[caiu] Dificuldade de acesso ao site da receita federal

Bruno Bicalho bruno.bicalho em usp.br
Sexta Junho 24 08:10:57 BRT 2011


Alguém sabe se há alguma relação entre essa história toda e as tentativas de
invasão abaixo?

81.88.23.11 - - [15/Jun/2011:21:42:38 -0300] "GET /admin/config.php
HTTP/1.1" 404 1832 "-" "Python-urllib/2.5"

81.88.23.11 - - [16/Jun/2011:10:26:20 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.5"

62.121.254.151 - - [16/Jun/2011:15:24:38 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

187.84.224.242 - - [16/Jun/2011:21:24:39 -0300] "GET
/blogeloi/wp-app.php/service HTTP/1.1" 301 367 "-" "-"

81.88.23.11 - - [16/Jun/2011:22:42:56 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.5"

80.149.82.242 - - [16/Jun/2011:23:34:52 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.4"

81.88.23.11 - - [17/Jun/2011:04:57:01 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.5"

173.9.166.41 - - [18/Jun/2011:10:45:53 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

85.25.131.109 - - [18/Jun/2011:16:36:43 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-"
"Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906
Firefox/3.0"

119.46.183.18 - - [21/Jun/2011:07:25:26 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

80.149.82.242 - - [21/Jun/2011:12:55:28 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.4"

62.121.254.151 - - [21/Jun/2011:23:48:02 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

81.218.234.8 - - [22/Jun/2011:13:19:32 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

113.53.253.171 - - [23/Jun/2011:15:43:45 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

62.121.254.151 - - [23/Jun/2011:16:49:57 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

112.216.127.22 - - [23/Jun/2011:17:43:46 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

62.121.144.194 - - [23/Jun/2011:19:35:19 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

211.44.49.33 - - [24/Jun/2011:01:43:35 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

202.157.182.15 - - [24/Jun/2011:00:01:58 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

217.149.139.40 - - [24/Jun/2011:02:40:38 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"

119.46.183.18 - - [24/Jun/2011:04:56:26 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"


Qual aplicação usa esse arquivo "Y-ivrrecording.php" ?


Saudações

Bruno Bicalho


Mais detalhes sobre a lista de discussão caiu