Re: Being cracked? (need help on apache log files)
On Mon, 29 Oct 2001, Sebastiaan wrote:
> Looks like a harmless attempt, because it tries to open M$ files. If this
> goes on and on you might want to block acces from that host. Perhaps a
> previous user of your ip had a warez ftp server and people try to login to
> download stuff. Look from where the attack is coming:
This looks like Code Red/NIMDA/Whatever-the-exploit's-called-this-week
attacks and would happen regardless of if someone previously had a warez
server.
--
Baloo
Reply to: