• i got this email fro hosting provider

    We have put the following content into quarantine as we believe it contains viruses or other malicious code. If you feel this has been in error and
    your file is false-positive (innocent), please submit a ticket to us at https://support.namecheap.com/index.php?/Tickets/Submit or contact
    the Live Help at http://www.namecheap.com/support/livesupport.aspx and we will be happy to assist:

    ‘(compressed file: wp-ajax.php [depth: 1])[PHP Obfuscation Exploit [P0876]]’: /home/xxxx/public_html/wp-content/uploads/2015/11/wp-db-ajax-made.zip

    ‘[PHP Obfuscation Exploit [P0374]]’: /home/xxxx/public_html/wp-content/plugins/wp-db-ajax-made/pas.php

    ‘[PHP Obfuscation Exploit [P0876]]’: /home/xxxx/public_html/wp-content/plugins/wp-db-ajax-made/wp-ajax.php

    ‘ClamAV detected virus = [PHP.Shell-84]’: /home/xxxx/public_html/wp-content/themes/twentythirteen/wp-ajax.php

    then i got another email

    We have put the following content into quarantine as we believe it contains viruses or other malicious code. If you feel this has been in error and
    your file is false-positive (innocent), please submit a ticket to us at https://support.namecheap.com/index.php?/Tickets/Submit or contact
    the Live Help at http://www.namecheap.com/support/livesupport.aspx and we will be happy to assist:

    ‘[PHP Upload Exploit]’: /home/xxxx/public_html/wp-content/themes/novavideo/404.php
    ‘[PHP Upload Exploit]’: /home/xxxx/public_html/wp-content/themes/novavideo/_admin/functions.php

Viewing 1 replies (of 1 total)
  • One of my website got hacked one again. Almost all php files have a malignus code on top.
    But I don’t have that theme..
    It seems started from /wp-content/plugins/wp-db-ajax-made/wp-ajax.php file
    here a slice of my website log:

    158.69.24.81 - - [29/Nov/2015:18:52:21 +0100] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 200 398
    158.69.24.81 - - [29/Nov/2015:18:52:22 +0100] "POST /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 200 3746
    158.69.24.81 - - [29/Nov/2015:18:52:23 +0100] "POST /wp-content/uploads/2014/css.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:52:23 +0100] "POST /wp-content/ngg/modules/photocrati-nextgen_pro_thumbnail_grid/templates/ini.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:52:24 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_thumbnail_grid/user.php HTTP/1.1" 404 6538
    158.69.24.81 - - [29/Nov/2015:18:52:25 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/res/css/alias.php HTTP/1.1" 404 6480
    158.69.24.81 - - [29/Nov/2015:18:52:26 +0100] "POST /wp-content/gallery/camere/cache.php HTTP/1.1" 200 333
    158.69.24.81 - - [29/Nov/2015:18:52:27 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_lightbox/adapter.nextgen_pro_lightbox_ajax.php HTTP/1.1" 500 260
    158.69.24.81 - - [29/Nov/2015:18:52:28 +0100] "POST /wp-content/plugins/wp-mail-bank/assets/images/include.php HTTP/1.1" 404 6481
    158.69.24.81 - - [29/Nov/2015:18:52:29 +0100] "POST /wp-content/plugins/wpml-translation-management/res/js/include.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:52:30 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/galleria/templates/article.php HTTP/1.1" 404 6480
    158.69.24.81 - - [29/Nov/2015:18:52:31 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_albums/static/search.php HTTP/1.1" 404 6480
    23.238.20.113 - - [29/Nov/2015:18:52:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2205
    158.69.24.81 - - [29/Nov/2015:18:52:32 +0100] "POST /wp-content/plugins/wpml-translation-management/menu/ajax.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:52:33 +0100] "POST /wp-includes/functions.php HTTP/1.1" 500 260
    158.69.24.81 - - [29/Nov/2015:18:52:33 +0100] "POST /wp-content/gallery.php HTTP/1.1" 404 6481
    158.69.24.81 - - [29/Nov/2015:18:52:35 +0100] "POST /wp-content/plugins/wpml-translation-management/page.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:52:35 +0100] "POST /wp-content/themes/________sohohotel/page-templates/template-left-sidebar.php HTTP/1.1" 404 6480
