[nsp-sec] neosploit server

[Tom Fischer]

Hi,

some neosploit (exploit toolkit) sites:

URL							neosploit version
hxxp://202.75.35.242/cgi-bin/in.cgi        		2.0.17
hxxp://58.65.239.3/cgi-bin/in.cgi        		2.0.7
hxxp://77.221.133.188/.sp/in.cgi            		2.0.17
hxxp://all-xxx-vogue.com/cgi-bin/in.cgi      		2.0.15
hxxp://mystabcounter.info/cgi-bin/in.cgi             	2.0.17
hxxp://safe-security-advisour.com/cgi-bin/in.cgi     	2.0.15
hxxp://spywaresafe.net/cgi-bin/in.cgi                	2.0.17
hxxp://superadultsex.net/cgi-bin/in.cgi              	2.0.17
hxxp://syblake.info/cgi-bin/in.cgi                   	2.0.14
hxxp://www.555traff.com/cgi-bin/in.cgi               	2.0.12
hxxp://www.555traff.net/cgi-bin/in.cgi               	2.0.12
hxxp://www.555traff.org/cgi-bin/in.cgi               	2.0.12
hxxp://www.911traff.info/cgi-bin/in.cgi              	2.0.12
hxxp://www.911traff.ws/cgi-bin/in.cgi                	2.0.12
hxxp://www.ollysfirstpage.com/cgi-bin/in.cgi         	2.0.17

all-xxx-vogue.com.      60      IN      A       58.65.239.74
mystabcounter.info.     60      IN      A       58.65.238.115
safe-security-advisour.com. 60  IN      A       216.246.31.236
spywaresafe.net.        60      IN      A       78.109.18.130
superadultsex.net.      60      IN      A       209.160.22.57
syblake.info.           60      IN      A       58.65.235.49
www.555traff.com.       60      IN      A       77.221.133.216
www.555traff.net.       60      IN      A       77.221.133.216
www.555traff.org.       60      IN      A       77.221.133.216
www.911traff.info.      60      IN      A       77.221.133.216
www.911traff.ws.        60      IN      A       77.221.133.216
www.ollysfirstpage.com. 60      IN      A       78.109.18.106

14361   | 209.160.22.57    | HOPONE-GLOBAL - HopOne Internet Corporation
17464   | 202.75.35.242    | TMIDC-AP Hosting Services (MYLOCA),
23352   | 216.246.31.236   | SERVERCENTRAL - Server Central Network
23898   | 58.65.235.49     | HOSTFRESH-AS-AP HostFresh Internet
27595   | 58.65.238.115    | INTERCAGE - InterCage, Inc.
27595   | 58.65.239.3      | INTERCAGE - InterCage, Inc.
27595   | 58.65.239.74     | INTERCAGE - InterCage, Inc.
30968   | 77.221.133.188   | DATAP-AS Infobox company network, hosting service provider,
30968   | 77.221.133.216   | DATAP-AS Infobox company network, hosting service provider,
41665   | 78.109.18.106    | HOSTING-AS National Hosting Provider, Hosting.UA
41665   | 78.109.18.130    | HOSTING-AS National Hosting Provider, Hosting.UA


Typical http communication looks like "/in.cgi?p=" ....


-- 
Tom Fischer
BFK edv-consulting GmbH                  tel: +49 721 962 01-1
Kriegsstr. 100, D-76133 Karlsruhe        fax: +49 721 962 01-99