Results 1 to 4 of 4
  1. #1
    ABW Ambassador John Kruger's Avatar
    Join Date
    January 18th, 2005
    Location
    At my computer
    Posts
    645
    why would this be the top accessed file on one of my sites?

    Just curious.

    John

    Once a year, go someplace you've never been before.

    www.teampb.com

  2. #2
    ABW Ambassador sjangro's Avatar
    Join Date
    January 18th, 2005
    Location
    Boston
    Posts
    1,529
    That's a frontpage administrative CGI program.

    Someone's checking your server for access to the frontpage utilities. Nothing out of the ordinary (as long as they didn't find it and use it successfully, of course.)

    --scott

    --
    Scott Jangro
    sjangro@befree.com

  3. #3
    ABW Ambassador FFoc's Avatar
    Join Date
    January 18th, 2005
    Posts
    1,015
    I took all the frontpage extensions and whatnot that were being hit on my site and made folders out of them with an index page:
    hit: _vti_bin/shtml.exe/_vti_rpc
    fix: $DOC_ROOT/_vti_bin/shtml.exe/_vti_rpc/index.html
    containing:
    <pre class="ip-ubbcode-code-pre">
    &lt;html&gt;&lt;body&gt;&lt;h1&gt;Go Away! No hole here!&lt;/h1&gt;&lt;/body&gt;&lt;/html&gt;
    </pre>
    The hits fell off real quick afterward...

  4. #4
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    2,402
    These things are a big PITA. One of these days I will posts some of our logs to show how much of those things hit our servers each minute. It is just a search for vulnerabilities...

    TH Media-Web Solutions For The Small Business
    Check Out The TH Media Affiliate Program

  5. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. Got a virus prunnet.exe
    By Rhea in forum Virtual Family and Off-Topic
    Replies: 17
    Last Post: December 23rd, 2008, 11:30 PM
  2. Replies: 4
    Last Post: August 31st, 2007, 02:09 AM
  3. MSUpdater.exe in startup folder
    By FFoc in forum Suspicious Activity!
    Replies: 0
    Last Post: October 11th, 2003, 07:54 PM
  4. Command.exe Virus - Watch out!
    By Akiva in forum Midnight Cafe'
    Replies: 1
    Last Post: May 23rd, 2003, 12:35 PM
  5. Topsites.exe
    By Dynamoo in forum Suspicious Activity!
    Replies: 5
    Last Post: March 11th, 2003, 05:54 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •