[WsIRT#1017] MyShell @AS19166

CastleCops -> WsIRT Reports

Author: Paul PostPosted: Tue Dec 18, 2007 3:03 am    Post subject: [WsIRT#1017] MyShell @AS19166

Attack Alert
 
 Full Report: CastleCops Link/MyShell_attack1017.html
 
 Changed status to confirmed attack.
IP Converted: 64.72.112.89

dword = 1078489177
hex1 = 0x40487059
hex2 = 0x40.0x48.0x70.0x59
oct = 0100.0110.0160.0131

Criminals are attempting to inject this script into remote webservers which if successful gives them control and permits them to do nefarious things. Please remove it immediately.
View CIDR AS19166 Report: http://www.cidr-report.org/cgi-bin/as-report?as=19166

"19166 | US | arin | 2005-05-31 | ALPHARED-HOUSTON - Alpha Red, INC"<br />

Extended information for AS19166:
State/Province: tx
Country: us
Responsible Domain: alphared.com
Abuse Email: james@alphared.com

Quote:
http://makebuy.50webs.com/admin.php



CastleCops -> WsIRT Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group