Re: hacking attempt on Apache?
On Tue, 6 Jul 2004 20:30:56 +0200
Pim Bliek <pim.bliek@gmail.com> wrote:
> Hi,
>
> I got this in my logs:
>
> 12.135.225.155 - - [30/Jun/2004:13:41:07 +0200] "POST
> /cgi-bin/formmail.pl HTTP/1.0" 404 14523 "http://www.foo.bar/"; "-"
> 0 foo.bar
>
>
> Apparently all from different IP's but certainly coordinated,
> because it is on the same time, same kind of requests.
>
> Anyone knows how this can be done? Is there any possibility to
> trace who might have done this?
>
> Best regards,
> Pim Bliek
>
Pim,
It appears to be that someone is trying to find a vulnerability ...
probably several someones. I've been running a web server for quite
awhile and find those entries regularly.
As long as I don't have the vulnerable software, I don't worry too
much about it.
--
Raquel
============================================================
The highest result of education is tolerance.
--Helen Keller
Reply to: