Date: Wed, 16 Nov 2005 23:56:06 +0100 From: dick hoogendijk <dick@nagual.st> To: freebsd-questions <freebsd-questions@freebsd.org> Subject: strange msg lines.. Message-ID: <20051116225606.GA28421@lothlorien.nagual.st>
next in thread | raw e-mail | index | archive | help
I get a lot of these rules in my log file lately. Don't know why they are not logged in the error.log file. And if they are harmful or not. ==--== 83.30.48.99 - - [16/Nov/2005:23:44:18 +0100] "GET / HTTP/1.1" 200 1860 "http://puttane-grandi-tette.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 85.106.229.37 - - [16/Nov/2005:23:44:24 +0100] "GET / HTTP/1.1" 200 1860 "http://hosting-siti-adulti.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 81.214.204.104 - - [16/Nov/2005:23:46:38 +0100] "GET / HTTP/1.1" 200 1860 "http://hosting-siti-adulti.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 213.219.227.97 - - [16/Nov/2005:23:46:50 +0100] "GET / HTTP/1.1" 200 1860 "http://hosting-siti-adulti.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 85.99.124.253 - - [16/Nov/2005:23:47:48 +0100] "GET / HTTP/1.1" 200 1860 "http://foto-porno-amatoriale.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 85.102.158.174 - - [16/Nov/2005:23:48:33 +0100] "GET / HTTP/1.1" 200 1860 "http://puttane-grandi-tette.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 61.240.180.73 - - [16/Nov/2005:23:50:11 +0100] "GET / HTTP/1.1" 200 1860 "http://foto-porno-amatoriale.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 207.46.98.79 - - [16/Nov/2005:23:51:13 +0100] "GET /favicon.ico HTTP/1.0" 200 2238 "-" "msnbot/1.0 (+http://search.msn.com/msnbot.htm)" 85.102.124.254 - - [16/Nov/2005:23:51:31 +0100] "GET / HTTP/1.1" 200 1860 "http://foto-porno-amatoriale.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 217.10.38.59 - - [16/Nov/2005:23:52:00 +0100] "GET / HTTP/1.1" 200 1860 "http://hosting-siti-adulti.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 81.222.178.17 - - [16/Nov/2005:23:52:11 +0100] "GET / HTTP/1.1" 200 1860 "http://foto-porno-amatoriale.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" These are not normal requests to my apache server. But it seems to "listen" to them. Am I 'in danger?' -- dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE ++ Running FreeBSD 6.0 +++ The Power to Serve
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051116225606.GA28421>