CMS Attacks

Getting some really odd requests

[MatthewHSE]

This is going to break the layout of the board, but here it is anyway:

[mysite.com...]

I'm getting a lot of requests like that today (all 404's). They vary slightly,
but contain the same e-mail addresses toward the end and seem to be targetting
several popular CMS's.

They haven't gotten anywhere on my site, so I guess this post is just a "heads
up" for others about an attack attempt I haven't seen before. If you run a
common CMS, it might be a good idea to make sure it's up to date. This thing
really seems to be hitting hard.

And if anyone knows exactly what they're trying to do with this, I'd be
interested in hearing about it. It almost looks like they're trying to post
content or otherwise gain control of a CMS. But I don't know enough about
hacking to be able to tell for sure.

[edited by: physics at 4:05 am (utc) on June 17, 2006]
[edit reason] snipped specific ip addressses in urls [/edit]

[jalarie]

I pulled apart the URL and found this piece to be rather interesting:

[<ip...] address snipped>/~photo/cm

[edited by: physics at 4:06 am (utc) on June 17, 2006]
[edit reason] snipped specific ip addressses in urls [/edit]