MOON
Server: Apache
System: Linux smtp.modiva.org 3.10.0-862.14.4.el7.x86_64 #1 SMP Wed Sep 26 15:12:11 UTC 2018 x86_64
User: rtbrisc (1005)
PHP: 8.1.34
Disabled: NONE
$ pwd: /home/rtbrisc/results/
Upload Files
File: /home/rtbrisc/results/ipscan_hits.txt
147.91.64.187 | http://147.91.64.187/phpinfo.php
http://50.116.95.145:2082 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://50.116.95.145:2087
http://69.65.51.203 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://69.65.51.203:2087
54.69.173.3 | http://54.69.173.3/.htpasswd
5.135.164.135 | http://5.135.164.135/server-status
http://173.231.207.32 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess8260240272 [dynamic], payload:sniper) — stage4 inconclus | https://173.231.207.32:2087
http://192.254.156.122 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://192.254.156.122:2087
http://162.240.158.156 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://162.240.158.156:2087
@ Telegram