Odd (alarming) http log exerpt

Colin J. Raven colin at kenmore.kozy-kabin.nl
Fri Jan 14 09:34:24 PST 2005


On Jan 14 at 10:17, Jacob S launched this into the bitstream:

> On Fri, 14 Jan 2005 07:00:30 -0900
> Andy Firman <andy at firman.us> wrote:
>
>> On Fri, Jan 14, 2005 at 02:08:20PM +0100, Colin J. Raven wrote:
>>> What is this person doing? or attempting to do? I'm guessing nothing
>>>
>>> good.
>>>   Is there anything within...say httpd.conf..that I could do to
>>>   prevent
>>> this..or curtail it before it grows to such an enormous size.
>>
>> Looks like a WebDAV exploit.  You can run conditional logging in
>> your apache server to ignore it.
>
> If I'm not mistaken, you can also do something fun, like use mod_rewrite
> to redirect them to fbi.com whenever they try an attack like that.
>
Oh now that *would* be a fun thing to do!! What a hilarious idea!!


More information about the freebsd-questions mailing list