| What's going on here?
Odd automated requests for non-existent files |
alexanac
msg:3777706 | 7:35 pm on Oct 31, 2008 (gmt 0) |
Noticed the lines below in my error log today. I assume this is part of some script which looks for the most common installation paths for certain apps with the goal of checking version and exploiting known holes? I haven't seen something like this in our logs before so I thought I throw it out there to be sure. All of these went to a 404 error. [Fri Oct 31 13:52:00 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/a1b2c3d4e5f6g7h8i9
[Fri Oct 31 13:52:00 2008] [error] [client IP.IP.IP.IP] script '/home/httpd/vhosts/MYDOMAIN/httpdocs/adxmlrpc.php' not found or unable to stat
[Fri Oct 31 13:52:00 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/adserver
[Fri Oct 31 13:52:00 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/phpAdsNew
[Fri Oct 31 13:52:00 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/phpadsnew
[Fri Oct 31 13:52:00 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/phpads
[Fri Oct 31 13:52:00 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/Ads
[Fri Oct 31 13:52:00 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/ads
[Fri Oct 31 13:52:00 2008] [error] [client IP.IP.IP.IP] script '/home/httpd/vhosts/MYDOMAIN/httpdocs/xmlrpc.php' not found or unable to stat
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/xmlrpc
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/xmlsrv
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/blog
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/drupal
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/community
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/blogs
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/blogs
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/blog
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/blogtest
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/b2
[Fri Oct 31 13:52:01 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/b2evo
[Fri Oct 31 13:52:02 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/wordpress
[Fri Oct 31 13:52:02 2008] [error] [client IP.IP.IP.IP] File does not exist: /home/httpd/vhosts/MYDOMAIN/httpdocs/phpgroupware
|
stapel
msg:3777730 | 7:54 pm on Oct 31, 2008 (gmt 0) |
Do a search on Google for some of the directories being requested, and you should be able to find plenty of information about the variations of the Lupper [vil.nai.com] worm. Eliz.
|
|
|
