[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]
Hi, i was looking through my apache log today and got this:217.124.184.195 - - [21/Jan/2011:00:35:42 +0000] "GET //myadmin/%20/scripts/setup.php HTTP/1.1" 404 544 "-" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en]" 94.63.246.2 - - [21/Jan/2011:02:30:18 +0000] "GET //phpmyadmin/ HTTP/1.1" 404 466 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:18 +0000] "GET //phpMyAdmin/ HTTP/1.1" 404 467 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:18 +0000] "GET //PHPmyadmin HTTP/1.1" 404 466 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:18 +0000] "GET //pma/ HTTP/1.1" 404 461 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:18 +0000] "GET //dbadmin/ HTTP/1.1" 404 464 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:18 +0000] "GET //myadmin/ HTTP/1.1" 404 464 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:19 +0000] "GET //PHPMYADMIN/ HTTP/1.1" 404 467 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:19 +0000] "GET //phppgadmin/ HTTP/1.1" 404 467 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:19 +0000] "GET //mail/ HTTP/1.1" 404 462 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:19 +0000] "GET //phpmanager/ HTTP/1.1" 404 466 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:19 +0000] "GET //phpmya/ HTTP/1.1" 404 463 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:20 +0000] "GET //pma2005/ HTTP/1.1" 404 464 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:20 +0000] "GET //PMA2005/ HTTP/1.1" 404 464 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:20 +0000] "GET //webadmin/ HTTP/1.1" 404 465 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:20 +0000] "GET // HTTP/1.1" 200 644 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:20 +0000] "GET //Admin/ HTTP/1.1" 404 463 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:20 +0000] "GET //db/ HTTP/1.1" 404 460 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:21 +0000] "GET //mysqladmin/ HTTP/1.1" 404 467 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:21 +0000] "GET //PHPMYADMIN/ HTTP/1.1" 404 467 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:21 +0000] "GET //PMA/ HTTP/1.1" 404 462 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:21 +0000] "GET //admin/ HTTP/1.1" 404 462 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 94.63.246.2 - - [21/Jan/2011:02:30:21 +0000] "GET //mysql/ HTTP/1.1" 404 463 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
Did some research and it seems like some sort of attack... should i be worried?
Dave -- The Mailing List for the Devon & Cornwall LUG http://mailman.dclug.org.uk/listinfo/list FAQ: http://www.dcglug.org.uk/listfaq