On 6/7/05, Patrick Donker <list@xxxxxxxxxxxx> wrote: > Did you do an ip lookup for the source ip? If it belongs to one of the > searchengine clubs, then it is unlikely. I did a reverse DNS lookup. Is this what you meant by "ip lookup" ? Any tips on this would be most welcome. >And if it is an attempt, it > usually is one of those scriptkiddie/zombie IIS hacks... > The scriptkiddie is obvious, I wouldn't even bother the list with this if our server didn't rebooted close to this time. I'm investigating why the reboot occurred, and the logs I've attached are ~in the same. <RANT> windows + servers, oh what a joke </RANT> Thanks for tips. -- Cheers, Maxim Vexler (hq4ever). Do u GNU ? --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|