[ale] Abuse

[James P. Kinney III]

Make a file that is a cgi script by that name. The script gets the
bozo's IP address and puts him at the top of the firewall list to drop
at the door. It won't stop the wasted bandwidth coming to you, but it
will stop the wasted machine effort sending out 404 errors.

On Tue, 2003-05-13 at 19:57, Bill Paule wrote:
> Of course you could alway create a file in one of those locations that
> will send him to a nasty pop-up land or www.fbi.gov or a similar place
> but since it is a script that is doing it I guess it really would serve
> no purpose at all.
> 
> Bill P.
> 
> On Tue, 2003-05-13 at 19:19, Jim Popovitch wrote:
> > Get use to it.  There are many more idiots like him/her and there is nothing you
> > can do about it short of "killall httpd"  ;)
> > 
> > -Jim P.
> > 
> > > -----Original Message-----
> > > From: Synban Administrator
> > > Sent: Tuesday, May 13, 2003 10:46 AM
> > > To: ale at ale.org
> > > Subject: [ale] Abuse
> > >
> > >
> > > Hey guys,
> > >
> > > This is my first post to the list but I have been reading your messages
> > > for a while. Here is my first question for you guys:
> > > This guy has been running this script (or whatever he is running) for a
> > > few months now. It is an everyday occurance and he is starting to get on
> > > my nerves. I can do a reverse lookup on his IP and report him to his
> > > ISP, but I don't know if he is worth it. Here are two lines from my log:
> > > 24.98.237.56 - - [13/May/2003:10:35:25 -0400] "GET
> > > /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 304
> > > 24.98.237.56 - - [13/May/2003:10:35:24 -0400] "GET
> > > /scripts/root.exe?/c+dir HTTP/1.0" 404 283
> > > 24.98.237.56 - - [13/May/2003:10:35:24 -0400] "GET
> > > /MSADC/root.exe?/c+dir HTTP/1.0" 404 281
> > > 24.98.237.56 - - [13/May/2003:10:35:24 -0400] "GET
> > > /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 291
> > >
> > > Yours,
> > > Emil P. Man
> > > admin at synban.com
> > >
> > >
> > > _______________________________________________
> > > Ale mailing list
> > > Ale at ale.org
> > > http://www.ale.org/mailman/listinfo/ale
> > >
> > 
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://www.ale.org/mailman/listinfo/ale
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
-- 
James P. Kinney III          \Changing the mobile computing world/
CEO & Director of Engineering \          one Linux user         /
Local Net Solutions,LLC        \           at a time.          /
770-493-8244                    \.___________________________./
http://www.localnetsolutions.com

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics) <jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7 

 This is a digitally signed message part