What do the server logs actually show? What do the database logs show? Depending upon the database, turn on the maximum level of debugging to see what they are issuing.
It might even be a crawler doing this accidentally. Can you access the same pages in the same order with no ill effects to the server? On 8/11/10 6:42 AM, "Marc Boorshtein" <[email protected]> wrote: Any cookies or headers? Sent from my iPad On Nov 7, 2010, at 1:27 PM, Assaf <[email protected]> wrote: > I know what sql injection is. But I cannot find any clues to it. None of the > requests have any paramers or posting. Anyone has an idea how to find if this > is > the case? > > > ----- Original Message ---- > From: Marc Boorshtein <[email protected]> > To: Tomcat Users List <[email protected]> > Sent: Sun, November 7, 2010 7:08:01 PM > Subject: Re: Malicious host is crashing my server > > Do a search on SQL injection and you will get plenty of results > > Sent from my iPad > > On Nov 7, 2010, at 1:03 PM, "Caldarale, Charles R" > <[email protected]> > wrote: > >>> From: Martin Gainty [mailto:[email protected]] >>> Subject: RE: Malicious host is crashing my server >> >>> the culprit will change IPs >> >> That's why I said it was a temporary workaround. However, given the DNS name >> in use, it is likely assigned via DHCP by the perp's ISP, so an IP mask >> could be >> used to take out a range of IP addresses - at the risk of annoying any >> legitimate clients using the same ISP. >> >> - Chuck >> >> >> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY >> MATERIAL and is thus for use only by the intended recipient. If you received >> this in error, please contact the sender and delete the e-mail and its >> attachments from all computers. >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
