[Dshield] Interesting Web Log Entries

Valdis.Kletnieks@vt.edu Valdis.Kletnieks at vt.edu
Fri Mar 24 10:53:06 GMT 2006


On Thu, 23 Mar 2006 16:08:27 EST, Scott Melnick said:
> The scans occurred from two IPs in tandem.  Note the initial request for
> /x0x0x0x0x0x0x0x0x0/ThisFileMustNotExist, which suggests an attempt to
> make sure the server responds with 404 error codes.
> 
>                         ---- snip, snip, snip ----
> 64.247.229.126 - - [22/Mar/2006:18:00:35 -0500] "GET
> /x0x0x0x0x0x0x0x0x0/ThisFileMustNotExist HTTP/1.0" 404 237 "-" "-"

Unfortunately, sticking in a rewrite rule to cause that to 302 to
http://127.0.0.1:19/ isn't as much fun as it used to be.... ;)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/list/attachments/20060324/43d492fb/attachment.bin


More information about the list mailing list