The Planet Forums > People won't leave my server alone.

Full Version: People won't leave my server alone.

The Planet Forums > General > The Lounge

Rob

Jul 18 2002, 01:26 PM

I have entries like the following all through my apache logfiles:

208.63.189.63 - - [18/Jul/2002:08:51:33 -0400] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 339 "-" "-"

What the heck are they looking for?!

Rob

rackAID

Jul 18 2002, 01:28 PM

I think that is code red or a deriatives. If there is a particular IP harassing your box, you can drop their IP into your firewall.

Dathorn_AndrewT

Jul 18 2002, 01:57 PM

Yes, that is code red. Wont do anything but fill your logs unless you are getting it from a lot of different IP's

Rob

Jul 18 2002, 03:52 PM

I didn't know what 'code red' was until I just did a search on yahoo. Apparently it only effects Micro$oft servers

Thanks for the info!

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.