On Tue, 19 Feb 2002 22:04:48 -0800
Ken Moffat <[EMAIL PROTECTED]> wrote:

> (Let's see if this is the correct address for the list? Got a bounce
> from linux.nf)
> 
> Here is part of my apache error_log, 
> which makes me think someone is trying to gain access. 
> Could this be some cracker?
> There are a whole bunch of these in the log.
> 
> Anyone know .... ?
> 
> 
> [Tue Feb 19 05:34:48 2002] [error] [client 216.162.75.7] File does not
> exist: /var/www/html/scripts/root.exe[Tue Feb 19 05:34:48 2002]
> 
> [error] [client 216.162.75.7] File does not exist:
> /var/www/html/MSADC/root.exe
> 
> [Tue Feb 19 05:34:49 2002] [error] [client
> 216.162.75.7] File does not exist:
> /var/www/html/c/winnt/system32/cmd.exe
> 
> [Tue Feb 19 05:34:49 2002]
> [error] [client 216.162.75.7] File does not exist:
> /var/www/html/d/winnt/system32/cmd.exe
> 
> 
> I wonder who is 216.162.75.7?

someone with an infected Windows IIS box, IIRC this is the "code red"
worm.

-- 
Myles Green Calgary AB Canada
Alberta Linux Step by Step Mirror:
http://mylesg.homelinux.net/
--
PROGRAM - n. A magic spell cast over a computer allowing it to turn 
        one's input into error messages.  v. tr.- To engage in a 
        pastime similar to banging one's head against a wall, but 
        with fewer opportunities for reward.
_______________________________________________
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.

Reply via email to