You may have a full-time job in the future doing just reporting! It's somewhat likely that anyone scanning like that would forge the IP address... douglas alexeys@inventigo.com wrote:
Hello,
look at the log. Is the a way to report on that guy?
- Alexey.
139.130.148.203 - - [03/Jan/2002:11:45:17 -0800] "HEAD /....../etc/hosts HTTP/1.1" 404 0 "-" "Mozilla/5.0" 139.130.148.203 - - [03/Jan/2002:11:45:16 -0800] "HEAD /../../../../etc/hosts HTTP/1.1" 400 0 "-" "Mozilla/5.0" 139.130.148.203 - - [03/Jan/2002:11:36:02 -0800] "HEAD /cgi-bin/shop.cgi/page=../../../../etc/passwd HTTP/1.1" 404 0 "-" "Mozilla/5.0" 139.130.148.203 - - [03/Jan/2002:11:30:22 -0800] "HEAD /../../passwd HTTP/1.1" 400 0 "-" "Mozilla/5.0" 139.130.148.203 - - [03/Jan/2002:11:30:19 -0800] "HEAD /../../passwd HTTP/1.1" 400 0 "-" "Mozilla/5.0" 139.130.148.203 - - [03/Jan/2002:11:30:16 -0800] "HEAD /../../../etc/passwd HTTP/1.1" 400 0 "-" "Mozilla/5.0" 139.130.148.203 - - [03/Jan/2002:11:30:13 -0800] "HEAD /../../../../etc/passwd HTTP/1.1" 400 0 "-" "Mozilla/5.0" 139.130.148.203 - - [03/Jan/2002:11:30:10 -0800] "HEAD /../../etc/passwd HTTP/1.1" 400 0 "-" "Mozilla/5.0"
{ http://trelony.cjb.net/ } Alexey N. Solofnenko { http://www.inventigo.com/ } Inventigo LLC Pleasant Hill, CA (GMT-8 usually)
------------------------------------------------- This mail sent through IMP: https://mail.inventigo.com/horde/imp/
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com