[PLUG] access_log

Josh Zeckser josh at barkingcorndog.homelinux.org
Sat Aug 24 10:14:07 UTC 2002


By the way, what is all that crap anyway? I have tons and tons of it in
my apache logs. Is it some sort of virus? Nimda?

-josh zeckser

On Thu, 2002-08-22 at 13:55, Paul wrote:
> If there an easy way to tell the logger to omit junk like this from my web server log? Makes it real tough to find the REAL hits.
> 
> Thanks,
> Paul
> 
> 12.224.114.230 - - [22/Aug/2002:06:37:04 -0700] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 276 "-" "-" 12.224.114.230 - - [22/Aug/2002:06:37:05 -0700] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 274 "-" "-"
> 12.224.114.230 - - [22/Aug/2002:06:37:05 -0700] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284 "-" "-"
> 12.224.114.230 - - [22/Aug/2002:06:37:29 -0700] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 284 "-" "-"
> 12.224.114.230 - - [22/Aug/2002:06:37:30 -0700] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298 "-" "-"
> 12.224.114.230 - - [22/Aug/2002:06:37:30 -0700] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-" "-"
> 12.224.114.230 - - [22/Aug/2002:06:37:31 -0700] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 315 "-" "-"
> 
> ---
> Email: paul at pflnet.ws  
> Web: http://www.pflnet.ws
> 
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
> 






More information about the PLUG mailing list