James G. Sack (jim) wrote:
James G. Sack (jim) wrote:
..
The entries in the error log seems to have changed "flavor".
Whereas before there seemed to be repeated probing from a single IP,
namely the aforementioned 220.181.19.83 (or 220.181.19.79), now this
same chinese attacker seems still in there, but shares space with lots
of other IPs. Several seem to be yahoo namespace entries. Not
exclusively, though.
Could these be ordinary web crawlers? google, yahoo, inktomi?
If that's the case, I apologize for the sky-falling alert.
..but: why are there so many error entries. Is there a problem with the
new plone?
I know about the whrandom problem, and will try to fix that. There are
still a mess of KeyError: 'body' exceptions that may indicate another
problem?
As reported in another message, fixing the whrandom bug caused the error
messages to completely stop.
Just thought I'd try to close-out this thread.
Maybe that chinese IP was a legit web-crawler and was just especially
conscientious about retrying?
..jim
--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-steer
