httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David" <amdaw...@starhub.net.sg>
Subject [users@httpd] Is someone trying to hack my server ??
Date Sat, 13 Sep 2003 03:40:52 GMT
Hi guys,
 
Recently I started looking at my access log files and I notice
something.
There seems to be a lot of GET request from a particular IP address. The
problem is, most of the GET request are not very valid. 
He seems to be requesting for documents that DO NOT exist on my computer
and stuff. He tries to access/request for all sorts and different names
of documents.
 
When I look at the error log, the error request show up as follows(this
is just a very very small section of the error log requested by this
person):
 
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/scripts
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/MSADC
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/c
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/d
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/scripts
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/_vti_bin
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/_mem_bin
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/msadc
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/scripts
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/scripts
[Sat Sep 13 10:42:33 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/scripts
[Sat Sep 13 10:42:34 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/scripts
[Sat Sep 13 10:42:34 2003] [error] [client 220.255.94.83] File does not
exist: C:/Program Files/Apache Group/Apache2/htdocs/scripts
 
It seems to me that he is trying to access my root folder, folders call
scripts and stuff. Is he trying to hack into my computer ? 
This raised some concern for me. I have previously raised in the forum
on security of hosting a web server. I wonder if there is any way I can
"name" or configure my web server such that I am less open to possible
hacker attacks(that is, if I am vulnerable to attacks).
 
Many thanks for your time and attention!! 
 
Regards, 
David

Mime
View raw message