    158.69.24.81 - - [29/Nov/2015:18:52:36 +0100] "POST /wp-content/themes/sohohotel/comments.php HTTP/1.1" 500 260
    158.69.24.81 - - [29/Nov/2015:18:52:37 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_lightbox_legacy/adapter.pro_lightbox_mapper.php HTTP/1.1" 500 260
    158.69.24.81 - - [29/Nov/2015:18:52:38 +0100] "POST /wp-includes/Text/Diff/Engine/native.php HTTP/1.1" 200 304
    158.69.24.81 - - [29/Nov/2015:18:52:39 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/lang-data.php HTTP/1.1" 200 303
    158.69.24.81 - - [29/Nov/2015:18:52:39 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_captions/test.php HTTP/1.1" 404 6480
    158.69.24.81 - - [29/Nov/2015:18:52:41 +0100] "POST /wp-includes/wp-diff.php HTTP/1.1" 200 303
    158.69.24.81 - - [29/Nov/2015:18:52:41 +0100] "POST /wp-content/plugins/contact-form-7/modules/count.php HTTP/1.1" 500 260
    158.69.24.81 - - [29/Nov/2015:18:52:42 +0100] "POST /wp-content/themes/________sohohotel/functions/shortcodes/video.php HTTP/1.1" 404 6481
    158.69.24.81 - - [29/Nov/2015:18:52:43 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_i18n/lang/object.php HTTP/1.1" 404 6480
    158.69.24.81 - - [29/Nov/2015:18:52:44 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_proofing/system.php HTTP/1.1" 404 6480
    158.69.24.81 - - [29/Nov/2015:18:52:46 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/galleria/admin.php HTTP/1.1" 404 6480
    158.69.24.81 - - [29/Nov/2015:18:52:47 +0100] "POST /header.php HTTP/1.1" 404 6480
    158.69.24.81 - - [29/Nov/2015:18:52:48 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/start.php HTTP/1.1" 404 6480
    158.69.24.81 - - [29/Nov/2015:18:52:49 +0100] "POST /wp-includes/compat.php HTTP/1.1" 200 303
    158.69.24.81 - - [29/Nov/2015:18:52:50 +0100] "POST /wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 200 303
    158.69.24.81 - - [29/Nov/2015:18:52:50 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_lightbox_legacy/adapter.image_protection_routes.php HTTP/1.1" 500 260
    158.69.24.81 - - [29/Nov/2015:18:52:51 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/wpml-config/wpml-config.class.php HTTP/1.1" 500 260
    158.69.24.81 - - [29/Nov/2015:18:52:52 +0100] "POST /wp-content/plugins/quitenicebooking/views/accommodation.htm.php HTTP/1.1" 200 336
    158.69.24.81 - - [29/Nov/2015:18:52:53 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/mobile-detect.php HTTP/1.1" 200 303
    158.69.24.81 - - [29/Nov/2015:18:52:53 +0100] "POST /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 200 10015
    158.69.24.81 - - [29/Nov/2015:18:52:54 +0100] "POST /wp-content/themes/twentythirteen/sidebar.php HTTP/1.1" 403 453
    158.69.24.81 - - [29/Nov/2015:18:52:55 +0100] "POST /wp-content/themes/twentythirteen/content-chat.php HTTP/1.1" 403 455
    158.69.24.81 - - [29/Nov/2015:18:52:55 +0100] "POST /wp-includes/pomo/mo.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:52:56 +0100] "POST /wp-content/themes/twentyfourteen/inc/back-compat.php HTTP/1.1" 403 462
    158.69.24.81 - - [29/Nov/2015:18:52:57 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/inc/wpml-post-comments.class.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:52:57 +0100] "POST /wp-content/themes/sohohotel/functions/shortcodes/message.php HTTP/1.1" 403 467
    158.69.24.81 - - [29/Nov/2015:18:52:58 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/inc/query-filtering/wpml-404-guess.class.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:52:59 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/Twig/Markup.php HTTP/1.1" 403 473
    158.69.24.81 - - [29/Nov/2015:18:52:59 +0100] "POST /wp-content/plugins/?_wordfence/lib/menu_passwd.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:53:00 +0100] "POST /wp-includes/SimplePie/Item.php HTTP/1.1" 403 447
    158.69.24.81 - - [29/Nov/2015:18:53:00 +0100] "POST /wp-content/themes/sohohotel/functions/shortcodes/dropcap.php HTTP/1.1" 403 466
