Apache test page hacked

[Karsten 'quaid' Wade]

On Mon, 2008-06-23 at 23:58 -0600, Kristina&James Bykowy wrote:
> It appears your Apache test webpage has been hacked by phishers.  I
> got an email asking a question about an eBay item I didn't list, and
> the link in the email pointed me to
> http://202.22.202.100/icons/small/ps1.gif/singin.ebay.com/ws/ebayISPP.dll/......
>  
> Looks like they created a folder in icons/small called ps1.gif and set
> up shop in there.  Microsoft already seems to know this is a phishing
> website, so you may have been contacted by them already, but who knows
> how fast they move.
>  
> In any case, you may wanna check out your site.

That is actually just a test page that is shipped with Apache in the
Fedora OS:

https://fedoraproject.org/wiki/Server_Test_Page

You need to do a WHOIS lookup to find out who actually owns/controls
that IP address.

- 
Karsten Wade, Sr. Developer Community Mgr.
Dev Fu : http://developer.redhatmagazine.com
Fedora : http://quaid.fedorapeople.org
gpg key : AD0E0C41
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.fedoraproject.org/pipermail/websites/attachments/20080624/52fbb479/attachment.sig>