Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 16 Nov 2001 13:47:10 +1100 (EST)
From:      =?iso-8859-1?q?Keith=20Spencer?= <bsd2000au@yahoo.com.au>
To:        fbsd <freebsd-questions@freebsd.org>
Subject:   Is this an attack guys???Help!
Message-ID:  <20011116024710.22642.qmail@web12005.mail.yahoo.com>

next in thread | raw e-mail | index | archive | help
Hi all,
This is an Apache error log snippet.
My server is infact FreeBSD 4.4
I often find these page request errors from the same
address or one of the same C-class space.
IT looks lke an attack to me...What thinks you?
Thanks Keith
+++++++++++++++++++++++++++++++++++
[Fri Nov 16 12:05:42 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/scripts/root.exe
[Fri Nov 16 12:05:42 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/MSADC/root.exe
[Fri Nov 16 12:05:43 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/c/winnt/system32/cmd.exe
[Fri Nov 16 12:05:43 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/d/winnt/system32/cmd.exe
[Fri Nov 16 12:05:44 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/scripts/..%5c../winnt/system32/cmd.exe
[Fri Nov 16 12:05:45 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Fri Nov 16 12:05:45 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Fri Nov 16 12:05:46 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe
[Fri Nov 16 12:05:47 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/scripts/..Á../winnt/system32/cmd.exe
[Fri Nov 16 12:05:47 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/scripts/..À¯../winnt/system32/cmd.exe
[Fri Nov 16 12:05:48 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/scripts/..Áœ../winnt/system32/cmd.exe
[Fri Nov 16 12:05:49 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/scripts/..%5c../winnt/system32/cmd.exe
[Fri Nov 16 12:05:50 2001] [error] [client
203.56.114.7] File does not exist:
/usr/share/wwwroot/www/scripts/..%2f../winnt/system32/cmd.exe


http://shopping.yahoo.com.au - Yahoo! Shopping
- Get organised for Christmas early this year!

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011116024710.22642.qmail>