Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 8406 invoked from network); 4 Apr 2010 16:10:51 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 4 Apr 2010 16:10:51 -0000 Received: (qmail 52551 invoked by uid 500); 4 Apr 2010 16:10:48 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 52514 invoked by uid 500); 4 Apr 2010 16:10:48 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 52506 invoked by uid 99); 4 Apr 2010 16:10:48 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 04 Apr 2010 16:10:48 +0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=FREEMAIL_FROM,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of 0.fractalus@gmail.com designates 209.85.160.173 as permitted sender) Received: from [209.85.160.173] (HELO mail-gy0-f173.google.com) (209.85.160.173) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 04 Apr 2010 16:10:41 +0000 Received: by gyd5 with SMTP id 5so1660221gyd.18 for ; Sun, 04 Apr 2010 09:10:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=ZL4OvT6V9Ie4ds3WWGNkRqQ5mdImmegmXzePsxMs8KY=; b=ONL0FaNZs7W7ouFe5tyA1Z0YNOzTC+r+buLtXDUyno8f2EXAnnpFiYsbq0l0F07nR+ bIKoa+VXittWmjDvq5zh81RkpDfLFD6Twld2gtxz4ADjbqhINjxy92ymqRzN9xBUOMvC a1VgJ6qmctawC88gX41K/qvbhAzmMjtc8w+6E= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; b=E4PtCIXyEPro5Dw9vKB5dl+NwM/+AHT4HfJFyQ05UfYDnKdEZnwovpM65ATFvrW6Ti et1rvG94Xspa8Kv6nLAuY4f1O2ahRFX73tRsqM2NwWljXxdwff8mZbtjspL+ziNriCez lL+1yfc0qNEFLYDQQufL13ZJ07c8QMqUMW1io= Received: by 10.150.208.10 with SMTP id f10mr1780900ybg.261.1270397420256; Sun, 04 Apr 2010 09:10:20 -0700 (PDT) Received: from [192.168.0.118] (75-173-36-30.albq.qwest.net [75.173.36.30]) by mx.google.com with ESMTPS id 16sm7454087gxk.9.2010.04.04.09.10.18 (version=SSLv3 cipher=RC4-MD5); Sun, 04 Apr 2010 09:10:19 -0700 (PDT) Message-ID: <4BB8B9E8.1000706@gmail.com> Date: Sun, 04 Apr 2010 10:10:16 -0600 From: Morgan Gangwere <0.fractalus@gmail.com> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4 MIME-Version: 1.0 To: users@httpd.apache.org References: <4BB82FB9.1000401@lsces.co.uk> <4BB8673F.1030808@lsces.co.uk> In-Reply-To: <4BB8673F.1030808@lsces.co.uk> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [users@httpd] Someone hacked my apache2 server On 4/4/2010 4:17 AM, Lester Caine wrote: [a bunch of CHARs] Looking that the logs that were posted, there's nothing out of the ordinary, just people hammering a server for attempts in. This is more and more looking like a DNS attack. -- Morgan Gangwere >> Why? > Because it breaks the logical flow of conversation, plus makes messages unreadable. >>> Top-Posting is evil. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org