[caiu] Dificuldade de acesso ao site da receita federal
Bruno Bicalho
bruno.bicalho em usp.br
Sexta Junho 24 08:10:57 BRT 2011
Alguém sabe se há alguma relação entre essa história toda e as tentativas de
invasão abaixo?
81.88.23.11 - - [15/Jun/2011:21:42:38 -0300] "GET /admin/config.php
HTTP/1.1" 404 1832 "-" "Python-urllib/2.5"
81.88.23.11 - - [16/Jun/2011:10:26:20 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.5"
62.121.254.151 - - [16/Jun/2011:15:24:38 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
187.84.224.242 - - [16/Jun/2011:21:24:39 -0300] "GET
/blogeloi/wp-app.php/service HTTP/1.1" 301 367 "-" "-"
81.88.23.11 - - [16/Jun/2011:22:42:56 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.5"
80.149.82.242 - - [16/Jun/2011:23:34:52 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.4"
81.88.23.11 - - [17/Jun/2011:04:57:01 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.5"
173.9.166.41 - - [18/Jun/2011:10:45:53 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
85.25.131.109 - - [18/Jun/2011:16:36:43 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-"
"Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9) Gecko/2008052906
Firefox/3.0"
119.46.183.18 - - [21/Jun/2011:07:25:26 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
80.149.82.242 - - [21/Jun/2011:12:55:28 -0300] "GET /admin/config.php
HTTP/1.1" 301 356 "-" "Python-urllib/2.4"
62.121.254.151 - - [21/Jun/2011:23:48:02 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
81.218.234.8 - - [22/Jun/2011:13:19:32 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
113.53.253.171 - - [23/Jun/2011:15:43:45 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
62.121.254.151 - - [23/Jun/2011:16:49:57 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
112.216.127.22 - - [23/Jun/2011:17:43:46 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
62.121.144.194 - - [23/Jun/2011:19:35:19 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
211.44.49.33 - - [24/Jun/2011:01:43:35 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
202.157.182.15 - - [24/Jun/2011:00:01:58 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
217.149.139.40 - - [24/Jun/2011:02:40:38 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
119.46.183.18 - - [24/Jun/2011:04:56:26 -0300] "GET
/admin/Y-ivrrecording.php?php=info&ip=uname HTTP/1.1" 301 386 "-" "-"
Qual aplicação usa esse arquivo "Y-ivrrecording.php" ?
Saudações
Bruno Bicalho
Mais detalhes sobre a lista de discussão caiu