Hi Luggers!
We are facing attacks from unknown hosts
that is causing reduction in system performance at our
servers. Some perl scripts are trying to delete log
files by trying out various options but getting
permission denied messages. We have tried to locate
the domain using www.ip-address.com/ nslookup / dig /
traceroute all are from different foreign locations
We had found those scripts in
/var/log/httpd/error_log, /var/log/httpd/access_log
There are about 758 such IP addresses. Its obvious
that we cant block all these addresses in IP-Tables.
I would appreciate your suggestions!
Thanks
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
