In the Beginning….

… God created the earth..

Then he created reglious hackers who try to break into your server:

50.22.36.34 - - [27/Jul/2013:06:03:54 +0100] "GET /cgi-bin/te/login.cgi HTTP/1.1" 404 294 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [27/Jul/2013:06:03:54 +0100] "GET /cgi-bin/te/wlogin.cgi HTTP/1.1" 404 295 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [27/Jul/2013:06:03:55 +0100] "GET /te3/signup.php HTTP/1.1" 404 288 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [27/Jul/2013:13:36:39 +0100] "GET /inxy/admin.php HTTP/1.1" 404 288 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [28/Jul/2013:18:12:48 +0100] "GET /streamrotator/admin.php HTTP/1.1" 404 297 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [28/Jul/2013:18:12:48 +0100] "GET /sr/admin.php HTTP/1.1" 404 286 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [28/Jul/2013:18:12:48 +0100] "GET /admin/admin.php HTTP/1.1" 404 289 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [28/Jul/2013:18:12:49 +0100] "GET /administrator/admin.php HTTP/1.1" 404 297 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [28/Jul/2013:18:12:49 +0100] "GET /sradmin/admin.php HTTP/1.1" 404 291 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [28/Jul/2013:18:12:49 +0100] "GET /adminsr/admin.php HTTP/1.1" 404 291 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [28/Jul/2013:18:12:49 +0100] "GET /admin.php HTTP/1.1" 403 287 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"
50.22.36.34 - - [28/Jul/2013:18:12:50 +0100] "GET /admin_sr/admin.php HTTP/1.1" 404 292 "http://tty.org.uk/" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0"

jwhois 50.22.36.34
[Cached]
[rwhois.softlayer.com]
%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.50.22.0.0/18
network:Auth-Area:50.22.0.0/18
network:Network-Name:SOFTLAYER-50.22.0.0
network:IP-Network:50.22.36.32/27
network:IP-Network-Block:50.22.36.32-50.22.36.63
network:Organization;I:THE GENERAL CONFERENCE OF SEVENTH DAY AD
network:Street-Address:SGAS 611 MODULO 75/76
network:City:Brasilia
network:State:DF
network:Postal-Code:70200-710
network:Country-Code:BR
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:gilnei.abreu@dsa.org.br
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2010-11-19 15:15:24
network:Updated:2011-04-03 18:07:41
network:Updated-By:ipadmin@softlayer.com

Oh well.. time to firewall them.

This entry was posted in Uncategorized. Bookmark the permalink.

2 Responses to In the Beginning….

  1. Fair Complexioned says:

    I agree ban them all but rules must be the same for everyone .

    • steve says:

      Oh I do – the firewall rules list is quite long. And by the way – don’t post comments with links to spam blogs – as you can see I edit them out

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.