[Dshield] Interesting Web Log Entries

DigitalNation dshield at digitalnation.ca
Fri Mar 24 18:15:00 GMT 2006


Well...excuse me. Who died and left you in charge?




-----Original Message-----
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of George A. Theall
Sent: Thursday, March 23, 2006 2:14 PM
To: General DShield Discussion List
Subject: Re: [Dshield] Interesting Web Log Entries


On Thu, Mar 23, 2006 at 01:29:33PM -0800, DigitalNation wrote:

> These are mostly outdated PHP cross scripting attempts.

I wasn't asking what these are but rather what tool / worm is generating
them. 

> The awstats.pl is
> very commonly seen.

Yes, but unless your logs are different than mine, the attempts involve
arbitrary command execution rather than cross-site scripting attacks.

> If your versions of any of these apps (if you are
> running any)

Each of the lines I included showed 404 return codes.


George
-- 
theall at tifaware.com





More information about the list mailing list