    158.69.24.81 - - [29/Nov/2015:18:53:01 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/url-handling/wpml-lang-subdir-converter.class.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:02 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/classes/class-wpml-twig.php HTTP/1.1" 403 476
    158.69.24.81 - - [29/Nov/2015:18:53:02 +0100] "POST /wp-content/plugins/wordpress-seo/vendor/autoload.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:03 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/Twig/Filter.php HTTP/1.1" 403 472
    158.69.24.81 - - [29/Nov/2015:18:53:03 +0100] "POST /wp-includes/revision.php HTTP/1.1" 403 441
    158.69.24.81 - - [29/Nov/2015:18:53:04 +0100] "POST /wp-content/themes/sohohotel/single-default.php HTTP/1.1" 403 459
    158.69.24.81 - - [29/Nov/2015:18:53:05 +0100] "POST /start.php HTTP/1.1" 403 428
    158.69.24.81 - - [29/Nov/2015:18:53:05 +0100] "POST /wp-content/plugins/wpml-string-translation/res/img/db.php HTTP/1.1" 403 467
    158.69.24.81 - - [29/Nov/2015:18:53:06 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/inc/installer/locale/help.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:53:06 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/quote/plugin.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:07 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/installer/locale/sql.php HTTP/1.1" 403 479
    158.69.24.81 - - [29/Nov/2015:18:53:08 +0100] "POST /wp-content/themes/twentyfifteen/js/admin.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:08 +0100] "POST /wp-includes/images/smilies/dump.php HTTP/1.1" 403 447
    158.69.24.81 - - [29/Nov/2015:18:53:09 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/query-filtering/option.php HTTP/1.1" 403 479
    158.69.24.81 - - [29/Nov/2015:18:53:10 +0100] "POST /wp-content/plugins/wp-mail-bank/assets/db.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:10 +0100] "POST /wp-content/uploads/2015/04/option.php HTTP/1.1" 403 451
    158.69.24.81 - - [29/Nov/2015:18:53:11 +0100] "POST /wp-content/themes/sohohotel/images/prettyPhoto/template.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:11 +0100] "POST /wp-content/gallery/camere/dynamic/defines.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:12 +0100] "POST /wp-content/themes/twentyfourteen/images/blog.php HTTP/1.1" 403 460
    158.69.24.81 - - [29/Nov/2015:18:53:13 +0100] "POST /wp-content/themes/twentythirteen/genericons/font/system.php HTTP/1.1" 403 465
    158.69.24.81 - - [29/Nov/2015:18:53:13 +0100] "POST /wp-content/plugins/wordpress-seo/js/header.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:14 +0100] "POST /wp-content/plugins/?_wordfence/images/config.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:53:15 +0100] "POST /wp-content/plugins/?_contact-form-7/error.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:53:15 +0100] "POST /wp-content/uploads/2014/css.php HTTP/1.1" 200 1140
    158.69.24.81 - - [29/Nov/2015:18:53:16 +0100] "POST /wp-content/themes/sohohotel/page-templates/template-homepage-1.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:17 +0100] "POST /wp-content/plugins/?_contact-form-7/modules/jetpack.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:53:17 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/inc/widgets/icl-language-switcher.class.php HTTP/1.1" 200 303
    158.69.24.81 - - [29/Nov/2015:18:53:18 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/icl_api.php HTTP/1.1" 403 471
    158.69.24.81 - - [29/Nov/2015:18:53:19 +0100] "POST /wp-content/plugins/hello.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:19 +0100] "POST /wp-content/plugins/cookie-law-info/cookie-law-info.php HTTP/1.1" 403 455
    158.69.24.81 - - [29/Nov/2015:18:53:20 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/request-handling/wpml-request.class.php HTTP/1.1" 403 483
    158.69.24.81 - - [29/Nov/2015:18:53:20 +0100] "POST /wp-content/plugins/quitenicebooking/includes/datepicker_translations.php HTTP/1.1" 403 478
