Tag Info

New answers tagged

2

The problem is that not all spam is meant to exploit anything. Spam can simply advertise or be a part of a phishing attempt (which isn't an exploit). The thing to see here is that the URLs attempt to hide where they go and what they do. THAT is the thing that determines the fact they they are trouble. If you wanted an automated way to deal with these URLs, ...


2

No, they are not invalid URLs and the URL themselves are not exploits. If they point to exploit files it's hard to tell. They are obfuscated URLs intended to avoid spam filters. If you try to ping, for example, 0x5B.15251742, you will see that the address is translated to 91.232.185.30. The rest of the URL is a hash, and probably there are a few files with ...


3

It appears that your server has been hacked, possibly through a web server running PHP software. The sendmail header contains the following incriminating line: X-PHP-Originating-Script: 0:eb.php indicating that the email is generated using a PHP script with filename eb.php. The 0 indicates that the script is executed by root user, which could mean that a ...



Top 50 recent answers are included