Dziwne logi w apachu

Article View: pl.comp.sieci

Article #221

#221

From: Kocur
Date: Wed, 08 Feb 2006 15:43

19 lines
2020 bytes

Nie wiem czy pisze na dobra grupe, ale mam dziwne logi w apachu a
mianowicie jakby ktos mnie skanował po porcie 80.
Oto fragment (zaledwie 2 linijki)
65.111.166.137 - - [08/Feb/2006:16:42:06 +0100] "POST
http://www.heatingshp.com/_derived/nortbots.htm HTTP/1.1" 405 3923
"http://www.heatingshp.com/" "-"
222.89.236.95 - - [08/Feb/2006:16:42:06 +0100] "GET
http://txsearch.epilot.com/getresults.aspx?aff=all4seek&ip=84%2E205%2E187%2E10&keyword=constructions&source=s&r=www.all4seek.com&pagesize=6
HTTP/1.1" 200 319 "-" "-"


Co zablokuje ktoryś adres na firewallu, to pojawia sie skanowanie z
innego.
Uzywam ZONE ALARM. Ma ktos pomysl jak to zablokowac?
Jesli sie da to najlpeiej zablokowalbym dojscie do apacha z zagranicy,
ale jak to na windowsie wzglednie Zone Alarm dokonac.
Z gory dzieki i jesli nie bardzo na te liste puscilem posta to sorki.
Pozdrawiam
Przemek

Technical Details

Message-ID: <1139413438.338703.118140@f14g2000cwb.googlegroups.com>

Path:

mbox-mo1.pugleaf.net!number1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!novia!news-out.readnews.com!news-pusher.readnews.com!postnews.google.com!f14g2000cwb.googlegroups.com!not-for-mail

Show Full Headers

Complete Article Headers

Path: mbox-mo1.pugleaf.net!number1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!novia!news-out.readnews.com!news-pusher.readnews.com!postnews.google.com!f14g2000cwb.googlegroups.com!not-for-mail
From: "Kocur" <pwiktorczyk@gmail.com>
Newsgroups: pl.comp.sieci
Subject: Dziwne logi w apachu
Date: 8 Feb 2006 07:43:58 -0800
Organization: http://groups.google.com
Lines: 21
Message-ID: <1139413438.338703.118140@f14g2000cwb.googlegroups.com>
NNTP-Posting-Host: 84.205.160.26
Mime-Version: 1.0
X-Trace: posting.google.com 1139413445 19321 127.0.0.1 (8 Feb 2006 15:44:05 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Wed, 8 Feb 2006 15:44:05 +0000 (UTC)
User-Agent: G2/0.2
X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1,gzip(gfe),gzip(gfe)
X-HTTP-Via: 1.1 w3cache.bmj.net.pl:3128 (squid/2.5.STABLE9)
Complaints-To: groups-abuse@google.com
Injection-Info: f14g2000cwb.googlegroups.com; posting-host=84.205.160.26; posting-account=U4dyTg0AAAC_AtvfwS-tKSrx1oavIkt7
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit