[Xitami] Re: default.ida?XXXXXXXXXXXXXXXXXXX

[Richard Donahue]

Is there anything that can be done to stop people from trying to access my
Web server using /default.ida?XXXXXXXXXXX? I tried using Xitami's Webmask to
exclude a particular group of IP's, but I'm still seeing the IP's show up in
the access log. It's mainly one group of IP addresses that are trying my
server. My Webmask is set to:
Webmask=!63.6.*,*
Is that the correct pattern to exclude the 63.6.* addresses from the server?

-Rich

----- Original Message -----
From: "Ewen McNeill" <ewen@imatix.com>
To: "Richard Donahue" <rdonahue10@home.com>
Sent: Tuesday, August 07, 2001 8:04 PM
Subject: Re: default.ida?XXXXXXXXXXXXXXXXXXX


> In message <002301c11fa4$fbeb8b60$0201a8c0@midco.net>, "Richard Donahue"
writes:
> >Is anyone being bothered by people trying to access
> >/default.ida?XXXXXXXXXXXXXX on their Web server? I have a number of these
> >entries in my Xitami access log.
>
> The _whole_world_ is being bothered by these.  It's CodeRed, or CodeRedII;
> The "XXXXX" varient is generally CodeRedII.
>
> BTW, you possibly meant to send your message to the Xitami mailing list,
> rather than directly to the listadmin (me).  The submission address for
> the mailing list is:
>
> xitami@lists.xitami.org
>
> Ewen
>
> --
> Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com