Forum Moderators: phranque

Message Too Old, No Replies

File does not exists: autodiscover

Error in my error_log stating File does not exist - autodiscover

         

5x54u

4:57 pm on Feb 18, 2009 (gmt 0)

10+ Year Member



My error log is getting peppered with File does not exist: /home/site/www/site.com/autodisocver

The word autodiscover is not in any script page etc.

Does anyone know what is causing this?

jdMorgan

5:15 pm on Feb 18, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Someone probing your site for vulnerabilities in that "autodiscover" script, perhaps.

If there is no link to that page on your own site or out on the Web, then the likelihood is that it's a blind vulnerability probe, being sent indiscriminately to millions of servers to see if that script is present and can be exploited. Many Webmasters are currently seeing Web-wide probes for RoundCube's "msgimport" file, for example.

Look at the requesting IP addresses, the ISPs/hosts for those IP addresses, and the countries they originate from. You may find that they're all from one "area," or you may find requests from all over the world. In the latter case, it indicates that the probe is being deployed using a botnet -- an army of previously-compromised PCs and servers. This indicates that someone is paying for this probe, and points to organized crime.

As long as don't have that file on your server, there's no risk to you except for the wasted bandwidth and the nuisance pollution of your error logs.

Jim

5x54u

5:39 pm on Feb 18, 2009 (gmt 0)

10+ Year Member



The ip is my own here in the office. I have started shutting down FireFox plugins and other utilities in an attempt to identify the cause. Thank you for your reply.

jdMorgan

2:14 am on Feb 19, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Several possibilities: [google.com...]

Jim