Re: IPTABLES & APACHE
From: c0ntex (c0ntexB_at_gmail.com)
Date: 05/09/05
- Next message: Honey Trap: "Re: SSH security questions"
- Previous message: c0ntex: "Re: SSH security questions"
- In reply to: tupolo_at_seeko.net: "IPTABLES & APACHE"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 9 May 2005 05:42:36 -0700
tupolo@seeko.net wrote:
> First let me preface I'm new to linux but got tons of experience with
> other OS's and stuff.
>
> Here is my question:
>
> I found this error in my apache log the other day. (stripped down
the
> IP of the offender)
>
> [Sat Apr 30 15:13:38 2005] [error] [client x.x.119.172] Invalid
method
> in request
> \\xff\\xff\\xffNESSUS\\xff1We443\\xe6\\x877B\\xff\\xff\\xff\\
>
> What it looks like to me is this guy decided to do a scan on one of
my
> web servers with NESSUS.
>
> Is there script that anybody knows of that I could use to go through
> my apache error log and look for things that I define as "hell no
> buddy" and add them to a DROP or REJECT list for IPTABLES?
Swatch or logwatch:-
http://freshmeat.net/projects/swatch
http://freshmeat.net/projects/logwatch/
- Next message: Honey Trap: "Re: SSH security questions"
- Previous message: c0ntex: "Re: SSH security questions"
- In reply to: tupolo_at_seeko.net: "IPTABLES & APACHE"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
