Weird Request: A localhost attack on server?

Discussion in 'Security' started by steamer, Jan 4, 2010.

  1. #1
    One of our client has thier site on a linux server with apache. Through Cpanel logs we can see some wierd traffic to the site mainly from vietnam, we cant figure out if its spam or an attack.

    We are seeing hits from forums and blogs that have hot-linked our images, basically they are requests to images but what the stange thing is that the request are coming from "localhost". Also, a single hit is shown requesting various files from various sites. Below if an example of a sngle hot as shown in the logs.





    As you can see there are atleast 7-8 different sites requesting images in a single visit. Any ideas to what we are dealing with here? Thanks.
     
    steamer, Jan 4, 2010 IP
  2. baonhi41

    baonhi41 Peon

    Messages:
    141
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Maybe local attack with PHP Shell script
     
    baonhi41, Jan 6, 2010 IP