You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "J. Greenlees" <ja...@shaw.ca> on 2003/01/17 02:19:13 UTC
Re: [users@httpd] Errors!!!!
system@eluminoustechnologies.com wrote:
> Hello All,
>
> Now this time the IPs are changed? Do u all think that my assumption is
> Correct Could all these Machine's Contains Code-Red Virus and they are
> tyring to access my server?
> All these ips are sending malform header to my server ? or may be thery
> are Spoofed?
>
> 200.47.173.193
> 24.193.133.39
> 24.112.84.250
> 213.10.131.56
> 63.187.80.237
> 195.38.28.40
> 148.223.124.179
> 217.157.86.9
> 218.5.87.83
>
> [root@server admusr]# cat /etc/httpd/logs/access_log | grep 217.157.86.9
> 217.157.86.9 - - [17/Jan/2003:03:17:39 -0500] "GET
> /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> HTTP/1.0" 400 333 "-" "-"
> [root@server admusr]# cat /etc/httpd/logs/access_log | grep 218.5.87.83
> 218.5.87.83 - - [17/Jan/2003:03:52:03 -0500] "GET
> /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> HTTP/1.0" 400 327 "-" "-"
> Help me pls.
>
> Regards,
>
> Cindy
9 isn't many at all.
I went through my logs after being up an running for a week and had 300
infected servers in them. most from my isp's network, since they promote
windows and iis.
sent the logs to them and it dropped to only 50 infected servers a week.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org