    158.69.24.81 - - [29/Nov/2015:18:53:21 +0100] "POST /wp-content/plugins/wordpress-seo/inc/class-wpseo-meta.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:22 +0100] "POST /wp-config-sample.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:22 +0100] "POST /wp-content/plugins/quitenicebooking/includes/quitenicebooking_booking_block_post.class.php HTTP/1.1" 403 480
    158.69.24.81 - - [29/Nov/2015:18:53:23 +0100] "POST /wp-includes/l10n.php HTTP/1.1" 403 441
    158.69.24.81 - - [29/Nov/2015:18:53:24 +0100] "POST /themes.php HTTP/1.1" 403 429
    158.69.24.81 - - [29/Nov/2015:18:53:24 +0100] "POST /wp-content/plugins/?_nextgen-gallery-pro/modules/cheque/cache.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:53:25 +0100] "POST /wp-includes/js/tinymce/plugins/wordpress/info.php HTTP/1.1" 403 462
    158.69.24.81 - - [29/Nov/2015:18:53:25 +0100] "POST /wp-content/plugins/wordpress-seo/vendor/list.php HTTP/1.1" 403 458
    158.69.24.81 - - [29/Nov/2015:18:53:26 +0100] "POST /wp-content/gallery/asolo/functions.php HTTP/1.1" 403 453
    158.69.24.81 - - [29/Nov/2015:18:53:27 +0100] "POST /wp-content/uploads/2014/01/proxy.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:27 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/request-handling/ini.php HTTP/1.1" 403 477
    158.69.24.81 - - [29/Nov/2015:18:53:28 +0100] "POST /wp-content/plugins/nextgen-gallery/pope/lib/press.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:28 +0100] "POST /wp-includes/js/imgareaselect/dir.php HTTP/1.1" 403 450
    158.69.24.81 - - [29/Nov/2015:18:53:29 +0100] "POST /wp-includes/js/tinymce/plugins/wordpress/utf.php HTTP/1.1" 403 460
    158.69.24.81 - - [29/Nov/2015:18:53:30 +0100] "POST /wp-content/plugins/wp-mail-bank/assets/css/font/inc.php HTTP/1.1" 403 465
    158.69.24.81 - - [29/Nov/2015:18:53:30 +0100] "POST /wp-content/plugins/wordpress-seo/frontend/file.php HTTP/1.1" 403 460
    158.69.24.81 - - [29/Nov/2015:18:53:31 +0100] "POST /wp-content/uploads/2015/06/page.php HTTP/1.1" 403 451
    158.69.24.81 - - [29/Nov/2015:18:53:31 +0100] "POST /wp-content/ngg/modules/photocrati-nextgen_pro_thumbnail_grid/templates/ini.php HTTP/1.1" 200 979
    158.69.24.81 - - [29/Nov/2015:18:53:32 +0100] "POST /wp-content/plugins/quitenicebooking/views/error.htm.php HTTP/1.1" 403 466
    158.69.24.81 - - [29/Nov/2015:18:53:33 +0100] "POST /wp-content/plugins/contact-form-7/modules/date.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:33 +0100] "POST /wp-includes/link-template.php HTTP/1.1" 403 446
    158.69.24.81 - - [29/Nov/2015:18:53:34 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/url-handling/wpml-slug-filter.class.php HTTP/1.1" 403 484
    158.69.24.81 - - [29/Nov/2015:18:53:35 +0100] "POST /wp-content/plugins/wordpress-seo/vendor/autoload_52.php HTTP/1.1" 403 466
    158.69.24.81 - - [29/Nov/2015:18:53:35 +0100] "POST /wp-content/plugins/akismet/views/start.php HTTP/1.1" 403 456
    158.69.24.81 - - [29/Nov/2015:18:53:36 +0100] "POST /wp-content/plugins/?_contact-form-7/modules/akismet.php HTTP/1.1" 200 303
    158.69.24.81 - - [29/Nov/2015:18:53:37 +0100] "POST /wp-includes/capabilities.php HTTP/1.1" 403 445
    158.69.24.81 - - [29/Nov/2015:18:53:37 +0100] "POST /wp-content/themes/sohohotel/single.php HTTP/1.1" 403 451
    158.69.24.81 - - [29/Nov/2015:18:53:38 +0100] "POST /diff.php HTTP/1.1" 403 428
    158.69.24.81 - - [29/Nov/2015:18:53:38 +0100] "POST /wp-content/themes/sohohotel/functions/widgets/start.php HTTP/1.1" 403 464
    158.69.24.81 - - [29/Nov/2015:18:53:39 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_horizontal_filmstrip/session.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:40 +0100] "POST /wp-content/uploads/2014/03/blog.php HTTP/1.1" 403 451
    158.69.24.81 - - [29/Nov/2015:18:53:40 +0100] "POST /wp-includes/js/crop/dir.php HTTP/1.1" 403 444
