fatihdurgut
Forum Replies Created
-
Forum: Everything else WordPress
In reply to: Am I being hacked?Hello guys,
You can find my logs below. As you can see something always requesting tags.js file. Is there anybody that knows the problem with it ?Thanks;
Fatih.#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2009-10-11 00:58:03
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2009-10-11 00:58:02 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 85.107.9.3 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+Trident/4.0;+GTB6;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2009-10-11 01:24:59
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2009-10-11 01:24:59 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 88.249.245.241 Mozilla/5.0+(Windows;+U;+Windows+NT+6.1;+tr;+rv:1.9.1.3)+Gecko/20090824+Firefox/3.5.3 200 0 0
2009-10-11 01:30:22 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 78.172.243.172 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+6.0;+Trident/4.0;+GTB6;+SLCC1;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30618) 200 0 0
2009-10-11 01:31:50 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 88.253.174.213 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1)+;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) 200 0 0
2009-10-11 01:31:59 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 88.241.95.60 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+6.0;+Trident/4.0;+GTB6;+SLCC1;+.NET+CLR+2.0.50727;+Media+Center+PC+5.0;+OfficeLiveConnector.1.3;+OfficeLivePatch.0.0;+.NET+CLR+3.5.30729;+InfoPath.2;+.NET+CLR+3.0.30729;+AskTB5.4) 200 0 0
2009-10-11 01:36:42 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 85.99.88.254 Mozilla/5.0+(Windows;+U;+Windows+NT+5.1;+en-US)+AppleWebKit/532.0+(KHTML,+like+Gecko)+Chrome/3.0.195.25+Safari/532.0 200 0 0
2009-10-11 01:38:21 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 124.115.0.165 Sosospider+(+https://help.soso.com/webspider.htm) 200 0 0
2009-10-11 01:41:14 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 65.55.110.96 Mozilla/4.0+(compatible;++MSIE+6.0;++Windows+NT+5.2;++SLCC1;++.NET+CLR+1.1.4322) 200 0 0
2009-10-11 01:46:56 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 65.55.110.239 Mozilla/4.0+(compatible;++MSIE+6.0;++Windows+NT+5.2;++SV1;++.NET+CLR+1.1.4322;++.NET+CLR+2.0.50727;++.NET+CLR+3.0.30729;++.NET+CLR+3.5.30707;++InfoPath.2) 200 0 0
2009-10-11 01:52:04 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 65.55.109.180 Mozilla/4.0+(compatible;++MSIE+6.0;++Windows+NT+5.2;++SLCC1;++.NET+CLR+1.1.4322;++.NET+CLR+2.0.40607;++.NET+CLR+3.0.30729;++.NET+CLR+3.5.30707) 200 0 0
2009-10-11 01:56:39 W3SVC1087 8.8.246.46 GET /tags.js – 80 – 94.123.113.240 Mozilla/5.0+(Windows;+U;+Windows+NT+6.0;+en-US)+AppleWebKit/532.0+(KHTML,+like+Gecko)+Chrome/3.0.195.25+Safari/532.0 200 0 0Forum: Everything else WordPress
In reply to: Am I being hacked?Hello
I guess i have the same problem, my host also suspend my blog because of a huge amout of CPU usage. Theh wrote;This domain was suspended as it was causing high usage with PHP process (php-cgi.exe) Your domain had 12 – 15 PHP processes running constantly for about 15 minutes. We continued to monitor with your domain still using a high amount of PHP resources.
Do you have any idea what is the reason of that problem ?
@homelandart
Could you please ask him which codes did he delete ?Thanks,
Fatih.