From owner-freebsd-security Sat Nov 3 8:23:22 2001 Delivered-To: freebsd-security@freebsd.org Received: from smtp.clifftop.net (machassociates-6.dsl.easynet.co.uk [217.204.162.182]) by hub.freebsd.org (Postfix) with ESMTP id A7C2137B416 for ; Sat, 3 Nov 2001 08:23:19 -0800 (PST) Received: from sisko (sisko.clifftop.net [192.168.1.10]) (authenticated bits=0) by smtp.clifftop.net (8.12.1/8.12.1) with ESMTP id fA3GNFGo001187 for ; Sat, 3 Nov 2001 16:23:16 GMT From: "Danny Horne" To: Subject: OT - Attack on Apache? Date: Sat, 3 Nov 2001 16:24:14 -0000 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi all, I've just blocked an IP at my firewall after seeing these entries (many of them) in my Apache log. Anyone know if this was some sort of attack? I've never seen it before myself. 217.82.121.20 - - [03/Nov/2001:16:06:04 +0000] "-" 408 - "-" "-" 217.82.121.20 - - [03/Nov/2001:16:06:45 +0000] "-" 408 - "-" "-" 217.82.121.20 - - [03/Nov/2001:16:07:34 +0000] "-" 408 - "-" "-" 217.82.121.20 - - [03/Nov/2001:16:08:15 +0000] "-" 408 - "-" "-" Thanks for all replies -- don't do that, it'll crash the sys........ SHIT To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message