Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke
Author Message
SpaceMonkey
Worker
Worker


Joined: Apr 30, 2005
Posts: 170

PostPosted: Mon Sep 19, 2005 4:14 pm Reply with quote

I got an e-mail from my site this morning. I'm not sure if Nuke did this or if it was NukeSentinel. Let me know..

This is what the e-mail said:
Quote:
Date & Time: 2005-09-19 14:31:31 EDT GMT -0400
Blocked IP: 85.185.59.163
User ID: Anonymous (1)
Reason: Abuse-Union
--------------------
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.02
Query String: thestaffroom.spacemonkey.net.au/modules.php?name=Top&querylang= WHERE 1=2 UNION ALL SELECT 1,pwd,1,1 FROM nuke_authors/*
Get String: thestaffroom.spacemonkey.net.au/modules.php?name=Top&querylang= WHERE 1=2 UNION ALL SELECT 1,pwd,1,1 FROM nuke_authors/*
Post String: thestaffroom.spacemonkey.net.au/modules.php
Forwarded For: 85.185.59.163
Client IP: none
Remote Address: 85.185.59.6
Remote Port: 62482
Request Method: GET


What's that all about? Can I e-mail this guys ISP? I tried a whois and it didn't work...

TIA
 
View user's profile Send private message Visit poster's website
sixonetonoffun
Spouse Contemplates Divorce


Joined: Jan 02, 2003
Posts: 2496

PostPosted: Mon Sep 19, 2005 4:26 pm Reply with quote

Only registered users can see links on this board! Get registered or login!

Reveals

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% Only registered users can see links on this board! Get registered or login!
% for more details.
%
% Rights restricted by copyright.
% See Only registered users can see links on this board! Get registered or login!

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '85.185.59.0 - 85.185.59.255'

inetnum: 85.185.59.0 - 85.185.59.255
netname: Respina
descr: Respina Networks & Beyond ,Internet Service Provider
country: IR
admin-c: PM6548-RIPE
tech-c: PM6548-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: AS12880-MNT
source: RIPE # Filtered

person: Pooyaun Masoumi
address: No. 19, Arak St., Gharani Ave., Tehran, Iran, Zip Code: 15989
phone: +98 21 8892 4363
e-mail: Only registered users can see links on this board! Get registered or login!
nic-hdl: PM6548-RIPE
source: RIPE # Filtered

% Information related to '85.185.0.0/16AS12880'

route: 85.185.0.0/16
descr: DCI-Route
origin: AS12880
mnt-by: AS12880-MNT
source: RIPE # Filtered

_________________
[b][size=5]openSUSE 11.4-x86 | Linux 2.6.37.1-1.2desktop i686 | KDE: 4.6.41>=4.7 | XFCE 4.8 | AMD Athlon(tm) XP 3000+ | MSI K7N2 Delta-L | 3GB Black Diamond DDR
| GeForce 6200@433Mhz 512MB | Xorg 1.9.3 | NVIDIA 270.30[/size:2b8 
View user's profile Send private message
SpaceMonkey
PostPosted: Mon Sep 19, 2005 4:39 pm Reply with quote

So this guy is from Iran??

Must be something to do wtih that Al Hekma school news I have..

Can anyone answer those other questions I had?
 
sixonetonoffun
PostPosted: Mon Sep 19, 2005 5:29 pm Reply with quote

You can try to send a copy to the abuse email listed there. Reason: Abuse-Union is a direct attempt to alter your database. It was stopped.
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©