httpd logs



hi!

I have a mail server in the Internet somewhere.
Every day, I keep getting this same error (404) logs for httpd (via
LogWatch):

--------------------- httpd Begin ------------------------


Requests with error response codes
404 Not Found
/awstats/awstats.pl?configdir=|echo;echo%2 ... cho%20YYY;echo|: 3 Time(s)
/blog/xmlrpc.php: 3 Time(s)
/blog/xmlsrv/xmlrpc.php: 3 Time(s)
/blogs/xmlsrv/xmlrpc.php: 3 Time(s)
/cgi-bin/awstats.pl?configdir=|echo;echo%2 ... cho%20YYY;echo|: 3 Time(s)
/cgi-bin/awstats/awstats.pl?configdir=|ech ... cho%20YYY;echo|: 3 Time(s)
/cvs/index2.php?_REQUEST[option]=com_conte ... cho%20YYY;echo|: 1 Time(s)
/cvs/mambo/index2.php?_REQUEST[option]=com ... cho%20YYY;echo|: 1 Time(s)
/drupal/xmlrpc.php: 3 Time(s)
/favicon.ico: 31 Time(s)
/index.php?option=com_content&do_pdf=1&id= ... cho%20YYY;echo|: 1 Time(s)
/index2.php?option=com_content&do_pdf=1&id ... cho%20YYY;echo|: 1 Time(s)
/mambo/index2.php?_REQUEST[option]=com_con ... cho%20YYY;echo|: 1 Time(s)
/php/mambo/index2.php?_REQUEST[option]=com ... cho%20YYY;echo|: 1 Time(s)
/phpgroupware/xmlrpc.php: 3 Time(s)
/wordpress/xmlrpc.php: 3 Time(s)
/xmlrpc.php: 6 Time(s)
/xmlrpc/xmlrpc.php: 3 Time(s)
/xmlsrv/xmlrpc.php: 3 Time(s)


worms?

--
Anze Vidmar <anzevi@xxxxxxxxx>

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list



Relevant Pages

  • Re: httpd logs
    ... I keep getting this same error logs for httpd (via ... > LogWatch): ... > Requests with error response codes ...
    (RedHat)
  • Re: Log files indicate IIS restart? Or worker process recycling
    ... and recycle the pool after 1740 mins ... > The IIS W3C format logs of a web site frequently have the following lines ... > are about 10 of these entries in the logs. ... > requests, sometimes just after 1 request, sometimes after several dozen ...
    (microsoft.public.inetserver.iis.security)
  • Re: [logs] nimda web server logs
    ... apache logs rather then snort logs for the connection attempts). ... I have also seen requests for ... looking in the denied packet logs I also see loads of denied connection ...
    (Incidents)
  • Re: am I hacked?
    ... In the logs I found exactly the same results since one month ago. ... But get logwatch running right away. ... reported by rkhunter - wget. ... You can also also use RPM to check the same files. ...
    (Fedora)
  • Re: ISA report job not working properly
    ... | There are no event logs about report creation problems, ... The Report Job Properties window opens. ... | Requests Bytes In Bytes ...
    (microsoft.public.isa)