Quote:
Originally Posted by s0lidgr0und
They all look like spam attempts.
|
Nothing to do with spam. You are marketing your plugin with this "reply", LOL.
Quote:
Originally Posted by porcupine73
I spotted this little mess in my web error log and was wondering what the heck it is and if I should be concerned?
|
Looks like probes to check for vulnerabilities in your web server code.
When we see this types of exploit attempts, we (generally) use iptables and block the offending IP address. You can easily write a script to automate this.
- Scan log files from a script in your crontab.
- Match for exploit patterns from 404 errors, etc. (up to you).
- Update iptables with offending IP and block (or confirm first with your human eyes.)