LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 04-18-2013, 04:35 PM   #1
jpdw
LQ Newbie
 
Registered: Apr 2013
Posts: 1

Rep: Reputation: Disabled
A total of 2 possible successful probes were detected


Should i be worried about this logwatch Log?

A total of 2 sites probed the server
114.251.150.133
87.98.230.80

A total of 2 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that indicate a possible exploit):

/horde/util/barcode.php?type=../../../../../../../../../../../var/log/psa-horde.log%00 HTTP Response 200
/horde/util/barcode.php?type=../../../../../../../../../../../var/log/psa-horde/psa-horde.log%00 HTTP Response 200

Requests with error response codes
400 Bad Request
/: 2 Time(s)
/w00tw00t.at.ISC.SANS.DFind: 2 Time(s)
/w00tw00t.at.ISC.SANS.Win32: 2 Time(s)
404 Not Found
//wp-login.php: 1 Time(s)
/PMA/main.php: 4 Time(s)
/admin/main.php: 4 Time(s)
/favicon.ico: 4 Time(s)
/horde/services/help/?show=about: 2 Time(s)
/manager/html: 2 Time(s)
/myadmin/main.php: 4 Time(s)
/mysql/main.php: 4 Time(s)
/page9.html: 1 Time(s)
/phpMyAdmin/main.php: 4 Time(s)
/phpmyadmin/main.php: 4 Time(s)
/robots.txt: 13 Time(s)
/sql/main.php: 4 Time(s)
/vtigercrm/graph.php?current_language=../. ... Accounts&action: 1 Time(s)

---------------------- httpd End -------------------------
 
Old 04-18-2013, 05:38 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,552
Blog Entries: 54

Rep: Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925Reputation: 2925
Return code 200 means the request succeeded. And simply put log files should be writable by daemons but not readable.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Possible successful probes detected newbie14 Linux - Security 25 04-26-2013 10:51 AM
[SOLVED] Logwatch : A total of 1 possible successful probes were detected Metux Linux - Security 2 11-08-2012 08:26 AM
Apache exploit? Logwatch: A total of 2 possible successful probes were detected deathsfriend99 Linux - Security 1 10-24-2011 04:16 PM
LogWatch: "possible successful probes"? Quip11 Linux - Security 1 07-20-2009 05:39 PM
What's this in LogWatch: "!!!! 1 possible successful probes" ? bomix Linux - Security 1 07-29-2005 11:23 PM


All times are GMT -5. The time now is 01:15 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration