Its coming from inside your LAN, im not sure what' its
running. But it wont affect your system. Or just maybe
Its a virus that check for port 80/IIS-NT Machines, that scans
all over the web.





=====
Thanks,
Louie Miranda...

WebUrl: http://axis0.endofinternet.org
Email: [EMAIL PROTECTED] - [EMAIL PROTECTED]

----- Original Message -----
From: Ashwin Khandare
To: [EMAIL PROTECTED] ; [EMAIL PROTECTED]
Sent: Monday, August 19, 2002 1:26 PM
Subject: Apache hacked urgent


hi guys,

I found the lines shown below in apache log messages and I got a feeling i m
hacked.

Sat Aug 17 15:36:51 2002] [error] [client 192.168.0.188] File does not
exist: /usr/local/argon/doc/_vti_bin/shtml.exe/_vti_rpc
[Sat Aug 17 15:38:58 2002] [error] [client 192.168.0.188] File does not
exist: /usr/local/argon/doc/_vti_inf.html
[Sat Aug 17 15:38:59 2002] [error] [client 192.168.0.188] File does not
exist: /usr/local/argon/doc/_vti_bin/shtml.exe/_vti_rpc
[Sat Aug 17 16:27:54 2002] [error] [client 192.168.0.188] File does not
exist: /usr/local/argon/doc/_vti_inf.html
[Sat Aug 17 16:27:54 2002] [error] [client 192.168.0.188] File does not
exist: /usr/local/argon/doc/_vti_bin/shtml.exe/_vti_rpc

Can u pls confirm me about the same and help me out to block it.
Note:I did not find any logs in /var/log/secure and /var/log/messages from
Aug 13 to Aug 17 as well.

Thanks & Warm Regards
=======================
Ashwin Khandare
Engineer
Western Outdoor Interactive


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.381 / Virus Database: 214 - Release Date: 8/2/02



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to