Attempt to Access Your Hosting Account
-
i got this email fro hosting provider
We have put the following content into quarantine as we believe it contains viruses or other malicious code. If you feel this has been in error and
your file is false-positive (innocent), please submit a ticket to us at https://support.namecheap.com/index.php?/Tickets/Submit or contact
the Live Help at https://www.namecheap.com/support/livesupport.aspx and we will be happy to assist:‘(compressed file: wp-ajax.php [depth: 1])[PHP Obfuscation Exploit [P0876]]’: /home/xxxx/public_html/wp-content/uploads/2015/11/wp-db-ajax-made.zip
‘[PHP Obfuscation Exploit [P0374]]’: /home/xxxx/public_html/wp-content/plugins/wp-db-ajax-made/pas.php
‘[PHP Obfuscation Exploit [P0876]]’: /home/xxxx/public_html/wp-content/plugins/wp-db-ajax-made/wp-ajax.php
‘ClamAV detected virus = [PHP.Shell-84]’: /home/xxxx/public_html/wp-content/themes/twentythirteen/wp-ajax.php
then i got another email
We have put the following content into quarantine as we believe it contains viruses or other malicious code. If you feel this has been in error and
your file is false-positive (innocent), please submit a ticket to us at https://support.namecheap.com/index.php?/Tickets/Submit or contact
the Live Help at https://www.namecheap.com/support/livesupport.aspx and we will be happy to assist:‘[PHP Upload Exploit]’: /home/xxxx/public_html/wp-content/themes/novavideo/404.php
‘[PHP Upload Exploit]’: /home/xxxx/public_html/wp-content/themes/novavideo/_admin/functions.php
-
One of my website got hacked one again. Almost all php files have a malignus code on top.
But I don’t have that theme..
It seems started from /wp-content/plugins/wp-db-ajax-made/wp-ajax.php file
here a slice of my website log:158.69.24.81 - - [29/Nov/2015:18:52:21 +0100] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 200 398 158.69.24.81 - - [29/Nov/2015:18:52:22 +0100] "POST /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 200 3746 158.69.24.81 - - [29/Nov/2015:18:52:23 +0100] "POST /wp-content/uploads/2014/css.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:52:23 +0100] "POST /wp-content/ngg/modules/photocrati-nextgen_pro_thumbnail_grid/templates/ini.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:52:24 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_thumbnail_grid/user.php HTTP/1.1" 404 6538 158.69.24.81 - - [29/Nov/2015:18:52:25 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/res/css/alias.php HTTP/1.1" 404 6480 158.69.24.81 - - [29/Nov/2015:18:52:26 +0100] "POST /wp-content/gallery/camere/cache.php HTTP/1.1" 200 333 158.69.24.81 - - [29/Nov/2015:18:52:27 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_lightbox/adapter.nextgen_pro_lightbox_ajax.php HTTP/1.1" 500 260 158.69.24.81 - - [29/Nov/2015:18:52:28 +0100] "POST /wp-content/plugins/wp-mail-bank/assets/images/include.php HTTP/1.1" 404 6481 158.69.24.81 - - [29/Nov/2015:18:52:29 +0100] "POST /wp-content/plugins/wpml-translation-management/res/js/include.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:52:30 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/galleria/templates/article.php HTTP/1.1" 404 6480 158.69.24.81 - - [29/Nov/2015:18:52:31 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_albums/static/search.php HTTP/1.1" 404 6480 23.238.20.113 - - [29/Nov/2015:18:52:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2205 158.69.24.81 - - [29/Nov/2015:18:52:32 +0100] "POST /wp-content/plugins/wpml-translation-management/menu/ajax.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:52:33 +0100] "POST /wp-includes/functions.php HTTP/1.1" 500 260 158.69.24.81 - - [29/Nov/2015:18:52:33 +0100] "POST /wp-content/gallery.php HTTP/1.1" 404 6481 158.69.24.81 - - [29/Nov/2015:18:52:35 +0100] "POST /wp-content/plugins/wpml-translation-management/page.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:52:35 +0100] "POST /wp-content/themes/________sohohotel/page-templates/template-left-sidebar.php HTTP/1.1" 404 6480 158.69.24.81 - - [29/Nov/2015:18:52:36 +0100] "POST /wp-content/themes/sohohotel/comments.php HTTP/1.1" 500 260 158.69.24.81 - - [29/Nov/2015:18:52:37 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_lightbox_legacy/adapter.pro_lightbox_mapper.php HTTP/1.1" 500 260 158.69.24.81 - - [29/Nov/2015:18:52:38 +0100] "POST /wp-includes/Text/Diff/Engine/native.php HTTP/1.1" 200 304 158.69.24.81 - - [29/Nov/2015:18:52:39 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/lang-data.php HTTP/1.1" 200 303 158.69.24.81 - - [29/Nov/2015:18:52:39 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_captions/test.php