Possible Hack Attempt??

[bylamo]

I just got someone looking around my site for a cmd.php file. This person kept trying different directory combinations but thankfully no luck.

I googled cmd.php and it happens to be a file that allows remote access hacking or smthing like that.
Anyway i've added the ip address to my ban list now.
The ip is 62.193.245.223 if anyone wants to add it as well.

I'm not even sure if this file exists on the server. I'll search now to find out and see what it does.

[kobra]

FYI
% Information related to '62.193.240.0 - 62.193.255.255'
inetnum: 62.193.240.0 - 62.193.255.255
netname: AMEN-EUROPE-NETWORK
descr: AMEN European Network
descr: For Spam/Abuse requests please send mail to *****@amenworld.com
country: FR
admin-c: JD2263-RIPE
tech-c: AN910-RIPE
status: ASSIGNED PA
mnt-by: AMEN-MNT
mnt-lower: AMEN-MNT
mnt-routes: AMEN-MNT
mnt-domains: AMEN-MNT
rev-srv: ns1.amenworld.com
rev-srv: ns2.amenworld.com
notify: ****@amen.fr
changed: *******@amen.fr 20041026
source: RIPE
role: AMEN NOC
address: AMEN - Agence des Medias Numeriques
address: 12/14, Rond-point des champs elysees
address: 75008 Paris, France phone: +33 8 92 55 66 77
e-mail: *****@amen.fr
nic-hdl: AN910-RIPE
admin-c: JD2263-RIPE
tech-c: AN1018-RIPE
tech-c: AN1019-RIPE
notify: ****@amen.fr
mnt-by: AMEN-MNT

[jrawly]

It may be a good idea emailing the suspected "attack" to abuse@amen.fr