Hacker and Zencart Help

Discussion in 'Databases' started by jonathon, May 21, 2009.

0
  1. #1
    Someones been trying for days to hack my zencart with this code, so far i been ok, as i have lock down zencart as much as i can, does anyone here know what this code below is trying to do?

    From IP:
    113.29.225.7
    65.98.80.2
    173.15.28.165
     
    jonathon, May 21, 2009 IP
  2. NodeGeek

    NodeGeek Banned

    Messages:
    213
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Looks to me like that code it trying to see how much space is available on on the HDD.
     
    NodeGeek, May 21, 2009 IP
  3. jestep

    jestep Prominent Member

    Messages:
    3,659
    Likes Received:
    215
    Best Answers:
    19
    Trophy Points:
    330
    #3
    It's a really simply script that shows some server stats and a hacked message.

    Most likely the person is not using this specifically to attempt to hack the server. This is simply what he's trying to leave behind.

    If you don't have it, it's probably a good idea to install mod_security, rkhunter, and other intrusion detection / prevention applications.
     
    jestep, May 21, 2009 IP
  4. jonathon

    jonathon Well-Known Member

    Messages:
    523
    Likes Received:
    18
    Best Answers:
    0
    Trophy Points:
    110
    #4
    Thank you, i will have to looking install them.

    by the way, this script was pull from the attacks own site, which i found in log files.
     
    jonathon, May 21, 2009 IP
  5. GarMart

    GarMart Peon

    Messages:
    5
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    due to the lack of posting the full code, all that i can see is the hacker is trying to check your data. the code are almost the same with C99shell or R57 shell
     
    GarMart, May 23, 2009 IP