Someone probing my server

Posted: Fri Oct 30, 2009 8:16 am

I've been getting things like this occasionally from my Apache logwatch file.

Code:

 A total of 2 possible successful probes were detected (the following URLs


 contain strings that match one or more of a listing of strings that


 indicate a possible exploit):


 


    /errors.php?error=./../../../../../../../../etc/passwd HTTP Response 302 


    /errors.php?error=./../../../../../../../../etc/passwd%00 HTTP Response 302

Do I need to be worried? I have blocked the IP address that the probing is coming from.

Posted: Fri Oct 30, 2009 7:48 pm

Yep, just bots looking for a way in. It's probably not even targeting phpNuke, as far as I know, it has never used errors.php