Very Computer

1. /cgi-bin/phf /cgi-bin/test-cgi /cgi-bin/handler

I've been seeing a number of attacks of this sort recently
from various sites in the http logs.  The time correlation
between the logs on various hosts suggests that the attacker
was scanning sequentially upward in IP addresses.  Since all
tcp and udp packets to ports below 1024 except for http,
smtp, and ident are filtered out for most, including the
attacking, sites, I'm not seeing anything else in the logs.

209.61.73.47 - - [04/Jul/1998:07:19:27 -0500] "GET /cgi-bin/phf" 404 -
209.61.73.47 - - [04/Jul/1998:07:19:28 -0500] "GET /cgi-bin/test-cgi" 404 -
209.61.73.47 - - [04/Jul/1998:07:19:28 -0500] "GET /cgi-bin/handler" 404 -

Is this a signature of some known attackware?  If so, what
other attacks accompany these http probes?

--

2. NE1000 problem w/kernel 1.2.13

3. Running cgi scripts outside /cgi-bin directory

4. sed/awk/perl multi-line search/replace

5. apache: cgi script not in cgi-bin

6. address of autoftp please ?

7. cgi-bin/view-source?cgi-bin/view-source

8. SCSI: Does one need a special SCSI LVD adapter, over and above a SCSI card?

9. How could let CGI run not only at cgi-bin?

10. Can't get CGI to run in local cgi-bin directory

11. Cannot execute CGI programs in /cgi-bin with Apache

12. Newbie alert: Setting up users with cgi-bin permissions (linux/apache)

13. File permissions in cgi-bin (Apache)?