Re: [cobalt-users] Test 404 Response? Anyone seen this?

["Steve Werby" <steve-lists@xxxxxxxxxxxx>]

"Wayne Sagar" <wsagar@xxxxxxxx> wrote:
> I've been seeing this in all my sites stats reports..
>
> /test404response1134905089.html
>
> apparantly someone checking for some sort of vulnerablity?

I'm not aware of any kind of vulnerability from an HTML page with a specific
name.  I see a few dozen CGI filenames that people check for.  I haevn't
checked them all, but the few I have checked are all associated with a known
vulnerability.  A few weeks ago I started writing a shell script in PHP to
parse my logs for these filenames so I could collect the IP addresses of
those attempting to access them and filter their traffic, but I haven't
completed it to the extent where I can automate the process.

> Anyone know what this is about?

It might be some kind of spider that tests for a filename that's almost
definitely not on your site so it can collect statistics about the number /
types of servers with 404 error pages in place.  Or it could be someone
screwing with you.  Or something else.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/