PDA

View Full Version : How do I stop local hacking?


pete3005
12-17-2002, 03:06 PM
I haven't checked my Apache error logs locally for ages, I did tonight and found this:


[Tue Dec 17 21:40:11 2002] [error] [client 195.35.16.235] File does not exist: c:/program files/apache group/apache/htdocs/scripts/..%5c%5c/winnt/system32/cmd.exe


So it looks like someone thought my local server was IIS or NT right?

I have a Firewall and up to now, it has stopped this but not tonght from the above. Am I just paranoid or was someone trying to hack me :(

I don't want people messing my system up. Do I shut down Apache when I am online, is that the only way to ensure security?

Pete :mad:

Steven
12-17-2002, 03:43 PM
Hi Pete,
Actually that is nothing to worry about if you are running a linux operating system, as that is a worm/virus that affects windows machines. That is the nimbda worm.

-Steven

lucas
12-17-2002, 07:43 PM
funny story, when nimda came out i had an ASP page up on the server that sent me an email if a 404 error occurred so i could fix it quickly.

course the boss shut down the smtp service pretty quickly after he noticed i had over 3000 emails sent to me :)

pete3005
12-17-2002, 10:37 PM
Originally posted by Steven
Hi Pete,
Actually that is nothing to worry about if you are running a linux operating system, as that is a worm/virus that affects windows machines. That is the nimbda worm.

-Steven

Its actually Windows XP Home with Apache, but I guess its safe then :)

Thanks!

Pete

lucas
12-18-2002, 06:38 AM
nimda attacks Microsoft Internet Information Server for known vunerabilities. your fine. :)