Help. What is this?

Discussion in 'Security' started by krishmk, Apr 13, 2009.

  1. #1
    I was checking my server logs as usual. Came across this (see screenshot below).

    [​IMG]

    Is this some viral script to attack my site?
    Also what language is this site (the homepage)?

    The link http://mipsel.altervista.org/idi.txt has some php function.
     
    krishmk, Apr 13, 2009 IP
  2. hans

    hans Well-Known Member

    Messages:
    2,923
    Likes Received:
    126
    Best Answers:
    1
    Trophy Points:
    173
    #2
    this is an absolute normal error 404 server response for a file that is missing on your server

    http://mipsel.altervista.org/id.txt


    appears to be the file requested - since missing the visitor or bot gets a 404

    nothing secret - just plain server response code
    if that page needs to be existing, then upload
    besides that it would be a file hackers might search. without success in your case
    see also
    http://www.ossec.net/wiki/index.php/WebAttacks_links
     
    hans, Apr 17, 2009 IP
  3. jackio

    jackio Banned

    Messages:
    490
    Likes Received:
    8
    Best Answers:
    0
    Trophy Points:
    0
    #3
    It's a tool/bot used by script kiddies that searches for RFI (Remote File Includes) flaws.
    Usually they don't have a specific target, they just go with search results. If you are secure, just ignore it.
     
    jackio, Apr 18, 2009 IP