Click to See Complete Forum and Search --> : Off topic question - Hackers!


bokeh
03-20-2005, 06:28 PM
The following requests keep turning up in my apache log files:

/www/error/web/scripts/..%5c%5c/winnt/system32/cmd.exe
/www/error/web/prxjdg.cgi
/www/error/web/_vti_bin/_vti_aut/fp30reg.dll

Am I right in thinking this an attempt to hack my server or could it be something else?

ShrineDesigns
03-20-2005, 07:41 PM
i get this every once in awhile, this hacker or hackers is atempting to find the frontpage extension on your server, there is or was a vulernability in the frontpage extension that allows full access to the server, if you have the frontpage extension uninstall it, otherwise, don't worry about it

AdamGundry
03-22-2005, 10:14 AM
It's traditional to call those who maliciously attack your computer crackers rather than hackers. In this case, however, I agree with ShrineDesigns that it is probably script kiddies scanning for vulnerabilities, i.e. trying to find known insecure scripts on a large number of servers. As long as you don't run any old scripts and keep your webserver patched (or someone does it for you) I wouldn't worry about it.

Adam