httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Thomas Bolioli <i...@terranovum.com>
Subject Re: [users@httpd] data in the error log file
Date Fri, 10 Jan 2003 02:07:36 GMT
Be glad you run Apache ;-)
The first two are IIS cracks (virii) and will only infect unpatched Win 
NT based IIS installations. One is Code Red et al;. The second is a 
common one of origin I do not know. The third is ???
Tom

Arun kumar R wrote:

>I am having the below listed type of messages in my
>log files daily. I am blocking some IP address but
>they are comming with new IP address again. Can anyone
>help me in understand what they are trying to do and
>how to restrict them.
>
>67.2.46.255 - - [09/Jan/2003:09:43:25 -0800] "GET
>/default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> HTTP/1.0" 400 309 "-" "-"
>65.70.33.186 - - [09/Jan/2003:10:53:28 -0800] "GET
>/scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir"
>404 1079 "-" "-"
>66.236.93.67 - - [09/Jan/2003:11:38:38 -0800] "GET
>/sumthin HTTP/1.0" 404 1079 "-" "-"
>
>Regards
>Arun
>
>__________________________________________________
>Do you Yahoo!?
>Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
>http://mailplus.yahoo.com
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>  
>

-- 
-----------------------------------------------------
Terra Novum Research
info@terranovum.com
www.terranovum.com
(617) 923-4132

PO Box 362
Watertown, MA 02471-0362

"If Tyranny and Oppression come to this land, 
it will be in the guise of fighting a foreign enemy." 
	-- James Madison, as a United States Congressman



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message