Why is anybody looking for blogs,b2evo,b2 etc and how do I stop them ?

[gray_bale]

Why is anybody looking for blogs,b2evo,b2 etc and how do I stop them ?? or need I not be too worried.

 

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/b2evo

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/b2

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/blogtest

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/blog

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/blogs

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/blogs

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/community

[Guest]

Why is anybody looking for blogs,b2evo,b2 etc and how do I stop them ?? or need I not be too worried.

 

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/b2evo

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/b2

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/blogtest

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/blog

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/blogs

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/blogs

[Thu Oct 04 15:14:36 2007] [error] [client 193.239.120.145] File does not exist: C:/apache2triad/htdocs/community

Hi Gray_bale,

 

I'm surprised they were checking folders rather specific pages so I am guessing that they were potential site spammers. I see similar things in my server logs too, but usually for pages with known exploits. (I searched the page names I saw in my logs and found that there were exploits for those pages.) As for stopping them, the only effective means I know of is to take down your website (not really an option). If you are not running the programs in question, then don't worry. If you have any of the programs/pages, then make sure you install whatever suggested fix exists (Go to the source site for the program and search for the problem. If it is big enough, it will be on the front page.) (Often, script kiddies will go after exploits long after patches are available simply because not everyone patches when they should.)

 

Are you running PhpGeek's PhpTriad for your webserver and are you using the installed .ini files or the production .ini files?

 

Doug