[rescue] what the hell is this?

Brian Hechinger wonko at arkham.ws
Sun Apr 28 00:52:50 CDT 2002


tons of this shit in my apache access log.

218.21.77.29 - - [28/Apr/2002:01:18:19 -0400] "GET http://nicecards.com/cards.cgi?pid=p22421 HTTP/1.1" 200 7889
218.21.77.29 - - [28/Apr/2002:01:53:45 -0400] "GET http://cgi.sexswap.com/AdSwap.dll?showad?accountnumber=8849&PageNumber=0 HTTP/1.1" 200 1681
218.14.182.120 - - [28/Apr/2002:01:59:49 -0400] "GET http://ad.linksynergy.com/fs-bin/show?id=GW9DgsigEns&bids=35275.10000043&type=4&subid=0 HTTP/1.0" 200 43
218.21.77.29 - - [28/Apr/2002:02:01:04 -0400] "GET http://stx6.sextracker.com/stx/send/999/295350/2/ HTTP/1.1" 302 5
218.21.77.29 - - [28/Apr/2002:02:01:06 -0400] "GET http://stxbans.sextracker.com/fci/newstx/hetero3.gif HTTP/1.1" 200 9940

a) what is this shit?

b) would i be wrong to write a script to harvest these ip addresses and put
   them in some firewall rules blocking their god-damn access?

c) would it be worth the effort?

-brian
-- 
"He's hopped up on caffeine. He has the strength of ten mice."  -PVP



More information about the rescue mailing list