[RayJ]

I just set up a new web server (OSX Server 10.2.8) 3 months ago. It host our company web site. This is the first time we have ever done this and we are a small company.

I decided to browse through the different files on the system. Be gan in the /Library/Logs/ directory.

As I was looking through the /Library/Logs/WebServer/error_log files, I saw some strange errors that jumped out for me.

Keep in mind I am new to this game.

Here are some of the errors:

[Mon Jan 12 18:09:35 2004] [error] [client 203.200.112.17] File does not exist: /Library/WebServer/Documents/scripts/root.exe

[Mon Jan 12 18:09:36 2004] [error] [client 203.200.112.17] File does not exist: /Library/WebServer/Documents/c/winnt/system32/cmd.exe

[Wed Jan 7 11:56:11 2004] [error] [client 66.191.52.230] File does not exist: /Library/WebServer/Documents/MSADC/root.exe

[Mon Jan 5 21:29:02 2004] [error] [client 218.94.26.34] request failed: erroneous characters after protocol string: GET /NULL.IDA?CCCCCCCCCC...



The last one I did not post the entire error as it was 3 pages long.

Should I be worried? Is this a hacker? I traced some of the IP address to places like New Deli and South Carolina.

Are there any commands that could affect me?

Thanks

[Arkham_c]

Don't worry about it. These are Windows viruses (NIMDA, Code Red, etc) running on infected Windows machines trying to infect other Windows machines. They just hit every IP out there trying to get lucky and infect another Windows box, thus spreading the infection.

You can count your blessings that you're not running a Windows web server and sleep soundly in the safety net that is UNIX.

[RayJ]

You can count your blessings that you're not running a Windows web server and sleep soundly in the safety net that is UNIX. [/B]

Glad to hear this.