Date: Sat, 19 Jan 2002 23:31:18 -0500 From: "C J Michaels" <cjm2@earthling.net> To: "pirat" <pirat@access.inet.co.th> Cc: <questions@freebsd.org> Subject: RE: strange apache log output Message-ID: <OGEFLCDDBCNNBEFGIFEFGEJPCAAA.cjm2@earthling.net> In-Reply-To: <20020120094603.A16651@radwaste.oaep.go.th>
next in thread | previous in thread | raw e-mail | index | archive | help
It means that the system at 203.155.64.7 is infect with the Nimda worm and it is trying to spread it to you. It's harmless to apache (except for flooding your logs). http://www.cert.org/advisories/CA-2001-26.html Specifically that line is saying that a client at IP 203.155.64.7 @ the given date/time requested the file "/scripts/root.exe?/c+dir", and was returned error 404 (which means the page doesn't exist). --Chris > -----Original Message----- > From: owner-freebsd-questions@FreeBSD.ORG > [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of pirat > Sent: Saturday, January 19, 2002 9:46 PM > To: questions@FreeBSD.ORG > Subject: strange apache log output > > > hi sirs, > > i've run apache in my machine, FreeBSD-4.4 stabled, and most of > entry in the log file output is > > 203.155.64.7 - - [20/Jan/2002:09:21:05 +0700] "GET > /scripts/root.exe?/c+dir HTTP/1.0" 404 276 "-" "-" > > what does it mean and sometime the code is 400 instead of 404 > > please cc to me since i do not subscribe to this list. > > many thanks in advance. > > with best regards, > psr > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?OGEFLCDDBCNNBEFGIFEFGEJPCAAA.cjm2>