Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I was using Tail on an Apache log file and noticed these:

/cie/insxp5/update.ins 
/rpam/homepage-e.asp
/rpam/Training-e.asp

From a short session of googling, I think the rpam URLs refer to either Ruby or Redmine authentication? The other URL seems to indicate an attempt to log onto a device with LaCie Remote Administration?

Not sure if others have seen this before?

Edit #1 Long story short, links containing /rpam are actually valid request. Those containing /cie still are up in the air.

share|improve this question
2  
Get used to it - this is just some of the noise you will see on an internet connected machine. –  symcbean May 1 '13 at 20:56
    
they love phpmyadmin for sure. –  thkang May 1 '13 at 22:34
    
@thkang Amen to that. It's fascinating seeing them trying dozens of different common phpmyadmin URLs. –  ceejayoz May 2 '13 at 14:32

1 Answer 1

up vote 4 down vote accepted

Those are bots scanning your server for known vulnerabilities of the applications you mentioned.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.