weird things showing up in my httpd-error_log

Discussion in 'Apache' started by fpc, Oct 18, 2006.

0
  1. #1
    I dont know if someone is trying to hack me or what is up? can you guys have a look at this please;

    http://pastebin.ca/208272
    thanks in advance
     
    fpc, Oct 18, 2006 IP
  2. T0PS3O

    T0PS3O Feel Good PLC

    Messages:
    13,219
    Likes Received:
    777
    Best Answers:
    0
    Trophy Points:
    0
    #2
    It's called 'probing'. Automated spiders are sniffing to see if you have files with known voulnerabilities. If it returns status 200, they will come back and hack you.

    That's why you should never use default installation folders or file names.
     
    T0PS3O, Oct 18, 2006 IP
  3. tonyrocks

    tonyrocks Active Member

    Messages:
    1,574
    Likes Received:
    50
    Best Answers:
    0
    Trophy Points:
    88
    #3
    What exactly is a voulnerabilities? That is some colourful language. I'm being silly. Ignore me.

    TOPS, what is the deal if it returns a status 200? How can they be hacked?
     
    tonyrocks, Oct 18, 2006 IP
  4. T0PS3O

    T0PS3O Feel Good PLC

    Messages:
    13,219
    Likes Received:
    777
    Best Answers:
    0
    Trophy Points:
    0
    #4
    http://www.answers.com/vulnerability&r=67

    Status 200 means 'file exists'. So they know that specific file in which they know is a (Yank spelling) vulnerability is on your server. Then they come back and exploit it.
     
    T0PS3O, Oct 18, 2006 IP
  5. tonyrocks

    tonyrocks Active Member

    Messages:
    1,574
    Likes Received:
    50
    Best Answers:
    0
    Trophy Points:
    88
    #5
    Ah! Makes sense. I didn't think of it that way.

    hehe...you know, looking at my reply it looks like one of those spam blog comments that i get once every once and a while. I'm such a hack. hehe
     
    tonyrocks, Oct 18, 2006 IP