Usenetharvested

Not an unusual sight from a Russian IP

route: 195.5.128.0/19
descr: CJSC "Metrocom"
descr: 29 Odoevskogo Str.
descr: 199155, Saint-Petersburg
descr: Russian Federation
origin: AS6850
mnt-by: AS6850-MNT
source: RIPE # Filtered

This started at [02/Jul/2011:00:57:11 -0500] and ended [02/Jul/2011:00:57:59 -0500]

195.5.154.130 - "GET /muieblackcat HTTP/1.1" 404
195.5.154.130 - "GET //scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //db/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //dbadmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //myadmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //mysql/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //mysqladmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //phpmyadmin1/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //phpmyadmin2/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //databaseadmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //admm/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //admn/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_myadmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //phpmya/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //#phpmyadmin_2.9.11/ HTTP/1.1" 404
195.5.154.130 - "GET //admin/my/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //mysql2/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //php1/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //sqladm/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //myAdmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //pmabd/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //mydb/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //mysql_administrator/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //pma_mydb/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //Myphp/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //phpas/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_pma/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //./scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_db/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_dbadmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_phpadmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_admin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_phpmyadmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_phpMyAdmin/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_myphp/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_php/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //sql/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //_sql/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //my-php/scripts/setup.php HTTP/1.1" 404
195.5.154.130 - "GET //My-php/scripts/setup.php HTTP/1.1" 404

Advertisements

Written by Rune

July 19, 2011 at 5:09 pm

Posted in hack