Apache error log: script attack?

Pagina: 1
Acties:
  • 880 views sinds 30-01-2008
  • Reageer

  • Olaf van der Spek
  • Registratie: September 2000
  • Niet online
Ik keek vandaag in de error log van mijn Apache server en zag een reeks vreemde errors. Bepaalde entries herken ik wel, maar wat faxsurvey nou bijvoorbeeld is?

Zijn dit allemaal bekende/waarschijnlijke gaten?

En heeft het nut een abuse melding te sturen naar de ISP van deze client?
Begin: [Tue Sep 30 04:54:53 2003] [error] [client IPA]
Eind: [Tue Sep 30 04:55:33 2003] [error] [client IPA]
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
File does not exist: /htdocs/server-info
File does not exist: /htdocs/server-status
File does not exist: /htdocs/site
File does not exist: /htdocs/doc
File does not exist: /htdocs/~nobody
File does not exist: /htdocs/manual
File does not exist: /htdocs/php
File does not exist: /htdocs/code
attempt to invoke directory as script: /cgi-bin/
script not found or unable to stat: /cgi-bin/faqmanager.cgi
script not found or unable to stat: /cgi-bin/test-cgi.bat
File does not exist: /htdocs/error
attempt to invoke directory as script: /cgi-bin/
script not found or unable to stat: /cgi-bin/AnyForm2
script not found or unable to stat: /cgi-bin/ad.cgi
script not found or unable to stat: /cgi-bin/aglimpse
script not found or unable to stat: /cgi-bin/bbs_forum.cgi
script not found or unable to stat: /cgi-bin/bsguest.cgi
File does not exist: /htdocs/carbo.dll
script not found or unable to stat: /cgi-bin/bslist.cgi
script not found or unable to stat: /cgi-bin/campas
script not found or unable to stat: /cgi-bin/cgforum.cgi
script not found or unable to stat: /cgi-bin/count.cgi
script not found or unable to stat: /cgi-bin/faxsurvey
script not found or unable to stat: /cgi-bin/gbook.cgi
File does not exist: /htdocs/technote
script not found or unable to stat: /cgi-bin/htmlscript
script not found or unable to stat: /cgi-bin/htsearch
script not found or unable to stat: /cgi-bin/jj
script not found or unable to stat: /cgi-bin/mmstdod.cgi
script not found or unable to stat: /cgi-bin/newdesk
script not found or unable to stat: /cgi-bin/register.cgi
script not found or unable to stat: /cgi-bin/simplestguest.cgi
script not found or unable to stat: /cgi-bin/statusconfig.pl
File does not exist: /htdocs/cgi-dos
File does not exist: /htdocs/iisadmpwd
File does not exist: /htdocs/scripts
script not found or unable to stat: /cgi-bin/infosrch.cgi
script not found or unable to stat: /cgi-bin/perl.exe
script not found or unable to stat: /cgi-bin/rguest.exe
script not found or unable to stat: /cgi-bin/webgais
script not found or unable to stat: /cgi-bin/webgais
File does not exist: /htdocs/Admin_files
File does not exist: /htdocs/quote.html
script not found or unable to stat: /cgi-bin/a1stats
script not found or unable to stat: /cgi-bin/cal_make.pl
script not found or unable to stat: /cgi-bin/dcboard.cgi
script not found or unable to stat: /cgi-bin/ezshopper2
script not found or unable to stat: /cgi-bin/nph-maillist.pl
File does not exist: /htdocs/foldoc
script not found or unable to stat: /cgi-bin/adcycle
script not found or unable to stat: /cgi-bin/bbs_forum.cgi
script not found or unable to stat: /cgi-bin/ikonboard
script not found or unable to stat: /cgi-bin/store.cgi
script not found or unable to stat: /cgi-bin/talkback.cgi
script not found or unable to stat: /cgi-bin/ustorekeeper.pl
File does not exist: /htdocs/ROADS
script not found or unable to stat: /cgi-bin/auktion.pl
script not found or unable to stat: /cgi-bin/commerce.cgi
script not found or unable to stat: /cgi-bin/hsx.cgi
script not found or unable to stat: /cgi-bin/mailnews.cgi
script not found or unable to stat: /cgi-bin/newsdesk.cgi
script not found or unable to stat: /cgi-bin/pals-cgi
File does not exist: /htdocs/way-board
script not found or unable to stat: /cgi-bin/DCShop
script not found or unable to stat: /cgi-bin/a1disp3.cgi
script not found or unable to stat: /cgi-bin/auktion.cgi
script not found or unable to stat: /cgi-bin/get32.exe
script not found or unable to stat: /cgi-bin/sendtemp.pl
script not found or unable to stat: /cgi-bin/webspirs.cgi
File does not exist: /htdocs/ftp.pl
script not found or unable to stat: /cgi-bin/eshop.pl
script not found or unable to stat: /cgi-bin/index.php
script not found or unable to stat: /cgi-bin/story.pl
script not found or unable to stat: /cgi-bin/zml.cgi
File does not exist: /htdocs/cg-bin
File does not exist: /htdocs/cowsconf
script not found or unable to stat: /cgi-bin/cowsconf
script not found or unable to stat: /cgi-bin/faqmanager.cgi
script not found or unable to stat: /cgi-bin/mrtg.cgi
script not found or unable to stat: /cgi-bin/publisher
script not found or unable to stat: /cgi-bin/traffic.cgi
File does not exist: /htdocs/examples
File does not exist: /htdocs/perl
script not found or unable to stat: /cgi-bin/directory.php
script not found or unable to stat: /cgi-bin/mrtg.cgi

  • Zeezicht
  • Registratie: Juni 2001
  • Laatst online: 14-05 14:29
Lijkt er inderdaad op dat er op allerlei gaten getest wordt. Ik zou dus maar dat IP blokken met iptables.
Die abuse mail is ook wel een goed id!

Verwijderd

Maak je niet te druk, ik heb ook een webserver draaien en er gaan zoveel wormen over het internet heen dat mijn server meerdere keren per uren wordt 'aangevallen' door een worm...

Meestal zijn deze wormen gemaakt om een IIS webserver aan te vallen...
Maar ja dat is niet echt handig, aangezien ik een Linux systeem met Apache heb ;)

Hou wel effe het ipnummer in de gaten, blijft het continue van hetzelfde ipnummer komen, gewoon blokken dat nummer...

En heel belangrijk de webserver (en overige software) up-to-date houden!!!
Maar dat spreekt voor zich...

[ Voor 23% gewijzigd door Verwijderd op 07-10-2003 14:25 . Reden: veel typo's ]