email from root
Posted by Saryooo, 04-18-2007, 05:39 AM Daily i am getting this kind of emails from my VPS. I don;t understand this emails, can some one explain what is this. ------------------------------------------ Time: Wed Apr 18 03:37:58 2007 IP: xx.xx.xxx.xx (livebot-65-55-212-73.search.live.com) Connections: 198 Blocked: temporarily Connections: tcp 0 0 xx.xx.xxx.xxx:80 xx.xx.xxx.xx:39478 TIME_WAIT tcp 0 0 xx.xx.xxx.xxx:80 xx.xx.xxx.xx:38710 TIME_WAIT tcp 0 0 xx.xx.xxx.xxx:80 xx.xx.xxx.xx:40501 TIME_WAIT tcp 0 0 xx.xx.xxx.xxx:80 xx.xx.xxx.xx:40499 TIME_WAIT .......... --------------------------------------------
Posted by juangake, 04-18-2007, 08:41 AM I think that the email you're showing is from mod_evasive, an Apache module that blocks IPs based on concurrent connections (assuming DoS attacks) It seems to be blocking a "live.com" search bot. Regards, Juan
Posted by taknet, 05-07-2007, 11:01 AM Hello, mod_evasive install and configure on my server and work exactly. But when system block an ip, im not recive any report mail. What i doing for recive report mail?
Posted by tanfwc, 05-07-2007, 11:23 AM this seems to be blocked by ConfigServer Firewall because the template of the email looks familiar to me