date:20021005

AW: Bizarre apache logs

2002-10-05 Thread Marcel Weber

Hi Well it's not exactly nimda but an older one AFAIK. Nimda are these balba.ida%ddd and so on. But that's not what I'm worried about, as these attacks are that common. I'm rather suprised to see, that the attacker got one 404 response from the webserver. He should have got a 403 r

Re: Bizarre apache logs

2002-10-05 Thread Phillip Hofmeister

A few words: Lazy and/or ignorant system administrators. Then again...NT/2000 is so easy that you don't have to be a good administrator to run a box...*sigh* -- Phil PGP/GPG Key: http://www.zionlth.org/~plhofmei/ wget -O - http://www.zionlth.org/~plhofmei/ | gpg --import XP Source Code: #inc

Re: Bizarre apache logs

2002-10-05 Thread DL

Looks like part of the Nimda virus that's rampant. It's looking for exploitable holes in IIS. Since you're running apache, I don't believe you have much to worry about. There are some apache modules out there that you can install, that will take the IP address from your log when it sees thing

Bizarre apache logs

2002-10-05 Thread Marcel Weber

Hi I had some bizarre 404 entries in my apache logs. They are very rare, but it looks as they resulted from an attempted attack. Well say it was a rather lame attack, but I wonder where the 404 and 400 came from. As the server is configured, there should be only 403 answers, as the whole http part

AW: Bizarre apache logs

2002-10-05 Thread Marcel Weber

Hi Well it's not exactly nimda but an older one AFAIK. Nimda are these balba.ida%ddd and so on. But that's not what I'm worried about, as these attacks are that common. I'm rather suprised to see, that the attacker got one 404 response from the webserver. He should have got a 403

Re: Bizarre apache logs

2002-10-05 Thread Phillip Hofmeister

A few words: Lazy and/or ignorant system administrators. Then again...NT/2000 is so easy that you don't have to be a good administrator to run a box...*sigh* -- Phil PGP/GPG Key: http://www.zionlth.org/~plhofmei/ wget -O - http://www.zionlth.org/~plhofmei/ | gpg --import XP Source Code: #in

Re: Bizarre apache logs

2002-10-05 Thread DL

Looks like part of the Nimda virus that's rampant. It's looking for exploitable holes in IIS. Since you're running apache, I don't believe you have much to worry about. There are some apache modules out there that you can install, that will take the IP address from your log when it sees thing

Bizarre apache logs

2002-10-05 Thread Marcel Weber

Hi I had some bizarre 404 entries in my apache logs. They are very rare, but it looks as they resulted from an attempted attack. Well say it was a rather lame attack, but I wonder where the 404 and 400 came from. As the server is configured, there should be only 403 answers, as the whole http par