PHP script attack?
- From: "Brion" <blah@xxxxxxxx>
- Date: Mon, 24 Sep 2007 08:46:15 -0400
Hi everyone,
Recently we've started getting error messages similar to the following:
Source: W3SVC-WP
Event ID: 2216
Description:
The script started from the URL '/thisdoesnotexistahaha.php' with parameters
'' has not responded within the configured timeout period. The HTTP server
is terminating the script.
The particular .php script involved has a different name each time. If I'm
reading this right, someone is trying to execute a php script somehow. The
server does host some websites that use php, and it has PostgreSQL installed
too. How are they attempting to execute a script? Via HTTP post? What are
they trying to do? Even if they find one of the php files on the server,
what good would it do them to execute it? Any advice is appreciated.
Thanks!
.
- Follow-Ups:
- Re: PHP script attack?
- From: jwgoerlich
- Re: PHP script attack?
- Prev by Date: Re: FTP for internal users and external customers.
- Next by Date: Re: FTP for internal users and external customers.
- Previous by thread: Re: FTP for internal users and external customers.
- Next by thread: Re: PHP script attack?
- Index(es):
Relevant Pages
|