Get all your news in one place.
100’s of premium titles.
One app.
Start reading
The Guardian - UK
The Guardian - UK
Technology
Jack Schofield

Attacking Apaches -- attacking my PC

I have Norton Internet Security 2007, and when I look in the History section, I can see a few "medium risk" intrusion attempts coming from the same computer (named as Daniel) with the same IP address. Norton calls them "HTTP Apache Redundant Slashes DoS". Daniel Whelan

This is a denial of service (DoS) attack on very old versions of the Apache web server, and works by repeatedly requesting addresses that contain ////////////// to overload the server. You're not running Apache 1.24 or older so it won't affect your PC. However, you could search a Whois service such as DNS Stuff (http://www.dnsstuff.com/ and scroll down) for the IP address, find out who registered it, and report it to the abuse mailbox.

Backchat: Unlike me, Karl Wilcox, a lecturer in computer science, noticed that the attacking computer was also called Daniel. He deduces that Daniel "has loaded a page containing a link (probably an image link) which contains lots of slashes, something like .../images//////picture.gif. You get these sometimes from generated page links or sloppy editing. Daniel's PC loads the original page, then tries to load the image which Norton Internet Security interprets as an attack. Same thing happened to me!"

Many thanks, Karl!

Sign up to read this article
Read news from 100’s of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.