[Dshield] Interesting Web Log Entries
dshield at digitalnation.ca
Fri Mar 24 18:15:00 GMT 2006
Well...excuse me. Who died and left you in charge?
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of George A. Theall
Sent: Thursday, March 23, 2006 2:14 PM
To: General DShield Discussion List
Subject: Re: [Dshield] Interesting Web Log Entries
On Thu, Mar 23, 2006 at 01:29:33PM -0800, DigitalNation wrote:
> These are mostly outdated PHP cross scripting attempts.
I wasn't asking what these are but rather what tool / worm is generating
> The awstats.pl is
> very commonly seen.
Yes, but unless your logs are different than mine, the attempts involve
arbitrary command execution rather than cross-site scripting attacks.
> If your versions of any of these apps (if you are
> running any)
Each of the lines I included showed 404 return codes.
theall at tifaware.com
More information about the list