    158.69.24.81 - - [29/Nov/2015:18:53:41 +0100] "POST /wp-content/plugins/?_contact-form-7/includes/js/admin.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:53:41 +0100] "POST /wp-content/plugins/?_nextgen-gallery-pro/modules/object.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:53:42 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/post-menus/title.php HTTP/1.1" 403 474
    158.69.24.81 - - [29/Nov/2015:18:53:43 +0100] "POST /wp-includes/js/tinymce/plugins/wplink/sql.php HTTP/1.1" 403 458
    158.69.24.81 - - [29/Nov/2015:18:53:43 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_film/press.php HTTP/1.1" 403 475
    158.69.24.81 - - [29/Nov/2015:18:53:44 +0100] "POST /wp-content/gallery/camere/cache.php HTTP/1.1" 200 981
    158.69.24.81 - - [29/Nov/2015:18:53:45 +0100] "POST /wp-content/plugins/contact-form-7/modules/date.php HTTP/1.1" 403 464
    158.69.24.81 - - [29/Nov/2015:18:53:45 +0100] "POST /wp-content/plugins/quitenicebooking/views/payment_success_error.htm.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:46 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/menu/edit-languages.php HTTP/1.1" 200 303
    158.69.24.81 - - [29/Nov/2015:18:53:47 +0100] "POST /wp-content/plugins/contact-form-7/includes/capabilities.php HTTP/1.1" 403 469
    158.69.24.81 - - [29/Nov/2015:18:53:47 +0100] "POST /wp-includes/class-json.php HTTP/1.1" 403 444
    158.69.24.81 - - [29/Nov/2015:18:53:48 +0100] "POST /wp-content/themes/sohohotel/footer.php HTTP/1.1" 403 451
    158.69.24.81 - - [29/Nov/2015:18:53:48 +0100] "POST /wp-content/plugins/wpml-translation-management/menu/sub/dashboard.php HTTP/1.1" 403 474
    158.69.24.81 - - [29/Nov/2015:18:53:49 +0100] "POST /wp-content/plugins/?_wordfence/js/file.php HTTP/1.1" 403 438
    158.69.24.81 - - [29/Nov/2015:18:53:50 +0100] "POST /utf.php HTTP/1.1" 403 427
    158.69.24.81 - - [29/Nov/2015:18:53:50 +0100] "POST /wp-includes/js/tinymce/skins/lightgray/gallery.php HTTP/1.1" 403 462
    158.69.24.81 - - [29/Nov/2015:18:53:51 +0100] "POST /wp-content/uploads/2014/06/file.php HTTP/1.1" 403 450
    158.69.24.81 - - [29/Nov/2015:18:53:52 +0100] "POST /wp-includes/images/wlw/alias.php HTTP/1.1" 200 308
    158.69.24.81 - - [29/Nov/2015:18:53:52 +0100] "POST /wp-content/plugins/?_nextgen-gallery-pro/modules/test_gateway/dir.php HTTP/1.1" 403 438
    158.69.24.81 - - [29/Nov/2015:18:53:53 +0100] "POST /wp-content/themes/sohohotel/images/prettyPhoto/facebook/plugin.php HTTP/1.1" 403 472
    158.69.24.81 - - [29/Nov/2015:18:53:53 +0100] "POST /wp-content/themes/sohohotel/images/prettyPhoto/dark_rounded/lib.php HTTP/1.1" 200 308
    158.69.24.81 - - [29/Nov/2015:18:53:54 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/upgrade-functions/3.2/stats.php HTTP/1.1" 403 482
    158.69.24.81 - - [29/Nov/2015:18:53:55 +0100] "POST /wp-content/plugins/?_nextgen-gallery-pro/modules/nextgen_pro_ecommerce/dir.php HTTP/1.1" 403 403
    158.69.24.81 - - [29/Nov/2015:18:53:56 +0100] "POST /wp-content/plugins/wpml-translation-management/res/js/include.php HTTP/1.1" 200 862
    158.69.24.81 - - [29/Nov/2015:18:53:56 +0100] "POST /wp-content/plugins/index.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:57 +0100] "POST /wp-includes/class-phpmailer.php HTTP/1.1" 200 333
    158.69.24.81 - - [29/Nov/2015:18:53:58 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/classes/wpml-mail/class-wpml-mail-language-switcher.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:53:58 +0100] "POST /wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 450
    158.69.24.81 - - [29/Nov/2015:18:53:59 +0100] "POST /wp-content/themes/twentyfourteen/header.php HTTP/1.1" 403 450
    158.69.24.81 - - [29/Nov/2015:18:54:00 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/wpml-translation-selector.class.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:54:00 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/languages.php HTTP/1.1" 403 469
    158.69.24.81 - - [29/Nov/2015:18:54:01 +0100] "POST /functions.php HTTP/1.1" 200 333
    158.69.24.81 - - [29/Nov/2015:18:54:01 +0100] "POST /wp-content/uploads/2014/10/error.php HTTP/1.1" 403 450
