Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Nov 2001 21:56:38 -0500
From:      "Andrew C. Hornback" <achornback@worldnet.att.net>
To:        "Keith Spencer" <bsd2000au@yahoo.com.au>, "fbsd" <freebsd-questions@freebsd.org>
Subject:   RE: Is this an attack guys???Help!
Message-ID:  <009c01c16e4a$4f65ee40$6600000a@ach.domain>
In-Reply-To: <20011116024710.22642.qmail@web12005.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> -----Original Message-----
> From: owner-freebsd-questions@FreeBSD.ORG
> [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Keith Spencer
> Sent: Thursday, November 15, 2001 9:47 PM
> To: fbsd
> Subject: Is this an attack guys???Help!
>
> Hi all,
> This is an Apache error log snippet.
> My server is infact FreeBSD 4.4
> I often find these page request errors from the same
> address or one of the same C-class space.
> IT looks lke an attack to me...What thinks you?
> Thanks Keith
> +++++++++++++++++++++++++++++++++++

[log snipped]

	You're being attacked by the Nimda/Code Red series of virii.  Biggest
things you've got to worry about are filling up your log files with this
crap and filling up your pipe to the rest of the world.  As far as I know,
you're in no danger of actually being compromised by this.

--- Andy


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?009c01c16e4a$4f65ee40$6600000a>