I administrate a public server that receives about a 100 csh HTTP shell shock per day from different sources. It is an HTTP GET Method that that requests the /cgi-bin/authLogin.cgi URI.
Knowing that the requested URI does not exist in my server is it normal to receive much attack attempts from the internet ? Does that mean that my server is compromised ?
Can anyone with networks auditing experience tell me if receiving that much attacks from the internet is normal or not?