My WordPress Was Hacked (Follow up)

  • Resolved pat7047

    (@pat7047)


    14 years ago

    I posted a topic a few days ago about my WordPress getting hacked. I’ve been searching through my website’s logs to find who did it. The post was published exactly at 6:34 PM CST on March 1st. I’ve pasted below three lines from the log that occurred exactly at that time. I was hoping someone could explain to me what these lines mean exactly (ie A post was published). I am assuming that these lines do mean a post was published but I was hoping to get another opinion. 

    64.2*4.240.*** - - [01/Mar/2011:19:34:01 -0500] "POST /wp-admin/admin-ajax.php HTTP/1.0" 200 243 "https://pinglio.com/wp-admin/post-new.php" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13"
64.2*4.240.*** - - [01/Mar/2011:19:34:01 -0500] "POST /wp-admin/admin-ajax.php HTTP/1.0" 200 403 "https://pinglio.com/wp-admin/post-new.php" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13"
64.2*4.240.*** - - [01/Mar/2011:19:34:57 -0500] "POST /wp-admin/admin-ajax.php HTTP/1.0" 200 243 "https://pinglio.com/wp-admin/post-new.php" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13"

    The timestamp is in military time and in Eastern Standard Time where my host is located… in case you were wondering. I blocked out the IP address because I have suspicion of who it is. Any help would be appreciated! Thanks!

  • The topic ‘My WordPress Was Hacked (Follow up)’ is closed to new replies.