I concurr.

I have seen:
/phpMyAdmin/scripts/setup.php
/phpmyadmin/
/user/soapCaller.bs

I guess there are security holes in old versions of phpmyadmin. Some
sort of content management with setup.php left unconfigured/unsecured
so the bots are just checking out all of those url's.

sam_w

On Thu, Oct 7, 2010 at 8:51 AM, Daniel Roseman <dan...@roseman.org.uk> wrote:
> On Oct 6, 10:32 pm, Scot Hacker <shac...@birdhouse.org> wrote:
>> We have enabled the option to have 404 requests automatically emailed
>> to admins. It works well, but sometimes we get strange reports like
>> this:
>>
>> > Referrer:http://ourdomain.edu/forums/software/
>> > Requested URL: /forums/software/
>> > User agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
>> > IP address: 94.29.103.134
>>
>> What's strange about it is that the referring 
>> URLhttp://ourdomain.edu/forums/software/
>>    *does not exist* - we removed it more than a year ago. So I can see
>> why the requested URL is 404, but don't understand how a non-existent
>> URL can be considered to be the referrer. Is this evidence of some
>> kind of bot activity that fakes the referrer?
>>
>> Anyone seeing anything similar?
>>
>> Scot
>
> Yes, there are all sorts of bots around, and the referrer is easy to
> fake - it's just an HTTP header. I quite frequently get reports with
> referrers that have never even existed on my site.
> --
> DR.
>
> --
> You received this message because you are subscribed to the Google Groups 
> "Django users" group.
> To post to this group, send email to django-us...@googlegroups.com.
> To unsubscribe from this group, send email to 
> django-users+unsubscr...@googlegroups.com.
> For more options, visit this group at 
> http://groups.google.com/group/django-users?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-us...@googlegroups.com.
To unsubscribe from this group, send email to 
django-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en.

Reply via email to