From owner-freebsd-questions@FreeBSD.ORG Tue May 18 15:15:49 2010 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 45A4F106564A for ; Tue, 18 May 2010 15:15:49 +0000 (UTC) (envelope-from prvs=7471c0cae=pschmehl_lists@tx.rr.com) Received: from ip-001.utdallas.edu (ip-001.utdallas.edu [129.110.20.107]) by mx1.freebsd.org (Postfix) with ESMTP id 1914A8FC12 for ; Tue, 18 May 2010 15:15:48 +0000 (UTC) X-Group: None X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AtEEAMtE8kuBbgogUmdsb2JhbACeDAEkQb45glmCNwSDQA X-IronPort-AV: E=Sophos;i="4.53,255,1272862800"; d="scan'208";a="32790724" Received: from zxtm01.utdallas.edu (HELO utd65257.utdallas.edu) ([129.110.10.32]) by ip-001.utdallas.edu with ESMTP/TLS/DHE-RSA-AES256-SHA; 18 May 2010 09:46:21 -0500 Date: Tue, 18 May 2010 09:46:21 -0500 From: Paul Schmehl To: Aiza , questions@freebsd.org Message-ID: <526539EEF1C8A2D46277CD50@utd65257.utdallas.edu> In-Reply-To: <4BF26530.3080501@comclark.com> References: <4BF26530.3080501@comclark.com> X-Mailer: Mulberry/4.0.6 (Linux/x86) X-Munged-Reply-To: Figure it out MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Cc: Subject: Re: Apache web server being attacked X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Paul Schmehl List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 May 2010 15:15:49 -0000 --On Tuesday, May 18, 2010 18:00:16 +0800 Aiza wrote: > > Has anyone seen this junk hitting their apache web servers or have any > different explanation of what this means? Any webserver on the internet will see that crap. Generally it's preceded by a syn scan to identify hosts listening on port 80, then everything but the kitchen sink shows up. -- Paul Schmehl, Senior Infosec Analyst As if it wasn't already obvious, my opinions are my own and not those of my employer. ******************************************* "It is as useless to argue with those who have renounced the use of reason as to administer medication to the dead." Thomas Jefferson