Re: [PHP] how to defend this atack?

2002-07-13 Thread Chris Shiflett
This looks like a variant of the code red worm and will only bother you if you are running IIS, which I would hope you are not. :-) 218.5.149.77 is apparently running an infected IIS Web server. You might want to let them know. Happy hacking. Chris andy wrote: >Hi there, > >I am getting fro

[PHP] how to defend this atack?

2002-07-13 Thread andy
Hi there, I am getting from time to time such GET requests. I think this is kind of a atack against the webserver. DNS maybe. Here is the log entry: 218.5.149.77 - - [13/Jul/2002:19:57:09 +0200] "GET /default.ida?NNN NNN