Originally to: Phillp Morgan
Hi Phillp Morgan
you wrote about "Blocking hackers":
PM> It looks like someone is trying to break into my system. This is
PM> out of my apache error log...
>> 61.243.140.78 - - [21/Jun/2002:13:58:29 +1000] "GET
>> /MSADC/root.exe?/c+dir
this is code red (virus
.
Steve
> -Original Message-
> From: Chuck Gelm [mailto:[EMAIL PROTECTED]]
> Sent: Friday, June 21, 2002 3:50 PM
> To: Phillp Morgan; [EMAIL PROTECTED]
> Subject: Re: Blocking hackers
>
>
> I get the same thing, Phillp.
>
> It is not a hacker, it is
I get the same thing, Phillp.
It is not a hacker, it is a trojan infected user.
The host owner probably has no idea that his system
is trying to infect your web server with Nimda.
If you are not running an unpatched version of a
Windows server, you are not vulnerable to this attack.
It consumes
the same host over and over attacking your machines in a
human like way.
> On Fri, 21 Jun 2002, Phillp Morgan wrote:
>
>
>>Thanks for your advice guyz.
>>
>>
>>
>>>-Original Message-
>>>From: Joseph Jackson [mailto:[EMAIL PROTEC
, Phillp Morgan wrote:
> Thanks for your advice guyz.
>
>
> > -Original Message-
> > From: Joseph Jackson [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, 21 June 2002 4:31 PM
> > To: Phillp Morgan
> > Subject: Re: Blocking hackers
> >
> >
Thanks for your advice guyz.
> -Original Message-
> From: Joseph Jackson [mailto:[EMAIL PROTECTED]]
> Sent: Friday, 21 June 2002 4:31 PM
> To: Phillp Morgan
> Subject: Re: Blocking hackers
>
>
> Phillp Morgan wrote:
>
> > Hi,
> >
> > It
Phillp Morgan wrote:
> Hi,
>
> It looks like someone is trying to break into my system. This is out of my
> apache error log...
>
>
>>61.243.140.78 - - [21/Jun/2002:13:58:29 +1000] "GET /MSADC/root.exe?/c+dir
>>
> HTTP/1.0" 404 -
>
>>61.243.140.78 - - [21/Jun/2002:13:58:30 +1000] "GET
On Friday 21 June 2002 03:57, Phillp Morgan wrote:
> Hi,
>
> It looks like someone is trying to break into my system. This is out of my
> apache error log...
>
> >61.243.140.78 - - [21/Jun/2002:13:58:29 +1000] "GET /MSADC/root.exe?/c+dir
>
> HTTP/1.0" 404 -
>
> >61.243.140.78 - - [21/Jun/2002:13:5