[Wylug-help] logwatch

[rich]

On 01/08/10 23:30, Roger wrote:
> Hi again,
>
> First, thanks for previous help - I thought I'd said so at the time, 
> but can't find a record of doing so.  I hope I just deleted both the 
> outgoing and incoming versions...
>
> Anyway, over the last few days someone seems to have been trying hard 
> to use other means to hack in - logwatch has been reporting (with 401 
> and 404 errors) such requests as:
>
>     404 Not Found
>        //PHPMYADMIN/config/config.inc.php?p=phpinfo();: 1 Time(s)
>        //admin/config/config.inc.php?p=phpinfo();: 1 Time(s)
>        //config/config.inc.php?p=phpinfo();: 1 Time(s)

I see this type of thing on all my servers 24/7 it's generally simple 
automation scripts.
My advice is don't install web apps in their default installation 
directory and keep
patches current.



rich