC|" 400 371
    84.232.216.82 - - [30/Jan/2007:19:36:10 +0200] "$MyNick [RO][B][RDS][SILVANADDD]|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC Pk=DCPLUSPLUS0.674ABCABC|" 400 371
    
    any suggestions about hot to stop this affecting the server?
     
  2. gupi

    gupi Well-Known Member

    Joined:
    Apr 27, 2004
    Messages:
    125
    Likes Received:
    0
    Trophy Points:
    16
    a custom mod_security rule may help you.
     
  3. marius

    marius Well-Known Member
    PartnerNOC

    Joined:
    Jun 10, 2002
    Messages:
    157
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Bucharest
    yup. too bad will slow down the server quite a bit :)
     
  4. katmai

    katmai Well-Known Member

    Joined:
    Mar 13, 2006
    Messages:
    526
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Brno, Czech Republic
    it won't help as it's not a valid httpd request
     

Share This Page