Beginner Programming
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsOtherBeginner Programming

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old August 21st, 2003, 01:32 PM
bnorton916 bnorton916 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2003
Posts: 57 bnorton916 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 1 h 57 m 10 sec
Reputation Power: 6
Web Log

I am actually not running Apache, rather thttpd, but I think the web logs are similar.

I have been getting a bunch of these lately:

x.213.165.96 - - [21/Aug/2003:13:53:20 -0400] "GET / HTTP/1.1" 200 604 "" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
x.109.73.207 - - [21/Aug/2003:13:54:58 -0400] "GET / HTTP/1.1" 200 604 "" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"

The ip seem to be random, I am getting about 60 a day.
I know 200 means connection successful, but what does 604 mean?

Also, if someone connected to my webpage I would see the pages they received. It is always Windows 98.

Thank for any help, let me know if you need information or clarification.

Bill

Reply With Quote
  #2  
Old August 22nd, 2003, 12:55 AM
kk5st's Avatar
kk5st kk5st is online now
Thanks Johnny Hart (BC) R.I.P.
Dev Shed Demi-God (4500 - 4999 posts)
 
Join Date: May 2003
Location: Dallas
Posts: 4,585 kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level)kk5st User rank is Brigadier General (60000 - 70000 Reputation Level) 
Time spent in forums: 1 Month 2 Days 16 h 16 m
Reputation Power: 662
x.213.165.96 - - [21/Aug/2003:13:53:20 -0400] ---OK, you know what this is, right?

"GET / ---The browser requested docroot by the "GET" method

HTTP/1.1" ---using HTTP protocol 1.1

200---yep, delivered without error

604 ---bytes.

"" ---there is no referrer

"Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"---the browser was IE5.5 on Win98

cheers,

gary
__________________
There are those who manage to build a web site without knowing what they're doing; thereby proving to themselves they do, indeed, know what they're doing.

My html and css workshop, demos and tutorials.
Ask a better question, get a better answer.

Reply With Quote
  #3  
Old September 6th, 2003, 03:34 AM
bilibala bilibala is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Sep 2003
Posts: 1 bilibala User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via ICQ to bilibala
Our servers have the same issue, it looks like a worm of sorts, they can't all be coming from a win98 box...the number of bytes correspond to the index.html file...this just looks a bit too fishy to me

Reply With Quote
  #4  
Old October 10th, 2003, 04:18 PM
petemg petemg is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Oct 2003
Location: San Francisco, CA
Posts: 1 petemg User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
yep, got to be a worm

Quote:
Originally posted by bilibala
Our servers have the same issue, it looks like a worm of sorts, they can't all be coming from a win98 box...the number of bytes correspond to the index.html file...this just looks a bit too fishy to me

Totally agree. I get about one of these hits every minute. No referrer, always asking for / ...

All these poor clueless home broadband users with machines out cavorting after dark. Anyway, I looked all around and haven't found anything about any new known worms. I'll look forward to any more info.

Reply With Quote
Reply

Viewing: Dev Shed ForumsOtherBeginner Programming > Web Log


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 1 hosted by Hostway
Stay green...Green IT