Author: Paul, Posted: Sat Dec 22, 2007 4:45 pm Post subject: [WsIRT#1101] r57shell @ AS3340
Attack Alert Full Report: /r57shell_attack1101.html Changed status to confirmed attack.IP Converted: 195.56.146.224
dword = 3275264736
hex1 = 0xc33892e0
hex2 = 0xc3.0x38.0x92.0xe0
oct = 0303.070.0222.0340
Please remove this script, it is being used by criminals to take over remote web servers by injection. It gives them shell access.View CIDR AS3340 Report: http://www.cidr-report.org/cgi-bin/as-report?as=3340
"3340 | EU | ripencc | 1995-03-31 | DataNet Telecommunication Ltd."<br />
Extended information for AS3340:
State/Province:
Country: hu
Responsible Domain: datanet.hu
Abuse Email: abuse@datanet.hu
/r57shell_attack1101.html