[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: apache being hit



> Er... sorry to all, but I just noticed that I am STILL getting a lot
> of requests (sorry for marking this as solved!... my mistake).

Maybe some of the websites 'abusing' you still have you listed as an open
proxy. This would mean the requests are made, but not succesfully answered
by your server.

For example, you should worry if your access log shows:

10.0.0.31 - - [09/Nov/2004:17:27:01 +0100] "GET /apache2-default/ HTTP/1.1"
200 1969 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET
CLR 1.1.4322)"

Since the '200' after the request (the GET) means succesfull.

However, you should not worry if your access log shows:

193.147.68.144 - - [09/Nov/2004:02:14:22 +0100] "GET
/scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 346 "-" "-"
193.147.68.141 - - [09/Nov/2004:08:16:54 +0100] "GET
/scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" 404 346 "-" "-"

Since the '404' after the request (the GET) means failed.

HTH
Dan




Reply to: