http://isc.sans.org/diary.php?storyid=954 In addition there is a scan for index2.php (mambo?) that tries to install an irc bot that appears to be linux specific. -- Our DNSRBL - Eliminate Spam: http://www.TQMcube.com/spam_trap.php Multi-RBL Check: http://www.TQMcube.com/rblcheck.php Zombie Graphs: http://www.TQMcube.com/zombies.php GeoGraphics: http://www.TQMcube.com/origins.php