"David P. Schwartz" wrote:
>
> I saw someome complaining about their server, and decided to take a look at
> my
> server's logs.
>
> The main domain's log is cluttered with stuff over the past several days
> that looks like this:
>
> 63.229.248.108 - - [08/Aug/2001:21:57:21 -0700] "GET
> /default.ida?XXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
damnnnnn... I just checked and I have the same. I also noticed that a
significant percentage of attacks are coming from within the
universities subdomain. I do not think the domain administrators are
going to like my phone message... All I said is I think you have a
problem. Who do I send the log files to?
EBo --