Re: Strange log file entry

by Reywob(at)aol.com

 Date:  Mon, 6 Aug 2001 04:48:35 EDT
 To:  hwg-servers(at)hwg.org
  todo: View Thread, Original
In a message dated 8/6/01 9:24:47 AM GMT Daylight Time, fillon(at)webstore.fr 
writes:

> you've been hacked ;-))
>  
>  In fact there is a new exploit on IIS and today people tries this new
>  exploit on world wide web
>  (last 2 hours I received about 3000 request like this ... but I am under
>  linux ... :)))
>  
>  Hope you are using Linux .... or apaci ...

Linux with Apache ;-)

What worries me is that these entries are showing up on my local web server 
(Apache on this computer's hard drive) so obviously when I am connected to 
the internet and have my local copy of apache running, it is insecure.  Yeeks!

Any ideas how I could secure it?  I've thought about installing ZoneAlarm, 
but people have reported it ccausing blue creens and oher lovely stuff, so 
I'm don't really want to risk it :-(

In case any of you like chasing IP addresses, here's my local log file 
entries:
[Sun Aug 05 12:09:52 2001] [error] [client 172.153.223.8] File does not 
exist: c:/apache/htdocs/default.ida
[Sun Aug 05 12:24:43 2001] [error] [client 194.106.252.37] File does not 
exist: c:/apache/htdocs/default.ida
[Sun Aug 05 14:05:51 2001] [error] [client 194.254.169.116] File does not 
exist: c:/apache/htdocs/default.ida
[Sun Aug 05 14:07:41 2001] [error] [client 194.44.236.77] File does not 
exist: c:/apache/htdocs/default.ida
[Sun Aug 05 15:41:08 2001] [error] [client 194.185.177.35] File does not 
exist: c:/apache/htdocs/default.ida
[Sun Aug 05 20:59:30 2001] [error] [client 194.236.31.208] File does not 
exist: c:/apache/htdocs/default.ida

Thanks,
Peter.

HWG: hwg-servers mailing list archives, maintained by Webmasters @ IWA