1

I was using Tail on an Apache log file and noticed these:

/cie/insxp5/update.ins 
/rpam/homepage-e.asp
/rpam/Training-e.asp

From a short session of googling, I think the rpam URLs refer to either Ruby or Redmine authentication? The other URL seems to indicate an attempt to log onto a device with LaCie Remote Administration?

Not sure if others have seen this before?

Edit #1 Long story short, links containing /rpam are actually valid request. Those containing /cie still are up in the air.

  • 2
    Get used to it - this is just some of the noise you will see on an internet connected machine. – symcbean May 1 '13 at 20:56
  • they love phpmyadmin for sure. – thkang May 1 '13 at 22:34
  • @thkang Amen to that. It's fascinating seeing them trying dozens of different common phpmyadmin URLs. – ceejayoz May 2 '13 at 14:32
4

Those are bots scanning your server for known vulnerabilities of the applications you mentioned.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.