Well. Somebody at solix4.fiu.edu is an "3733t Hax0R d00d". I'm not impressed at their useless attempt at trying to get the password file on my server.

131.94.57.49 - - [01/Oct/2003:04:54:34 +0100] "GET /empeg/ HTTP/1.0" 200 17409 "-" "Mozilla/3.01Gold (Macintosh; I; 68K)"
131.94.57.49 - - [01/Oct/2003:04:54:34 +0100] "GET /images/spacer.gif HTTP/1.0" 200 49 "-" "Mozilla/3.01Gold (Macintosh; I; 68K)"
131.94.57.49 - - [01/Oct/2003:04:54:37 +0100] "GET /cgi-bin/phf?Qalias=x%0a/bin/cat%20/etc/passwd HTTP/1.0" 404 4460 "-" "Mozilla/3.01Gold (Macintosh; I; 68K)"

Oh well. Time to ignore that IP block.

Oh well. Time to ignore that IP block.

I think that you have a duty to report it to the admin. You know how .edu machines are often cracked themselves and used for launching attacks. The admin is probably blissfully unaware.


Technical Contact:
Maria-Rosa Drake
Associate Director
Florida International University
University Park Campus
Miami, FL 33199
UNITED STATES
(305) 348-2703
maria@fiu.edu

LOL.. That is at my school... I think may know who is as as well.. if it's who im thinking then they weren't trying to hack anyone.. just "prove" to someone else that that "exploit" was useless.

I could be wrong.

Edit: now that I think of it... the bastard could be using a proxy I setup for a friend on there. Time to setup pwd's ; (

-Greg

It wasn't me.

See, now here's why he gets no respect. He's not even an 31337 h@x0r!