I came across:
[Fri Nov 11 10:20:58 2011] [error] [client 62.141.39.169] File does not exist: /var/www/html/sqldumper
[Fri Nov 11 10:20:59 2011] [error] [client 62.141.39.169] File does not exist: /var/www/html/msd
[Fri Nov 11 10:20:59 2011] [error] [client 62.141.39.169] File does not exist: /var/www/html/dumper
[Fri Nov 11 10:20:59 2011] [error] [client 62.141.39.169] File does not exist: /var/www/html/tmp
[Fri Nov 11 10:20:59 2011] [error] [client 62.141.39.169] File does not exist: /var/www/html/dmp
[Fri Nov 11 10:20:59 2011] [error] [client 62.141.39.169] File does not exist: /var/www/html/bak
[Fri Nov 11 10:20:59 2011] [error] [client 62.141.39.169] File does not exist: /var/www/html/bck
[Fri Nov 11 10:21:00 2011] [error] [client 62.141.39.169] File does not exist: /var/www/html/backup
Looks like somebody is trying to find an SQL dump
That's nothing compared to my access_log
About a month ago I found over 150,000 requests for cpanel, phpmyadmin, webmin, direct admin, 'admin.php', and many more. Obviously they didn't find anything.
Also very weird requests such as 'sport.rss'. I have to admit, it's quite amusing to tail it for half an hour or so.
Generally if you're stupid enough to leave a backup in a web accessible directory then you deserve what ever the outcome is.
Never leave backups in such a directories, its also safe to htaccess pwd protect the backup directory if you're having one.
(2011-11-13, 12:59 PM)crazy4cs Wrote: [ -> ]Never leave backups in such a directories, its also safe to htaccess pwd protect the backup directory if you're having one.
Not if someone finds an LFI vulnerability on something. It's safe to keep none of your backups on the same server as your website. lol
I personally don't but that was an advice for those who tends to.
I used to have tons of these, I resorted to using fail2ban and banning the IPs if they kept trying to access files that do not exist.
The only thing with a setup such as this is you have to be extra careful not to have a broken link or a missing file (like say a missing image of a button or an image called from css) or else you risk pretty much banning every ip that comes to your site or tries to access the missing item.