    158.69.24.81 - - [29/Nov/2015:18:54:02 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/taxonomy-term-translation/nav-menu-translation/admin.php HTTP/1.1" 403 491
    158.69.24.81 - - [29/Nov/2015:18:54:03 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/test_gateway/dirs.php HTTP/1.1" 403 476
    158.69.24.81 - - [29/Nov/2015:18:54:03 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/locale/orig/help.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:54:04 +0100] "POST /wp-content/plugins/wpml-translation-management/res/css/option.php HTTP/1.1" 403 469
    158.69.24.81 - - [29/Nov/2015:18:54:04 +0100] "POST /wp-content/uploads/2014/10/alias.php HTTP/1.1" 403 451
    158.69.24.81 - - [29/Nov/2015:18:54:05 +0100] "POST /wp-content/plugins/wpml-translation-management/menu/ajax.php HTTP/1.1" 200 739
    158.69.24.81 - - [29/Nov/2015:18:54:06 +0100] "POST /wp-content/plugins/?_wordfence/lib/menu_blockedIPs.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:54:06 +0100] "POST /wp-content/themes/twentyfourteen/content-featured-post.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:54:07 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/edit-languages.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:54:08 +0100] "POST /wp-content/plugins/?_contact-form-7/modules/count.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:54:08 +0100] "POST /page.php HTTP/1.1" 403 428
    158.69.24.81 - - [29/Nov/2015:18:54:09 +0100] "POST /wp-includes/js/tinymce/plugins/hr/header.php HTTP/1.1" 403 456
    158.69.24.81 - - [29/Nov/2015:18:54:09 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/Twig/Filter/user.php HTTP/1.1" 403 475
    158.69.24.81 - - [29/Nov/2015:18:54:10 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/functions.php HTTP/1.1" 403 471
    158.69.24.81 - - [29/Nov/2015:18:54:11 +0100] "POST /wp-content/uploads/2015/07/menu.php HTTP/1.1" 403 451
    158.69.24.81 - - [29/Nov/2015:18:54:11 +0100] "POST /wp-content/plugins/wpml-translation-management/page.php HTTP/1.1" 200 680
    158.69.24.81 - - [29/Nov/2015:18:54:12 +0100] "POST /wp-content/plugins/wordpress-seo/wp-seo.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:54:13 +0100] "POST /wp-content/plugins/wp-mail-bank/views/other-services.php HTTP/1.1" 403 465
    158.69.24.81 - - [29/Nov/2015:18:54:13 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/classes/core-abstract-classes/class-wpml-sp-and-pt-user.php HTTP/1.1" 200 335
    158.69.24.81 - - [29/Nov/2015:18:54:14 +0100] "POST /search.php HTTP/1.1" 403 429
    158.69.24.81 - - [29/Nov/2015:18:54:14 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/locale/orig/db.php HTTP/1.1" 403 439
    158.69.24.81 - - [29/Nov/2015:18:54:15 +0100] "POST /wp-content/uploads/2015/03/help.php HTTP/1.1" 403 449
    158.69.24.81 - - [29/Nov/2015:18:54:16 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/Twig/Function/user.php HTTP/1.1" 200 335
    58.96.174.157 - - [29/Nov/2015:18:54:51 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/classes/core-abstract-classes/class-wpml-sp-and-pt-user.php HTTP/1.1" 200 359
    5.39.222.252 - - [29/Nov/2015:18:56:13 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416
    5.39.222.252 - - [29/Nov/2015:18:56:14 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416
    5.39.222.252 - - [29/Nov/2015:18:56:14 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416
    5.39.222.252 - - [29/Nov/2015:18:56:14 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416
    5.39.222.252 - - [29/Nov/2015:19:01:57 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416
    5.39.222.252 - - [29/Nov/2015:19:01:58 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416
    5.39.222.252 - - [29/Nov/2015:19:01:58 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416
    5.39.222.252 - - [29/Nov/2015:19:01:58 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416
Viewing 1 replies (of 1 total)
  • The topic ‘Attempt to Access Your Hosting Account’ is closed to new replies.