-
Strange Error Log
The following is the error log from my web host:
[Tue Apr 20 06:49:39 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:39 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+engurl+
[Tue Apr 20 06:49:35 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:35 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+wtcurl+
[Tue Apr 20 06:49:31 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:31 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+suburl+
[Tue Apr 20 06:49:30 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:30 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+hcurl+
[Tue Apr 20 06:49:30 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:30 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+hxurl+
[Tue Apr 20 06:49:29 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:29 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+moreurl+
[Tue Apr 20 06:49:28 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:28 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+ptnurl+
[Tue Apr 20 06:49:21 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:21 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+veurl+top10[i+5]+
[Tue Apr 20 06:49:21 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:21 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+veurl+top10[i]+
[Tue Apr 20 06:49:20 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/404.shtml
[Tue Apr 20 06:49:20 2004] [error] [client 211.152.14.97] File does not exist: /home/[Removed]/public_html/+veurl+vname+
Can anyone tell me what does those +something+ means?
-
Well, not sure yet but according to this you're not the only one (note the almost identical ip!).
After a bit more digging I found several code snippets like this:
Code:
$content .= "var moreURL=ct+'http://de.trendmicro-europe.com/enterprise/security_info/security_overview.php'\n";
$content .= "var ptnURL=ct+'de.trendmicro-europe.com/support/pattern.php'\n";
$content .= "var engURL=ct+'de.trendmicro-europe.com/support/engines.php'\n";
$content .= "var hcURL=ct+'http://housecall.antivirus.com/'\n";
$content .= "var subURL=ct+'http://www.trendmicro.com/subscriptions/'\n";
$content .= "var hxURL=ct+'de.trendmicro-europe.com/vinfo/hoaxes/hoax.asp'\n";
$content .= "var wtcURL=ct+'http://wtc.trendmicro.com/wtc/'\n";
This seems part of a "TrendMicro Virus Info Feed" script. So my guess is somebody found a bug in it and is scanning for it.
-
What was the source of the error?