Our site got hacked

1 pointsby mcnet11 yıl önce0 comments

WordPress installation was hacked via the DZS Video Gallery plugin. Below are the related records from the web access logs:

104.224.45.87 - - [16/Jun/2015:04:31:05 -0400] "GET /wp-content/plugins/dzs-videogallery/ HTTP/1.1" 200 4697 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36" 0 0 "off:-:-" 395 265651 104.224.45.87 - - [16/Jun/2015:04:31:34 -0400] "POST /wp-content/plugins/dzs-videogallery/admin/upload.php HTTP/1.1" 200 223 "-" "-" 0 0 "off:-:-" 861 613994 104.224.45.87 - - [16/Jun/2015:04:39:33 -0400] "POST /wp-content/plugins/dzs-videogallery/admin/upload/jpg.php HTTP/1.1" 200 35505 "http://firmre.biz/wp-content/plugins/dzs-videogallery/admin/upload/jpg.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36" 0 0 "off:-:-" 9255 439490

0 comments

—