The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > Top Forums > UNIX for Dummies Questions & Answers
Google UNIX.COM
Home Forums Register Rules & FAQ Members List Arcade Search Today's Posts Mark Forums Read


UNIX for Dummies Questions & Answers If you're not sure where to post a UNIX or Linux question, post it here. All UNIX and Linux newbies welcome !!


Closed Thread
 
Submit Tools LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 09-01-2001
Registered User
 

Join Date: Sep 2001
Location: Cali
Posts: 2
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiReddit! Stumble this Post!Spurl this Post!
Angry Default.ida

I am referring to my last resort about a problem that I have encountered for the past week and havent gotten to the bottom of it so far. There are servers trying to pull default.ida out of my server which is doing something where my server slows down immensly and sometimes even displays server not found messages. I'm running solaris 5.8 with perl5.0 apache. Im really a newbie in need of some gurus to help me out. IM loosing insane traffic and webmasters from my affiliate program because of this.

Forum Sponsor
  #2 (permalink)  
Old 09-02-2001
rwb1959's Avatar
Registered User
 

Join Date: Aug 2001
Location: Virginia, USA
Posts: 438
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiReddit! Stumble this Post!Spurl this Post!
Do you know what Default.ids is?
Is it supposed to be on your server?
If it is, has it been modified recently?
  #3 (permalink)  
Old 09-03-2001
Registered User
 

Join Date: Sep 2001
Location: Cali
Posts: 2
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiReddit! Stumble this Post!Spurl this Post!
The directory that the file is trying to be pulled from doesnt have a default.ida
  #4 (permalink)  
Old 09-03-2001
LivinFree's Avatar
Goober Extraordinaire
 

Join Date: Jul 2001
Location: Portland, OR, USA
Posts: 1,584
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiReddit! Stumble this Post!Spurl this Post!
I don't know off hand, but that's an attack routine to exploit a buffer-overflow condition on Microsoft IIS servers.

For a tricky little redirector (assuming you are running Apache, and not another webserver), check out: Code Red Redirect. Keep in mind that this does not really help the load on the site all that much, and there is no simple way to fix this, but it's certainly funny!

Also, check the logs to see what site is sending these requests. You MAY be able to contact each of them, and let them know they've got a case of Code Red. Send them here: http://www.microsoft.com/technet/tre...s/codealrt.asp.

HAND
Google UNIX.COM
Closed Thread



Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 12:07 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
The UNIX and Linux Forums Content Copyright ©1993-2008 The CEP Blog All Rights Reserved -Ad Management by RedTyger

Search Engine Optimization by vBSEO 3.1.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102