http://142.97.151.201:2086/scripts/command

albertg

Well-Known Member
PartnerNOC
Sep 4, 2002
61
0
156
Hello all,
Anyone got any idea what is this?

I am running a phpnuke site and i see this as the referrer .....i is hammering the site...

Any idea what is that?
 

feanor

Well-Known Member
Aug 13, 2001
835
0
316
More than likely somebody that knows you have a cpanel box is attempting to exploit something.
Perhaps Nick can elaborate on the potential consequences of going after that particular call?

I would route that IP to nowhere though, or block it at your router, until you know more.

2086 is the WHManager insecure port, so whatever is going on is probably intended for evil....
unless it's one of your employees.
:p
 

h2oski

Well-Known Member
Dec 12, 2001
68
0
306
seems to be just a cpanel bug :)

http://forums.cpanel.net/read.php?TID=3633