Scans for leftover test e-mail scripts rise on SANS honeypots
VULNERABILITYSANS Internet Storm Centerredteam/daily · 1 source
- Severity
- Low
- Sources
- 1
What happened
The SANS Internet Storm Center reports a small rise in scans for e-mail test scripts such as /sendmail.php, /mailtest.php and /config/mailconfig.php on its honeypots. The scripts can take an arbitrary recipient address from a URL parameter and expose server configuration, which spammers have historically abused. The author recommends scanning your own hosts for these paths and fixing code hygiene during deployment.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check your own web servers for the test e-mail script paths listed in the report.
- Remove development and test scripts such as mailtest.php from live websites.
- Check public web servers for exposed credential and secret files.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
SANS Internet Storm Center
Who and what is in it
Companies