I joined here today becuase i dont know who to tell about what has
happened, and what i feel is a catastrophic occurrence. I logged into
my site this morning and there was a scrolling banner on my sites
content: you have been hacked by (xxx). i forgot the name of it, at any
rate, i searched my logs and was shocked to see who had been in my
admin on that morning. i am pasting the log:
Host: 66.249.66.40
/robots.txt
Http Code: 200 Date: Jan 18 04:59:15 Http Version: HTTP/1.1 Size in
Bytes: 225
Referer: -
Agent: Mediapartners-Google/2.1
|
|
|
/admin.php
Http Code: 200 Date: Jan 18 04:59:16 Http Version: HTTP/1.1 Size in
Bytes: 28334
Referer: -
Agent: Mediapartners-Google/2.1
|
|
|
/admin.php?op=hreferer
Http Code: 200 Date: Jan 18 04:59:49 Http Version: HTTP/1.1 Size in
Bytes: 28334
Referer: -
Agent: Mediapartners-Google/2.1
|
|
|
/admin.php?op=mod_authors
Http Code: 200 Date: Jan 18 05:00:05 Http Version: HTTP/1.1 Size in
Bytes: 28334
Referer: -
Agent: Mediapartners-Google/2.1
|
|
|
/admin.php?op=deladmin&del_aid=power
Http Code: 200 Date: Jan 18 05:00:14 Http Version: HTTP/1.1 Size in
Bytes: 28334
Referer: -
Agent: Mediapartners-Google/2.1
|
|
|
/admin.php?op=deletemsg&mid=5
Http Code: 200 Date: Jan 18 05:00:43 Http Version: HTTP/1.1 Size in
Bytes: 28334
Referer: -
Agent: Mediapartners-Google/2.1
i contacted my server admin, who done the upgrade on php-nuke for me,
as you need ssh and i am on a shared server. i then sent an email to
google to let them know this had occurred, and as of yet, they have not
even acknowledged receipt of the notice. there is no mention of this
type of activity on the net, as i have searched the big 3 SEs. if
somebody in here knows or can help me get the word spread about this,
that google needs to take a look at what is going on with that IP and
the media bot.
