The big PHP hack that AI found and hackers exploited

Any and all news related to SpaceSimCentral.com will be posted here. If you have any issues, gripes, complaints or recommendations please post them here. I should be able to get to your post/issue with 24-48hrs.
Post Reply
User avatar
sscadmin
Private
Posts: 8098
Joined: Sun Sep 04, 2016 1:08 am

The big PHP hack that AI found and hackers exploited

Post by sscadmin »

This happened this past week, as far as I can tell from the logs the site is fine no issues. I did update all PHP that the site uses and it has the fixes for the recent hacks to PHP that brought a lot of government and big websites down until they were patched. The vulnerability allowed hackers to basically get remote access to your server.... so kind of nasty and its been in php for a long time but AI found it and hackers took advantage of it.

Two vulnerabilities are CVE-2026-109618 and CVE-2026-109619, so if you haven't patched any of your websites that use PHP you might want to.
potentially let an unauthenticated remote attacker execute code on a vulnerable PHP server. The flaws involve PHP's memory handling during request processing.
User avatar
sscadmin
Private
Posts: 8098
Joined: Sun Sep 04, 2016 1:08 am

Re: The big PHP hack that AI found and hackers exploited

Post by sscadmin »

I posted last night and this morning i couldn't login to the site i was getting a 504 error, thanks to ChatGPT we figured out why:

Processes active: 50, idle: 0
Requests: 1120110
Traffic: 21.50req/sec

All of this from:

Source of IP Range 47.79.200.x to 47.79.207.x

The IP range 47.79.200.x through 47.79.207.x is associated with Alibaba (US) Technology Co., Ltd. This indicates that the IP addresses within this range are likely originating from a data center operated by Alibaba in the United States.
Key Details

Organization: Alibaba (US) Technology Co., Ltd.
Location: United States
Usage: Data center operations

This information suggests that any traffic or services coming from this IP range are managed by Alibaba's infrastructure in the U.S.

-----------------------------

I blocked the entire range.... this is getting crazy... bots!
Post Reply

Return to “SSC Administration”