Is it Sinister?

This is a discussion on Is it Sinister? within the Linux Web Servers forums, part of the Web Server and Related Forums category; Hi I'm a complete newbie. Just set up my Apache server on RedHat9. I have the following entry in ...


Go Back   Usenet Forums > Web Server and Related Forums > Linux Web Servers

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-27-2004
Ceri Shaw
 
Posts: n/a
Default Is it Sinister?

Hi

I'm a complete newbie. Just set up my Apache server on RedHat9. I have
the following entry in my error log and I'm wondering what it
means.This sequence appears quite regularly now whenever I start
Apache except that the IP address has changed either to my own or the
loopback address. The IP address in the excerpt below has never
reappeared. Does this mean that someone is executing a script on my
machine? How worried should I be? And what does the (13) refer to on
the lines below?

Also in the "System Logs" "Preferences" "Alerts" dialog box someone
inserted "oops" in the keyword list. Please tell me that "oops" is not
a default option.It seems to me that someone hacked my computer and
wanted me to know about it or am I being totally paranoid?



[Tue Feb 24 12:33:31 2004] [error] [client 217.229.251.141]
(13)Permission denied: access to /index.php denied
[Tue Feb 24 12:33:31 2004] [error] [client 217.229.251.141]
(13)Permission denied: access to /index.html denied
[Tue Feb 24 12:33:31 2004] [error] [client 217.229.251.141]
(13)Permission denied: access to /index.htm denied
[Tue Feb 24 12:33:31 2004] [error] [client 217.229.251.141]
(13)Permission denied: access to /index.shtml denied
[Tue Feb 24 12:33:31 2004] [error] [client 217.229.251.141]
(13)Permission denied: access to /error/noindex.html denied
[Tue Feb 24 14:01:16 2004] [error] [client 61.184.47.221]
(13)Permission denied: access to /scripts/nsiislog.dll denied
  #2 (permalink)  
Old 02-27-2004
Cyde Weys
 
Posts: n/a
Default Re: Is it Sinister?

Can you do an ls -al on the files it's saying that access is being
denied to and tell us the file permissions?
  #3 (permalink)  
Old 02-28-2004
Ceri Shaw
 
Posts: n/a
Default Re: Is it Sinister?

Cyde Weys <cyde@umd.edu> wrote in message news:<c1o6fr$u8$2@grapevine.wam.umd.edu>...
> Can you do an ls -al on the files it's saying that access is being
> denied to and tell us the file permissions?


Thanks for your response. Can you explain how this would be of
assistance? Some of the files to which access was denied don't exist
and the others are secure.I simply wondered if the intrusion was
likely to result in any serious consequence?
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 02:42 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0