View previous topic :: View next topic |
Author |
Message |
Highlands Guru
![Guru Guru](/images/ranks/rank_rect_3.gif)
![](images/avatars/17226657903eaedf5868aa0.gif)
Joined: 22 Apr 2003 Posts: 366 Location: Sundsvall, Sweden
|
Posted: Fri Jun 13, 2003 11:26 pm Post subject: Apache log |
|
|
Can someone explain this?
Found it in the apache error_log
Code: |
[Fri Jun 13 20:23:58 2003] [error] [client 81.226.46.172] File does not exist: /var/www/htdocs/default.ida
|
and what is this?
Code: |
[Thu Apr 17 17:13:46 2003] [error] [client 81.226.102.237] File does not exist: /var/www/htdocs/c/winnt/system32/cmd.exe
|
_________________ If Windows is the answer, you don't understand the question!
http://counter.li.org/cgi-bin/certificate.cgi/339446 |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
java n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
Joined: 14 Jun 2003 Posts: 3 Location: melb.au
|
Posted: Sat Jun 14, 2003 12:24 am Post subject: |
|
|
The second is a MS worm trying to propogate _________________ JaVa |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
elendur n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
Joined: 14 Jun 2003 Posts: 9
|
Posted: Sat Jun 14, 2003 7:41 am Post subject: |
|
|
Both are MS worms actually. I think the first is CodeRed. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
gigel Guru
![Guru Guru](/images/ranks/rank_rect_3.gif)
![](images/avatars/17568774133ecdc4fac2587.gif)
Joined: 14 Jan 2003 Posts: 370 Location: .se/.ro
|
Posted: Sat Jun 14, 2003 9:04 am Post subject: |
|
|
u dont need to worry!!
those are 404 not found ![Wink ;)](images/smiles/icon_wink.gif) _________________ $emerge sux
![Very Happy :D](images/smiles/icon_biggrin.gif) |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
slartibartfasz Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/gallery/Futurama/cartoon_futurama_kif.gif)
Joined: 29 Oct 2002 Posts: 1462 Location: Vienna, Austria
|
Posted: Sat Jun 14, 2003 11:18 am Post subject: |
|
|
yea - as long as those are in the error_log there is no problem - every apache gets them... these are usually worms or script kiddie scans...u can also grep try for 'vti' - a M$ server exploit - i get a fair amount of them - seem to be quite popular, as they give u the account passwd in clear text... _________________ To an engineer the glass is neither half full, nor half empty - it is just twice as big as it needs to be. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Highlands Guru
![Guru Guru](/images/ranks/rank_rect_3.gif)
![](images/avatars/17226657903eaedf5868aa0.gif)
Joined: 22 Apr 2003 Posts: 366 Location: Sundsvall, Sweden
|
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|