Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 May 2010 09:46:21 -0500
From:      Paul Schmehl <pschmehl_lists@tx.rr.com>
To:        Aiza <aiza21@comclark.com>, questions@freebsd.org
Subject:   Re: Apache web server being attacked
Message-ID:  <526539EEF1C8A2D46277CD50@utd65257.utdallas.edu>
In-Reply-To: <4BF26530.3080501@comclark.com>
References:  <4BF26530.3080501@comclark.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--On Tuesday, May 18, 2010 18:00:16 +0800 Aiza <aiza21@comclark.com> wrote:
>
> Has anyone seen this junk hitting their apache web servers or have any
> different explanation of what this means?

Any webserver on the internet will see that crap.  Generally it's preceded by a 
syn scan to identify hosts listening on port 80, then everything but the 
kitchen sink shows up.

-- 
Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
*******************************************
"It is as useless to argue with those who have
renounced the use of reason as to administer
medication to the dead." Thomas Jefferson




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?526539EEF1C8A2D46277CD50>