epike on Fri, 14 Dec 2001 00:00:23 +0100


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] what logs to watch?


> 
> >also the Apache Error logs shows you IIS-style worms attempts
> 
> How do you recognize these ones in the httpd logs?
> 

Not really sure if theyre really worms, but I have 
just too many of them (repetitive): 


httpd_error_log.13:[Sun Sep  9 18:56:06 2001] [error] [client 24.156.176.152] File does not exist: /home/httpd/html/default.ida
httpd_error_log.13:[Sun Sep  9 18:57:21 2001] [error] [client 24.40.47.75] File does not exist: /home/httpd/html/default.ida
httpd_error_log.13:[Sun Sep  9 19:10:43 2001] [error] [client 24.132.140.104] File does not exist: /home/httpd/html/default.ida

since around september:

grep default.ida *httpd*error*log* | wc -l
   1884


JondZ / E.Pike


______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug