Yes, Asia IPs usually mean DOS attacks.<div><br></div><div>I recommend you get a software firewall (eg. peerblock) on your server to monitor how many, and what frequency these Asian IPs are coming in.</div><div>If you see requests coming in every 2-3 seconds, then you can be safe that your domain is on a list somewhere and is propagating around the china bot nets that have been compromised.</div>
<div><br></div><div>I use my firewall to block everyone, then only allow the ranges (or countries) that I want to access my site through. </div><div>After a while they stop even trying to attack you, adn your domain will remove from their bot lists as a target machine.<br>
<br><div class="gmail_quote">On Mon, May 14, 2012 at 10:15 AM, Chris Gountanis <span dir="ltr"><<a href="mailto:cgountanis@mpowerinnovations.com" target="_blank">cgountanis@mpowerinnovations.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Could this be a sign of some kind of brute force or some kind of DoS attack?<br>
Anyone else have this issue with a public server? MapGuide 2.2 Open Source /<br>
IIS / Windows 2008. Please respond as we have a client that is about to drop<br>
MapGuide because of this and we don't have much of a solution yet. I know we<br>
can run the server in debug (console) and maybe help the developers narrow<br>
this exploit down BUT I was hoping this might of already been tackled...<br>
maybe fixed in 2.4?<br>
<br>
<br>
<2012-05-11T10:27:18> 600 Ajax Viewer 150.70.75.29<br>
Error: Session has expired or is invalid. Please log in again.<br>
StackTrace:<br>
- MgSiteServiceHandler.ProcessOperation() line 83 file<br>
c:\builds\mg22win32\mgdev\server\src\services\site\SiteServiceHandler.cpp<br>
- MgOpAuthenticate.Execute() line 107 file<br>
c:\builds\mg22win32\mgdev\server\src\services\site\OpAuthenticate.cpp<br>
- MgServerSiteService.Authenticate() line 709 file<br>
c:\builds\mg22win32\mgdev\server\src\services\site\ServerSiteService.cpp<br>
- MgSecurityManager.Authenticate() line 224 file<br>
c:\builds\mg22win32\mgdev\server\src\common\manager\SecurityManager.cpp<br>
- MgSessionCache.GetSessionInfo() line 175 file<br>
c:\builds\mg22win32\mgdev\server\src\common\manager\SessionCache.cpp<br>
<br>
--<br>
View this message in context: <a href="http://osgeo-org.1560.n6.nabble.com/Error-Session-has-expired-or-is-invalid-Please-log-in-again-Server-Crash-from-Asia-IP-EVERYDAY-tp4974449.html" target="_blank">http://osgeo-org.1560.n6.nabble.com/Error-Session-has-expired-or-is-invalid-Please-log-in-again-Server-Crash-from-Asia-IP-EVERYDAY-tp4974449.html</a><br>
Sent from the MapGuide Users mailing list archive at Nabble.com.<br>
_______________________________________________<br>
mapguide-users mailing list<br>
<a href="mailto:mapguide-users@lists.osgeo.org">mapguide-users@lists.osgeo.org</a><br>
<a href="http://lists.osgeo.org/mailman/listinfo/mapguide-users" target="_blank">http://lists.osgeo.org/mailman/listinfo/mapguide-users</a><br>
</blockquote></div><br></div>