[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] (no subject)
- Subject: RE: [cobalt-users] (no subject)
- From: Graeme Fowler <graeme.fowler@xxxxxxxxxxxxxx>
- Date: Mon Aug 20 19:13:42 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
Paul Brown wrote:
> I had hundreds of the two GET requests below within a couple
> of minutes. What do they mean? Is someone trying to hack me?
>
> dns0.internethosting.co.uk 213.20.48.33 - -
> [13/Aug/2001:07:56:11 +0100] "GET /cgi-bin/php.cgi?/etc/passwd HTTP/1.0"
302 238 "-"
> "Mozilla/2.0 (compatible; NEWT ActiveX; Win32)"
Well, not exactly - looks like someone ran an automated vulnerability
scanner against your machine. Unless you have those scripts in place (check
for 200 result codes) then there's nothing to worry about. Welcome to the
hostile place we call the Internet :)
Graeme
--
Graeme Fowler
System Administrator
Host Europe Group PLC