What do the server logs actually show? What do the database logs show? Depending upon the database, turn on the maximum level of debugging to see what they are issuing.
It might even be a crawler doing this accidentally. Can you access the same pages in the same order with no ill effects to the server? On 8/11/10 6:42 AM, "Marc Boorshtein" <mboorsht...@gmail.com> wrote: Any cookies or headers? Sent from my iPad On Nov 7, 2010, at 1:27 PM, Assaf <ass...@yahoo.com> wrote: > I know what sql injection is. But I cannot find any clues to it. None of the > requests have any paramers or posting. Anyone has an idea how to find if this > is > the case? > > > ----- Original Message ---- > From: Marc Boorshtein <mboorsht...@gmail.com> > To: Tomcat Users List <users@tomcat.apache.org> > Sent: Sun, November 7, 2010 7:08:01 PM > Subject: Re: Malicious host is crashing my server > > Do a search on SQL injection and you will get plenty of results > > Sent from my iPad > > On Nov 7, 2010, at 1:03 PM, "Caldarale, Charles R" > <chuck.caldar...@unisys.com> > wrote: > >>> From: Martin Gainty [mailto:mgai...@hotmail.com] >>> Subject: RE: Malicious host is crashing my server >> >>> the culprit will change IPs >> >> That's why I said it was a temporary workaround. However, given the DNS name >> in use, it is likely assigned via DHCP by the perp's ISP, so an IP mask >> could be >> used to take out a range of IP addresses - at the risk of annoying any >> legitimate clients using the same ISP. >> >> - Chuck >> >> >> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY >> MATERIAL and is thus for use only by the intended recipient. If you received >> this in error, please contact the sender and delete the e-mail and its >> attachments from all computers. >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org >> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
