Site possibly under attack again.

[Smith6612]

Hey guys, I visited my error log today as I usually do every log-in and I noticed repeated messages like this within a few seconds. When I do a look-up on this IP in WHOIS, it comes up to eCommerce web hosting. What do you guys suggest I do, as I've already blocked them via cPanel. They have used the useragent I believe of MSNbot.

[Fri Jun 27 14:20:43 2008] [error] [client 98.130.2.16] File does not exist: /home/seansite/public_html/forums/inurl:index.php

[Fri Jun 27 14:23:19 2008] [error] [client 98.130.2.16] ALERT - ASCII-NUL chars not allowed within request variables - dropped variable 'action' (attacker '98.130.2.16', file '/home/seansite/public_html/forums/index.php')

 

[Brandon]

Nobody is really attacking you, you just has some illegal characters in a query string. 'attacker' is defined as the IP trying to make the request in Suhosin.

I wouldn't really worry about it.

 

[Smith6612]

OK, thanks Brandon.