Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Apache log
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Highlands
Guru
Guru


Joined: 22 Apr 2003
Posts: 366
Location: Sundsvall, Sweden

PostPosted: Fri Jun 13, 2003 11:26 pm    Post subject: Apache log Reply with quote

Can someone explain this?
Found it in the apache error_log

Code:

 [Fri Jun 13 20:23:58 2003] [error] [client 81.226.46.172] File does not exist: /var/www/htdocs/default.ida


and what is this?

Code:

[Thu Apr 17 17:13:46 2003] [error] [client 81.226.102.237] File does not exist: /var/www/htdocs/c/winnt/system32/cmd.exe

_________________
If Windows is the answer, you don't understand the question!
http://counter.li.org/cgi-bin/certificate.cgi/339446
Back to top
View user's profile Send private message
java
n00b
n00b


Joined: 14 Jun 2003
Posts: 3
Location: melb.au

PostPosted: Sat Jun 14, 2003 12:24 am    Post subject: Reply with quote

The second is a MS worm trying to propogate
_________________
JaVa
Back to top
View user's profile Send private message
elendur
n00b
n00b


Joined: 14 Jun 2003
Posts: 9

PostPosted: Sat Jun 14, 2003 7:41 am    Post subject: Reply with quote

Both are MS worms actually. I think the first is CodeRed.
Back to top
View user's profile Send private message
gigel
Guru
Guru


Joined: 14 Jan 2003
Posts: 370
Location: .se/.ro

PostPosted: Sat Jun 14, 2003 9:04 am    Post subject: Reply with quote

u dont need to worry!!
those are 404 not found ;)
_________________
$emerge sux
:D
Back to top
View user's profile Send private message
slartibartfasz
Veteran
Veteran


Joined: 29 Oct 2002
Posts: 1462
Location: Vienna, Austria

PostPosted: Sat Jun 14, 2003 11:18 am    Post subject: Reply with quote

yea - as long as those are in the error_log there is no problem - every apache gets them... these are usually worms or script kiddie scans...u can also grep try for 'vti' - a M$ server exploit - i get a fair amount of them - seem to be quite popular, as they give u the account passwd in clear text...
_________________
To an engineer the glass is neither half full, nor half empty - it is just twice as big as it needs to be.
Back to top
View user's profile Send private message
Highlands
Guru
Guru


Joined: 22 Apr 2003
Posts: 366
Location: Sundsvall, Sweden

PostPosted: Sat Jun 14, 2003 9:01 pm    Post subject: Reply with quote

I was begining to worry a little :)
_________________
If Windows is the answer, you don't understand the question!
http://counter.li.org/cgi-bin/certificate.cgi/339446
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum