Paul
CastleCops Founder
Joined: Feb 22, 2002
Posts: 27351
|
 Posted: Mon Dec 03, 2007 1:08 am Post subject: [WsIRT#139] C99Shell, r57shell @AS26101 |
|
|
Attack Alert
Full Report:  /C99Shell_r57shell_attack139.html
Changed status to confirmed attack.
IP Converted: 66.218.77.68
dword = 1121602884
hex1 = 0x42da4d44
hex2 = 0x42.0xda.0x4d.0x44
oct = 0102.0332.0115.0104
View CIDR AS2610 Report: http://www.cidr-report.org/cgi-bin/as-report?as=2610
"2610 | EU | ripencc | 1993-09-01 | EUnet/SI Autonomous system"<br />
Extended information for AS2610:
State/Province:
Country:
Responsible Domain:
Abuse Email:
These scripts are being injected into exploitable web servers permitted criminals to have shell access. Please remove immediately.
View CIDR AS26101 Report: http://www.cidr-report.org/cgi-bin/as-report?as=26101
"26101 | US | arin | 2002-07-05 | YAHOO-3 - Yahoo!"<br />
Extended information for AS26101:
State/Province: ca
Country: us
Responsible Domain: yahoo-inc.com
Abuse Email: security@yahoo-inc.com
| Quote: | | http://www.geocities.com/x024_mind/c99.txt? |
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
