Re: evil script in server logs (Heads Up)

From:	Ashley M. Kirchner	Date:	Fri, 05 Oct 2007 15:43:26 +0000
Subject:	Re: evil script in server logs (Heads Up)
References:	1 2 3 4 5 6	Groups:	php.general
Request:	Send a blank email to php-general+get-262818@lists.php.net to get a copy of this message

Daniel Brown wrote:

    Yeah, honestly I wasn't sure if it was an injection attack or if
those URLs were referrers in the logs. If you hit the first URL ( http://www.vesprokat.ru/n ) with, say lynx, you get that script coming up. So it could've been referral hits. Which could mean the remote host is already infected and is now looking for more targets.

-- W | It's not a bug - it's an undocumented feature. +-------------------------------------------------------------------- Ashley M. Kirchner <mailto:ashley@pcraft.com> . 303.442.6410 x130 IT Director / SysAdmin / Websmith . 800.441.3873 x130 Photo Craft Imaging . 3550 Arapahoe Ave. #6 http://www.pcraft.com ..... . . . Boulder, CO 80303, U.S.A.