On Thu, Aug 05, 2004 at 07:50:07AM +0300, Paul Arakelyan wrote: PA>Hi! PA>Заглянул я в лог apache случайно (шо я там забыл - на том тазике кроме PA>просто apache и просто mldonkey - ничего нету) и PA>65.198.192.55 - - [20/Jul/2004:11:10:03 +0000] "\x80.\x01" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:03 +0000] "\x16\x03\x01" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:03 +0000] "\x16\x03" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:04 +0000] "GET / HTTP/1.0" 200 1456 "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:08 +0000] "\x80.\x01" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:08 +0000] "\x16\x03\x01" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:08 +0000] "\x16\x03" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:08 +0000] "GET / HTTP/1.0" 200 1456 "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:10 +0000] "GET / HTTP/1.1" 200 1456 "-" "Mo PA>65.198.192.55 - - [20/Jul/2004:11:10:10 +0000] "GET /syslog.htm HTTP/1.1" 404 29 PA>65.198.192.55 - - [20/Jul/2004:11:10:11 +0000] "GET / HTTP/1.1" 200 1456 "-" "Mo PA>65.198.192.55 - - [20/Jul/2004:11:10:11 +0000] "GET /syslog.htm HTTP/1.1" 404 29 PA>65.198.192.55 - - [20/Jul/2004:11:10:12 +0000] "a" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:14 +0000] "GG" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:21 +0000] "GET http://www.example.com HTTP/ PA>65.198.192.55 - - [20/Jul/2004:11:10:21 +0000] "GET http://www.example.com HTTP/ PA>65.198.192.55 - - [20/Jul/2004:11:10:22 +0000] "`" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:22 +0000] "`/bin/id` #" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:22 +0000] "`/usr/bin/id` #" 501 - "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:10:26 +0000] "GET / HTTP/1.1" 200 1456 "-" "Mo PA>65.198.192.55 - - [20/Jul/2004:11:10:26 +0000] "GET / HTTP/1.1" 200 1456 "-" "Mo PA>65.198.192.55 - - [20/Jul/2004:11:10:26 +0000] "GET /./WEB-INF/ HTTP/1.1" PA>... PA>65.198.192.55 - - [20/Jul/2004:11:21:05 +0000] "GET /servlet/AUX HTTP/1.1" 404 2 PA>65.198.192.55 - - [20/Jul/2004:11:21:06 +0000] "GET /servlet/AUX HTTP/1.1" 404 2 PA>65.198.192.55 - - [20/Jul/2004:11:21:16 +0000] "GET /NessusTest744659309.html HT PA>65.198.192.55 - - [20/Jul/2004:11:21:52 +0000] "GET /Gozila.cgi? HTTP/1.1" 404 2 PA>65.198.192.55 - - [20/Jul/2004:11:22:03 +0000] "GET /Gozila.cgi? HTTP/1.1" 404 2 PA>65.198.192.55 - - [20/Jul/2004:11:23:00 +0000] "are you dead ?" 400 378 "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:23:00 +0000] "GET /StreamingStatistics?120000 PA>65.198.192.55 - - [20/Jul/2004:11:23:06 +0000] "GET /StreamingStatistics?120000 PA>65.198.192.55 - - [20/Jul/2004:11:23:26 +0000] "GET /cgi-bin/view-source?/ HTTP/ PA>65.198.192.55 - - [20/Jul/2004:11:23:36 +0000] "GET /cgi-bin/view-source?/ HTTP/ PA>65.198.192.55 - - [20/Jul/2004:11:23:46 +0000] "are you dead ?" 400 378 "-" "-" PA>65.198.192.55 - - [20/Jul/2004:11:24:55 +0000] "are you dead ?" 400 378 "-" "-" PA>короче, 9000+ запросов разной степени отмороженности - похоже на попытку PA>перерыть типичные url для всего-чего-не-лень - от баннеров до e-commerce. PA>"Батьку, шо це?"(c) мальчик из анекдота. как-нить отморозок пытается тебя проламать -- Best regard, Aleksander Trotsai aka MAGE-RIPE aka MAGE-UANIC My PGP key at ftp://blackhole.adamant.ua/pgp/trotsai.key[.asc] Долг платежом страшен =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message