From owner-freebsd-security Tue Apr 11 16: 2:27 2000 Delivered-To: freebsd-security@freebsd.org Received: from ptldpop2.ptld.uswest.net (ptldpop2.ptld.uswest.net [198.36.160.2]) by hub.freebsd.org (Postfix) with SMTP id 386F837B60F for ; Tue, 11 Apr 2000 16:02:21 -0700 (PDT) (envelope-from wwoods@cybcon.com) Received: (qmail 3444 invoked by alias); 11 Apr 2000 23:02:18 -0000 Delivered-To: fixup-freebsd-security@freebsd.org@fixme Received: (qmail 3428 invoked by uid 0); 11 Apr 2000 23:02:17 -0000 Received: from unknown (HELO laptop.cybcon.com) (63.227.213.90) by ptldpop2.ptld.uswest.net with SMTP; 11 Apr 2000 23:02:17 -0000 Content-Length: 828 Message-ID: X-Mailer: XFMail 1.4.0 on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 Date: Tue, 11 Apr 2000 16:02:11 -0700 (PDT) Reply-To: bwoods2@uswest.net From: William Woods To: freebsd-security@freebsd.org Subject: Weird log entry ..... Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Came home from work and was doing a check of my server logs and ran accross this, anyone tell me whats up here? cache-dp03.proxy.aol.com - - [11/Apr/2000:15:18:59 -0700] "GET / HTTP/1.0" 200 4254"http://209.185.131.251/cgi-bin/linkrd?_lang=&lah=14853ce0511667e378ad7f249b b39074&lat=955491465&hm___action=http%3a%2f%2f63%2e227%2e213%2e92%2f" "Mozilla/4.0(compatible; MSIE 5.0; AOL 5.0; Windows 98; DigExt)" What worries me is the try to execute a cgi-bin command here. Thanks ---------------------------------- E-Mail: bwoods2@uswest.net Date: 11-Apr-00 Time: 15:59:50l ---------------------------------- NOTICE TO BULK E-MAILERS: Pursuant to US Code, Title 47, Chapter 5, Subchapter II, 227, and all unsolicited commercial e-mail sent to this address is subject to a download and archival fee in the amount of $500 US To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message