James wrote:
This covered about 10 pages or so. Looking thru the log I found the same
thing
three other times. They came from
80.184.187.66
80.184.187.63
80.184.116.232
213.80.149.228
Is there anyway to tell who this is?
Yes
http://ws.arin.net/cgi-bin/whois.pl
http://www.ripe.net/db/whois/whois.html
http://www.apnic.net/apnic-bin/whois.pl
--
David C. Rankin, J.D., P.E.
RANKIN * BERTIN, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankin-bertin.com
--
----- Original Message -----
From: "James Hatridge"
To:
Sent: Wednesday, September 15, 2004 10:44 AM
Subject: [SLE] Scanned, hacked, or what?
Hi all...
Last night I was on the 'net when I noticed odd traffic on my modem. My
system
started slowing down real bad. Even after I got off the net my system was
slow. I had to reboot to get it back to normal. Looking thru my logs I found
this on my apache2 access_log:
80.184.187.66 - - [14/Sep/2004:21:00:21 +0200]
"SEARCH /\x90\x02\xb1\x02\xb1\x02\x
b1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1
\x02\xb1\x02\xb1\x02\ and so on
This covered about 10 pages or so. Looking thru the log I found the same
thing
three other times. They came from
80.184.187.66
80.184.187.63
80.184.116.232
213.80.149.228
Is there anyway to tell who this is? Also, and the main question, should I
worry about this? If so, what can I do about it? Other than slowing down my
system I can't find any problem with it. BTW, I'm using a standard install
of
SuSE 9.1 with apache2 running I've not changed anything.
Thanks,
JIM
--
Jim Hatridge
Linux User #88484
------------------------------------------------------
WartHog Bulletin
Info about new German Stamps
http://www.fuzzybunnymilitia.org/~hatridge/bulletin
Viel Feind -- Viel Ehr'
Anti-US Propaganda stamp collection
http://www.fuzzybunnymilitia.org/~hatridge/collection
--
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@suse.com