rejetto forum

Software => HFS ~ HTTP File Server => Topic started by: sequestrum on September 13, 2008, 11:07:10 PM

Title: New unknown log entries
Post by: sequestrum on September 13, 2008, 11:07:10 PM

I just saw a very peculiar thing in my log which I don't know how to interpret:
(http://www.e-imagesite.com/UploadedFiles/hfs21398049.gif)

I don't recognize either of the IP addresses. Currently, only 8 people know about my server, and neither of them use any of these IP addresses. What does it mean, and how concerned should I be? To be on the safe side, I've switched off (F4) my HFS server until I've figured out what just happened.

I'm using 2.3 beta, build 202.

[edit] By the way, I have the "Stop spiders" option checked as well.

Title: Re: New unknown log entries
Post by: rejetto on September 14, 2008, 01:31:23 PM

take it easy :)

http://www.rejetto.com/wiki/index.php/HFS:_Secure_your_server#What_about_strange_logs.3F

Title: Re: New unknown log entries
Post by: sequestrum on September 14, 2008, 05:44:30 PM

Ah ok, so it failed? Couldn't there be any indication of that in the log in that case? "Request denied" or something?

Title: Re: New unknown log entries
Post by: rejetto on September 14, 2008, 06:00:57 PM

The request didn't failed: the main page was sent as reply. That's safe and harmless.
Of course that was not the goal of the malicious request.

Title: Re: New unknown log entries
Post by: sequestrum on September 14, 2008, 08:43:29 PM

Ok. I couldn't really read that out of it. But on the other hand, my knowledge of html is also very limited. I just saw it as an unknown user trying to get an unknown .gif file from another location.
Anyway, thanks for your reply.