Paul
CastleCops Founder
Joined: Feb 22, 2002
Posts: 27351
|
 Posted: Mon Dec 03, 2007 1:25 am Post subject: [WsIRT#331] C99Shell @AS3561 |
|
|
Attack Alert
Full Report:  /C99Shell_attack331.html
Changed status to confirmed attack.
IP Converted: 72.232.90.154
dword = 1223187098
hex1 = 0x48e85a9a
hex2 = 0x48.0xe8.0x5a.0x9a
oct = 0110.0350.0132.0232
Attackers are attempting to inject this script into exploitable web servers in order to have shell access to them. Please remove it.
View CIDR AS3561 Report: http://www.cidr-report.org/cgi-bin/as-report?as=3561
"3561 | US | arin | 1998-10-07 | SAVVIS - Savvis"<br />
Extended information for AS3561:
State/Province: nc
Country: us
Responsible Domain: savvis.net
Abuse Email: abuse@savvis.net
| Quote: | | http://unixsolution.com.br/insecure/priv8/c99.txt? |
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
