lundi 5 janvier 2015

many csh http shellshock attacks



I administrate a public server that receives about a 100 csh HTTP shell shock per day from different sources. It is an HTTP GET Method that that requests the /cgi-bin/authLogin.cgi URI.


Knowing that the requested URI does not exist in my server is it normal to receive much attack attempts from the internet ? Does that mean that my server is compromised ?


Edit


Can anyone with networks auditing experience tell me if receiving that much attacks from the internet is normal or not?





Aucun commentaire:

Enregistrer un commentaire