Re: Blocking hackers

Originally to: Phillp Morgan Hi Phillp Morgan you wrote about "Blocking hackers": PM> It looks like someone is trying to break into my system. This is PM> out of my apache error log... >> 61.243.140.78 - - [21/Jun/2002:13:58:29 +1000] "GET >> /MSADC/root.ex

RE: Blocking hackers

. Steve > -Original Message- > From: Chuck Gelm [mailto:[EMAIL PROTECTED]] > Sent: Friday, June 21, 2002 3:50 PM > To: Phillp Morgan; [EMAIL PROTECTED] > Subject: Re: Blocking hackers > > > I get the same thing, Phillp. > > It is not a hacker, it is

Re: Blocking hackers

I get the same thing, Phillp. It is not a hacker, it is a trojan infected user. The host owner probably has no idea that his system is trying to infect your web server with Nimda. If you are not running an unpatched version of a Windows server, you are not vulnerable to this attack. It consumes

Re: Blocking hackers - Thanks

the same host over and over attacking your machines in a human like way. > On Fri, 21 Jun 2002, Phillp Morgan wrote: > > >>Thanks for your advice guyz. >> >> >> >>>-Original Message- >>>From: Joseph Jackson [mailto:[EMAIL PROTEC

RE: Blocking hackers - Thanks

, Phillp Morgan wrote: > Thanks for your advice guyz. > > > > -Original Message- > > From: Joseph Jackson [mailto:[EMAIL PROTECTED]] > > Sent: Friday, 21 June 2002 4:31 PM > > To: Phillp Morgan > > Subject: Re: Blocking hackers > > > >

RE: Blocking hackers - Thanks

Thanks for your advice guyz. > -Original Message- > From: Joseph Jackson [mailto:[EMAIL PROTECTED]] > Sent: Friday, 21 June 2002 4:31 PM > To: Phillp Morgan > Subject: Re: Blocking hackers > > > Phillp Morgan wrote: > > > Hi, > > > > It

[Fwd: Re: Blocking hackers]

Phillp Morgan wrote: > Hi, > > It looks like someone is trying to break into my system. This is out of my > apache error log... > > >>61.243.140.78 - - [21/Jun/2002:13:58:29 +1000] "GET /MSADC/root.exe?/c+dir >> > HTTP/1.0" 404 - > >>61.243.140.78 - - [21/Jun/2002:13:58:30 +1000] "GET

Re: Blocking hackers

On Friday 21 June 2002 03:57, Phillp Morgan wrote: > Hi, > > It looks like someone is trying to break into my system. This is out of my > apache error log... > > >61.243.140.78 - - [21/Jun/2002:13:58:29 +1000] "GET /MSADC/root.exe?/c+dir > > HTTP/1.0" 404 - > > >61.243.140.78 - - [21/Jun/2002:13:5

Blocking hackers

Hi, It looks like someone is trying to break into my system. This is out of my apache error log... >61.243.140.78 - - [21/Jun/2002:13:58:29 +1000] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 - >61.243.140.78 - - [21/Jun/2002:13:58:30 +1000] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 - >61