Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Hacking Attempt? found in error log

Posted on 2005-03-15
Medium Priority
Last Modified: 2008-02-01
I found the following lines in my access log. Does anyone know if this may be an hacking attempt? As you can tell I am new to security as far as servers go. Maybe just my paranoya. I do not have front page running or any thing to do with microsoft.

It is running on a linux box. Any info would help. thanx - - [15/Mar/2005:13:43:34 -0500] "GET /_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=4219&STRMVER=4&CAPREQ=0 HTTP/1.1" 404 1050 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" - - [15/Mar/2005:13:43:38 -0500] "GET /MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=4219&STRMVER=4&CAPREQ=0 HTTP/1.1" 404 1050 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

Question by:pmrussell892
LVL 51

Accepted Solution

ahoffmann earned 120 total points
ID: 13554111
that's normal noice
if someone considers this "hacking" depends on his/her definition of "hacking" ;-)

as you identified yourself, the 1'st one is an attemt to get fron-page files (probably just a poor attempt to check existance), the 2'ns check for some MSOffice files
they booth look like someone is scanning your server

Assisted Solution

bloemkool1980 earned 80 total points
ID: 13554384
as ahoffman said normal noise.
You could check if you have the files present but I suppose it is an automated tool, worm, script kiddie trying to find an easy target.

Author Comment

ID: 13557198

That was what I supposed it was but wanted to get a pro's advice.

I do not have either on my system.

Featured Post

Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

​Being a Managed Services Provider (MSP) has presented you  with challenges in the past— and by meeting those challenges you’ve reaped the rewards of success.  In 2014, challenges and rewards remain; but as the Internet and business environment evol…
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Enter Foreign and Special Characters Enter characters you can't find on a keyboard using its ASCII code ... and learn how to make a handy reference for yourself using Excel ~ Use these codes in any Windows application! ... whether it is a Micr…
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question