waynew Posted September 30, 2008 Share Posted September 30, 2008 Hi. On one of my websites I have a logging system that stores any unusual requests for blog posts. If the blog post that the person is looking for not there, I store the persons IP address and the blog that they were looking for. This is what I was greeted with when I checked those db logs: A viewer with the IP 66.18.216.233 tried to access a post called ../../../../../../../../../../../proc/self/environ Is this a case of somebody trying to traverse directories? Quote Link to comment Share on other sites More sharing options...
waynew Posted September 30, 2008 Author Share Posted September 30, 2008 OrgName: Nucleus Inc. OrgID: NUCLE-1 Address: 1835 B 10 Ave S.W. City: Calgary StateProv: AB PostalCode: T3C-0K2 Country: CA NetRange: 66.18.192.0 - 66.18.255.255 CIDR: 66.18.192.0/18 NetName: NUCLEUS NetHandle: NET-66-18-192-0-1 Parent: NET-66-0-0-0-0 NetType: Direct Allocation NameServer: NS.NUCLEUS.COM NameServer: NS1.NUCLEUS.COM Comment: RegDate: 2004-03-09 Updated: 2004-03-09 RAbuseHandle: JH2239-ARIN RAbuseName: Hribnak, Jim RAbusePhone: +1-403-209-0000 RAbuseEmail: abuse@nucleus.com OrgTechHandle: JH2239-ARIN OrgTechName: Hribnak, Jim OrgTechPhone: +1-403-209-0000 OrgTechEmail: abuse@nucleus.com Quote Link to comment Share on other sites More sharing options...
trq Posted September 30, 2008 Share Posted September 30, 2008 Is this a case of somebody trying to traverse directories? Yes. I wouldn't worry about it too much. If you view the logs of any site with a decent amount of traffic there are lots of odd requests / bots. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.