Welcome to WebmasterWorld Guest from 3.227.3.146

Forum Moderators: Ocean10000 & phranque

Message Too Old, No Replies

Now im scared...maybe urgent

have I been hacked?

     
3:18 am on Jan 20, 2004 (gmt 0)

New User

10+ Year Member

joined:Jan 17, 2004
posts:16
votes: 0


This is what I found in my access log

xx.xx.****.xx - - [19/Jan/2004:16:18:58 -0500] "GET /scripts/nsiislog.dll" 404 303

The (nsiislog.dll) when I went to "find" file...my god, it practicly gave me my entire computer! Im assuming the 404 means they didnt get there?

Whats more, when I entered the IP address it took me to a site that was like nothing ive ever seen before...some of it I copied and pasted below....what is this? Who is this?What are they trying to do?

very nervous appleman58

>>ȵ½ ¦ ~ ¦ Ů ¦ ¦ ¦ ˩
Ŷ

û
Ů
<breve>3 ¦ ~<breve>27 ¦ ~~<breve>99 ¦ ~Ա24 ¦ »Ա ͸ [½]
̩Ϣ㩘:! (2002-12-31 22:09:48)
-=> ٵ¼[~û][]

û룺 ½
~̬̩ư ~ ~󷢱 թ
վ
վ˩~ң
,뮢°Լ̩,ڴᩯ!=ȶ320⣺QQϵ!~~~~...
~󷢱裠
200313գ23:56

ߣ
Ӯʮ~֮婈һǮ,ᩯ!=ȶ28⣺ĺðŶŶŶ...
~󷢱kivi
200314գ18:13
ũ~
Ʒũͨ!=ȶ210⣺[IMG]http://fr...
~󷢱!=ȶ
20021230գ21:56

Ӯöڴ!=ȶ00⣺
~󷢱
20021228գ00:27
客㩯
Ʒ㣠
Ʒթʾ,һ®!=ȶ00⣺
~󷢱
20021227գ22:51
ҵ੘ᣠ
ᩈĮƷ੘Ӯ!=ȶ00⣺
~󷢱
20021227գ22:56

3:44 am on Jan 20, 2004 (gmt 0)

Senior Member

WebmasterWorld Senior Member jdmorgan is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Mar 31, 2002
posts:25430
votes: 0


appleman,

No, you haven't been hacked. Your server response shows that your server returned a 404-Not Found response to that request, and that the content (error page) returned was 303 bytes in length.

For a review of server response codes, see the HTTP/1.1 specification at ftp://ftp.isi.edu/in-notes/rfc2616.txt. Also, see the Apache mod_log_config [httpd.apache.org] documentation for info on what your log files contain.

You may also wish to use httpd.conf or .htaccess to limit access to sensitive directories and files which are accessible at or below your web root directory - the place where your "home page" resides. There is a lot of information posted here on doing that. You can use the site search (link at top of page) or use Google to search WebmasterWorld only for information about it. For example, try a search for that filename.

Jim