Re: Anyone Else Getting Hits Like This ?

Subject: Re: Anyone Else Getting Hits Like This ?
From: W.D.McKinney (deem@wdm.com)
Date: Fri Mar 01 2002 - 20:46:08 AKST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Jon: "Re: Anyone Else Getting Hits Like This ?"
• Previous message: George A. Dowding: "Logging in bash"

using iptables

# iptables -I INPUT -s 209.34.27.7 -j DROP

Jon <jonr@destar.net> wrote:
> I'm getting that also, is there a way to block it?
>
> Jon
>
> On Wed, 2002-02-27 at 18:14, W.D.McKinney wrote:
> >
> > Yes, just wondering how prolific it is still :-)
> >
> > "Jason C. Neumann" <lister@geekvenue.net> wrote:
> > >
> > > My site's logging quite a few. I believe it's our good 'ol friend nimda or
> > > similar.
> > >
> > > -Jason
> > >
> > > > 209.34.27.7 - - [27/Feb/2002:08:31:47 -0900] "GET /scripts/root.exe?/c+dir
> > > HTTP/1.0" 404 278
> > > > 209.34.27.7 - - [27/Feb/2002:08:31:48 -0900] "GET /MSADC/root.exe?/c+dir
> > > HTTP/1.0" 404 276
> > > > 209.34.27.7 - - [27/Feb/2002:08:31:50 -0900] "GET
> > > /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 286
> > > > 209.34.27.7 - - [27/Feb/2002:08:31:51 -0900] "GET
> > > /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
> > >
> >
> >
> > --
> > W.D.McKinney (Dee)
> > (907)349-4308 (Office)
> > (907)349-2226 (Fax)
> > http://3519098920
> >
> >
> >

--
W.D.McKinney (Dee)
(907)349-4308 (Office)
(907)349-2226 (Fax)
http://3519098920

• Next message: Jon: "Re: Anyone Else Getting Hits Like This ?"
• Previous message: George A. Dowding: "Logging in bash"

This archive was generated by hypermail 2a23 : Fri Mar 01 2002 - 20:40:12 AKST