Sekali lagi blog ni kena hack. Aku dah clearkan dan tukar password supaya tak kena lagi. Dan dah lama disable Frontpage extension sebab frontpage memang ada security issue dengan Cpanel.
Kali ini injection bukan inject pada fail index* tapi fail *.js.
Datang dari IP 94.32.66.150
[root@Squid ~]# whois 94.32.66.150
[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: This output has been filtered.
%Â Â Â Â Â Â To receive output for a database update, use the “-B” flag.
% Information related to ‘94.32.64.0 – 94.32.79.255’
inetnum:Â Â Â Â Â Â Â 94.32.64.0 – 94.32.79.255
netname:Â Â Â Â Â Â Â TISCALINET-DATACENTER
descr:Â Â Â Â Â Â Â Â Â Tiscali SpA
descr:Â Â Â Â Â Â Â Â Â Internet Service Provider
country:Â Â Â Â Â Â Â IT
admin-c:Â Â Â Â Â Â Â PC2538-RIPE
tech-c:Â Â Â Â Â Â Â Â PC2538-RIPE
remarks:Â Â Â Â Â Â Â ——————————————————–
remarks:
remarks:Â Â Â Â Â Â Â Regarding spam and/or abuse complaints please report to:
remarks:Â Â Â Â Â Â Â abuse@tiscali.it
remarks:
remarks:Â Â Â Â Â Â Â !! ALL EMAILS REGARDING SPAM AND/OR ABUSEÂ COMPLAINTS !!
remarks:       !!         SENT TO AN OTHER EMAIL ADDRESS THAN      !!
remarks:       !!                   abuse@tiscali.it               !!
remarks:       !!     WILL BE IGNORED AND TREATED AS SPAM BY US !  !!
remarks:
remarks:Â Â Â Â Â Â Â ——————————————————–
status:Â Â Â Â Â Â Â Â ASSIGNED PA
mnt-by:Â Â Â Â Â Â Â Â AS8612-MNT
source:Â Â Â Â Â Â Â Â RIPE # Filtered
person:Â Â Â Â Â Â Â Â Paolo Caocci
address:Â Â Â Â Â Â Â Tiscali Italia SpA
address:Â Â Â Â Â Â Â SS. 195 Km. 2,300
address:Â Â Â Â Â Â Â 09122 Cagliari
address:Â Â Â Â Â Â Â Sardinia – Italy
remarks:Â Â Â Â Â Â Â Network Engineer
phone:Â Â Â Â Â Â Â Â Â +39 070 46011
fax-no:Â Â Â Â Â Â Â Â +39 070 4609115
e-mail:Â Â Â Â Â Â Â Â pcaocci@it.tiscali.com
nic-hdl:Â Â Â Â Â Â Â PC2538-RIPE
source:Â Â Â Â Â Â Â Â RIPE # Filtered
% Information related to ‘94.32.0.0/13AS8612’
route:Â Â Â Â Â Â Â Â Â 94.32.0.0/13
descr:Â Â Â Â Â Â Â Â Â Tiscali Italia SpA
origin:Â Â Â Â Â Â Â Â AS8612
mnt-by:Â Â Â Â Â Â Â Â AS8612-MNT
source:Â Â Â Â Â Â Â Â RIPE # Filtered
adus kene inject pulak 😀
94.32.0.0/13 # Manually denied – Mon Oct 11 10:55:23 2010