PDA

View Full Version : Error Log IP Messages


CarMel
2-15-02, 09:05 PM
I've been looking at my error log, and have found something weird. Why would someone be looking for these files if they have never existed:

[Fri Feb 15 10:27:57 2002] [error] [client 64.51.192.79] File does not exist: /www/k/k9addisons/htdocs/_vti_bin/owssvr.dll
--------------------------------------------------------------------------------
[Fri Feb 15 10:27:57 2002] [error] [client 64.51.192.79] File does not exist: /www/k/k9addisons/htdocs/MSOffice/cltreq.asp

Is it a hacker, or a search engine spider looking for something?

Thanks!

Susan

SBGlasby
2-17-02, 05:57 PM
That Particular IP.... belongs to this

DSL.net, Inc. (NETBLK-DSLNET-4)
545 Long Wharf Dr. 5th floor
New Haven, CT 06511
US

Netname: DSLNET-4
Netblock: 64.51.0.0 - 64.51.255.255
Maintainer: FTCI

Coordinator:
Hostmaster, DSL.net (DH478-ARIN) hostmaster@DSL.NET
203-772-1000


Youd didn't say if this was a one time thing... or if you're seeing this a lot?
I did find this on google.... the exact same posting of the files in question

http://www.incidents.org/archives/intrusions/msg03024.html

didn't have time to read.... but if it's something that's occuring regularly.... I'd report the info .... to the hostmaster@dsl.net... with copies of or your error logs.... showing the dates & times....

Hope this helps

CarMel
2-19-02, 12:06 PM
I've just installed something that emails me with error messages. Before that, I wasn't looking specifically at the error logs.

I am getting some strange ones, though - people are looking for .exe files on my site, which I don't have.

Going to search on Google now!

Susan