[tpm] web crash attempts

Tom Legrady legrady at gmail.com
Tue Mar 27 10:56:07 PDT 2018


I'm looking to make some improvements on a friend's web site, and came 
across some odd entries while looking at the apache log file. I get the 
impression these people aren't trying to improve the web. But what are 
they hoping to achieve?

The query URL changes, but the info about the query software remains the 
same.

178.32.200.116 - - [10/Mar/2018:14:21:23 -0800] "GET 
/?cmd=die('===!'.'==='); HTTP/1.1" 200 290 "-" "Mozilla/5.0 (Windows NT 
5.1; rv:32.0) Gecko/20100101 Firefox/32.0"

198.12.153.176 - - [13/Mar/2018:03:03:40 -0700] "GET 
/?cmd=die('===!'.'==='); HTTP/1.1" 200 290 "-" "Mozilla/5.0 (Windows NT 
5.1; rv:32.0) Gecko/20100101 Firefox/32.0"

168.144.187.20 - - [16/Mar/2018:09:17:35 -0700] "POST 
/?q=die('z!a'.'x');&w=die('z!a'.'x');&e=die('z!a'.'x');&r=die('z!a'.'x');&t=die('z!a'.'x');&y=die('z!a'.'x');&u=die('z!a'.'x');&i=die('z!a'.'x');&o=die('z!a'.'x');&p=die('z!a'.'x');&a=die('z!a'.'x');&s=die('z!a'.'x');&d=die('z!a'.'x');&f=die('z!a'.'x');&g=die('z!a'.'x');&h=die('z!a'.'x');&j=die('z!a'.'x');&k=die('z!a'.'x');&l=die('z!a'.'x');&z=die('z!a'.'x');&x=die('z!a'.'x');&c=die('z!a'.'x');&v=die('z!a'.'x');&b=die('z!a'.'x');&n=die('z!a'.'x');&m=die('z!a'.'x');&eval=die('z!a'.'x');&enter=die('z!a'.'x'); 
HTTP/1.1" 200 290 "-" "Mozilla/5.0 (Windows NT 5.1; rv:32.0) 
Gecko/20100101 Firefox/32.0"

193.104.35.105 - - [18/Mar/2018:15:04:43 -0700] "POST 
/?q=die('z!a'.'x');&w=die('z!a'.'x');&e=die('z!a'.'x');&r=die('z!a'.'x');&t=die('z!a'.'x');&y=die('z!a'.'x');&u=die('z!a'.'x');&i=die('z!a'.'x');&o=die('z!a'.'x');&p=die('z!a'.'x');&a=die('z!a'.'x');&s=die('z!a'.'x');&d=die('z!a'.'x');&f=die('z!a'.'x');&g=die('z!a'.'x');&h=die('z!a'.'x');&j=die('z!a'.'x');&k=die('z!a'.'x');&l=die('z!a'.'x');&z=die('z!a'.'x');&x=die('z!a'.'x');&c=die('z!a'.'x');&v=die('z!a'.'x');&b=die('z!a'.'x');&n=die('z!a'.'x');&m=die('z!a'.'x');&eval=die('z!a'.'x');&enter=die('z!a'.'x'); 
HTTP/1.1" 200 290 "-" "Mozilla/5.0 (Windows NT 5.1; rv:32.0) 
Gecko/20100101 Firefox/32.0"

Tom


More information about the toronto-pm mailing list