[thelist] code red making a mess of logs

Aleem aleem.bawany at utsc.utoronto.ca
Wed Dec 18 17:16:01 CST 2002


well, this has been going on for a while and by now i've gotten sick of it,
my log files are a mess with entries like the following:

24.102.16.10 - - [18/Dec/2002:10:11:09 +0500] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 298 "-" "-"
24.102.16.10 - - [18/Dec/2002:13:11:59 +0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 276 "-" "-"
24.102.16.10 - - [18/Dec/2002:08:42:05 +0500] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 274 "-" "-"

and my error log:
[Wed Dec 18 11:46:26 2002] [error] [client 24.102.16.10] File does not exist: e:/www/public/scripts/root.exe
...

right now what I'm doing it parsing my logs (using awstats) and
ignoring those entries but i'd like for a way to block them out of my
log completely. any suggestions? how do you deal with it?

aleem

[ http://members.evolt.org/aleem/ ]




More information about the thelist mailing list