Whoa, Blog!: What the Fish?!

03 Aug 2004

What the Fish?!

Lately there have been tons of requests to our webserver for files that are not there. Here are some of them, with "sensitive" info removed:

[Mon ... 2004] [error] [client x.x.x.x] script not found or unable to stat: /x/x/cgi-bin/mailform.pl, referer: http://renatha.hotspots.com/
[Mon ... 2004] [error] [client x.x.x.x] script not found or unable to stat: /x/x/cgi-bin/mailform.pl, referer: http://renatha.hotspots.com/
[Mon ... 2004] [error] [client x.x.x.x] script not found or unable to stat: /x/x/cgi-bin/formmail.cgi, referer: http://renatha.hotspots.com/
[Mon ... 2004] [error] [client x.x.x.x] script not found or unable to stat: /x/x/cgi-bin/FormMail.pl, referer: http://renatha.hotspots.com/
[Mon ... 2004] [error] [client x.x.x.x] script not found or unable to stat: /x/x/x/mail.cgi, referer: http://renatha.hotspots.com/
[Mon ... 2004] [error] [client x.x.x.x] script not found or unable to stat: /x/x/cgi-bin/fmail.pl, referer: http://renatha.hotspots.com/
[Mon ... 2004] [error] [client x.x.x.x] script not found or unable to stat: /x/x/cgi-bin/form.cgi, referer: http://renatha.hotspots.com/
[Mon ... 2004] [error] [client x.x.x.x] script not found or unable to stat: /x/x/cgi-bin/contact.pl, referer: http://renatha.hotspots.com/
[Mon ... 2004] [error] [client x.x.x.x] File does not exist: /x/x/x/cgi/formmail, referer: http://renatha.hotspots.com/
[Mon ... 2004] [error] [client x.x.x.x] script not found or unable to stat: /x/x/cgi-bin/mail.cgi, referer: http://renatha.hotspots.com/

BTW, tons is of course hyperbolic, as bytes, no matter how many of them there are, would never accumulate an ounce, let alone tons. All right, all right, just joking. Please put that 40-GB hard disk down, will ya? Hasn't this world seen enough violence already?

So I Googled this phenomenon up. And sure 'nuff, a lot of similar cases have been reported. The good news is everyone seems certain that the bots, worms, Trojan horses -- whatever those things are called these days -- that generate these requests gain nothing as long as the "attacked" webserver has no scripts by those aforementioned names. (Sorry, spending time with some Law student does that to you.)

The bad news is everyone seems certain.

I'm sorry, I just can't feel good when everything is seemingly good. That's just against any good webmaster's instincts. Not after the server was painfully slow yesterday. Not after the data center guy called you at 00:30 AM, while you were, uh, doing something.

Then again, Google has never let me down. It even allows people to search for dodol surodol -- never realized how unique that was. So let's just see.

Current music: Make Up - Pegasus Fantasy
Current mood: happy

Posted by FXRBDS at 2:54 PM WIB

« Finally... | Main | Friends »

Comments

Ren, gapai lu ?

Posted by bison on Aug 04, 2004 12:29 AM WIB

Baru bangun nih :)

Posted by FXRBDS on Aug 04, 2004 7:41 AM WIB

nggak ngerti ah ini bahasanya tidak manusiawi..!
hei lagi dengerin Seiya ya? adudududu...

Posted by chrysalic on Aug 04, 2004 8:53 AM WIB

Iya nih, giman man dong?

Posted by FXRBDS on Aug 04, 2004 9:25 AM WIB