I created a php 404 Error page, where I list the fingerprints of the worms 
I know.
If I find one of them is causing the request, I let the script simply die 
so I don't waste any more bandwidth then neccessary on these anoying 
creatures.

I thought about blocking IP's involved but the sources of the requests 
change too often.

HTH,

Vinai

--On Dienstag, Dezember 04, 2001 23:25:50 -0500 Robert Ruzbacky 
<[EMAIL PROTECTED]> wrote:

> Is there any docs / FAQs on apache  re: stopping bots accessing it.  At
> the moment, one of the worms keeps trying to access
> /winnt/system32/cmd.exe even though it doesn't exist on debian (or
> unixfor that matter).
>
> I suppose it's a waste of bandwidth as it keeps cropping up every few
> minutes..other than that, it doesn't seem to affect the system.
>
> Robert..
>
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
>
>
>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to