From owner-freebsd-questions@FreeBSD.ORG Wed Nov 16 22:56:09 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 42B3116A420 for ; Wed, 16 Nov 2005 22:56:09 +0000 (GMT) (envelope-from dick@nagual.st) Received: from nagual.st (cc20684-a.assen1.dr.home.nl [82.74.2.186]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0876843D45 for ; Wed, 16 Nov 2005 22:56:07 +0000 (GMT) (envelope-from dick@nagual.st) Received: from localhost (localhost [127.0.0.1]) (uid 1000) by nagual.st with local; Wed, 16 Nov 2005 23:56:06 +0100 id 0003982F.437BB906.00006F1E Date: Wed, 16 Nov 2005 23:56:06 +0100 To: freebsd-questions Message-ID: <20051116225606.GA28421@lothlorien.nagual.st> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Disposition: inline User-Agent: Mutt/1.4.2.1i From: dick hoogendijk Subject: strange msg lines.. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Nov 2005 22:56:09 -0000 I get a lot of these rules in my log file lately. Don't know why they are not logged in the error.log file. And if they are harmful or not. ==--== 83.30.48.99 - - [16/Nov/2005:23:44:18 +0100] "GET / HTTP/1.1" 200 1860 "http://puttane-grandi-tette.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 85.106.229.37 - - [16/Nov/2005:23:44:24 +0100] "GET / HTTP/1.1" 200 1860 "http://hosting-siti-adulti.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 81.214.204.104 - - [16/Nov/2005:23:46:38 +0100] "GET / HTTP/1.1" 200 1860 "http://hosting-siti-adulti.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 213.219.227.97 - - [16/Nov/2005:23:46:50 +0100] "GET / HTTP/1.1" 200 1860 "http://hosting-siti-adulti.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 85.99.124.253 - - [16/Nov/2005:23:47:48 +0100] "GET / HTTP/1.1" 200 1860 "http://foto-porno-amatoriale.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 85.102.158.174 - - [16/Nov/2005:23:48:33 +0100] "GET / HTTP/1.1" 200 1860 "http://puttane-grandi-tette.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 61.240.180.73 - - [16/Nov/2005:23:50:11 +0100] "GET / HTTP/1.1" 200 1860 "http://foto-porno-amatoriale.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 207.46.98.79 - - [16/Nov/2005:23:51:13 +0100] "GET /favicon.ico HTTP/1.0" 200 2238 "-" "msnbot/1.0 (+http://search.msn.com/msnbot.htm)" 85.102.124.254 - - [16/Nov/2005:23:51:31 +0100] "GET / HTTP/1.1" 200 1860 "http://foto-porno-amatoriale.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 217.10.38.59 - - [16/Nov/2005:23:52:00 +0100] "GET / HTTP/1.1" 200 1860 "http://hosting-siti-adulti.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" 81.222.178.17 - - [16/Nov/2005:23:52:11 +0100] "GET / HTTP/1.1" 200 1860 "http://foto-porno-amatoriale.com" "Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)" These are not normal requests to my apache server. But it seems to "listen" to them. Am I 'in danger?' -- dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE ++ Running FreeBSD 6.0 +++ The Power to Serve