HTTP/1.1" 404 6480 158.69.24.81 - - [29/Nov/2015:18:52:41 +0100] "POST /wp-includes/wp-diff.php HTTP/1.1" 200 303 158.69.24.81 - - [29/Nov/2015:18:52:41 +0100] "POST /wp-content/plugins/contact-form-7/modules/count.php HTTP/1.1" 500 260 158.69.24.81 - - [29/Nov/2015:18:52:42 +0100] "POST /wp-content/themes/________sohohotel/functions/shortcodes/video.php HTTP/1.1" 404 6481 158.69.24.81 - - [29/Nov/2015:18:52:43 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_i18n/lang/object.php HTTP/1.1" 404 6480 158.69.24.81 - - [29/Nov/2015:18:52:44 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_proofing/system.php HTTP/1.1" 404 6480 158.69.24.81 - - [29/Nov/2015:18:52:46 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/galleria/admin.php HTTP/1.1" 404 6480 158.69.24.81 - - [29/Nov/2015:18:52:47 +0100] "POST /header.php HTTP/1.1" 404 6480 158.69.24.81 - - [29/Nov/2015:18:52:48 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/start.php HTTP/1.1" 404 6480 158.69.24.81 - - [29/Nov/2015:18:52:49 +0100] "POST /wp-includes/compat.php HTTP/1.1" 200 303 158.69.24.81 - - [29/Nov/2015:18:52:50 +0100] "POST /wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 200 303 158.69.24.81 - - [29/Nov/2015:18:52:50 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_lightbox_legacy/adapter.image_protection_routes.php HTTP/1.1" 500 260 158.69.24.81 - - [29/Nov/2015:18:52:51 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/wpml-config/wpml-config.class.php HTTP/1.1" 500 260 158.69.24.81 - - [29/Nov/2015:18:52:52 +0100] "POST /wp-content/plugins/quitenicebooking/views/accommodation.htm.php HTTP/1.1" 200 336 158.69.24.81 - - [29/Nov/2015:18:52:53 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/mobile-detect.php HTTP/1.1" 200 303 158.69.24.81 - - [29/Nov/2015:18:52:53 +0100] "POST /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 200 10015 158.69.24.81 - - [29/Nov/2015:18:52:54 +0100] "POST /wp-content/themes/twentythirteen/sidebar.php HTTP/1.1" 403 453 158.69.24.81 - - [29/Nov/2015:18:52:55 +0100] "POST /wp-content/themes/twentythirteen/content-chat.php HTTP/1.1" 403 455 158.69.24.81 - - [29/Nov/2015:18:52:55 +0100] "POST /wp-includes/pomo/mo.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:52:56 +0100] "POST /wp-content/themes/twentyfourteen/inc/back-compat.php HTTP/1.1" 403 462 158.69.24.81 - - [29/Nov/2015:18:52:57 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/inc/wpml-post-comments.class.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:52:57 +0100] "POST /wp-content/themes/sohohotel/functions/shortcodes/message.php HTTP/1.1" 403 467 158.69.24.81 - - [29/Nov/2015:18:52:58 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/inc/query-filtering/wpml-404-guess.class.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:52:59 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/Twig/Markup.php HTTP/1.1" 403 473 158.69.24.81 - - [29/Nov/2015:18:52:59 +0100] "POST /wp-content/plugins/?_wordfence/lib/menu_passwd.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:53:00 +0100] "POST /wp-includes/SimplePie/Item.php HTTP/1.1" 403 447 158.69.24.81 - - [29/Nov/2015:18:53:00 +0100] "POST /wp-content/themes/sohohotel/functions/shortcodes/dropcap.php HTTP/1.1" 403 466 158.69.24.81 - - [29/Nov/2015:18:53:01 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/url-handling/wpml-lang-subdir-converter.class.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:02 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/classes/class-wpml-twig.php HTTP/1.1" 403 476 158.69.24.81 - - [29/Nov/2015:18:53:02 +0100] "POST /wp-content/plugins/wordpress-seo/vendor/autoload.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:03 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/Twig/Filter.php HTTP/1.1" 403 472 158.69.24.81 - - [29/Nov/2015:18:53:03 +0100] "POST /wp-includes/revision.php HTTP/1.1" 403 441 158.69.24.81 - - [29/Nov/2015:18:53:04 +0100] "POST /wp-content/themes/sohohotel/single-default.php HTTP/1.1" 403 459 158.69.24.81 - - [29/Nov/2015:18:53:05 +0100] "POST /start.php HTTP/1.1" 403 428 158.69.24.81 - - [29/Nov/2015:18:53:05 +0100] "POST /wp-content/plugins/wpml-string-translation/res/img/db.php HTTP/1.1" 403 467 158.69.24.81 - - [29/Nov/2015:18:53:06 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/inc/installer/locale/help.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:53:06 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/quote/plugin.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:07 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/installer/locale/sql.php HTTP/1.1" 403 479 158.69.24.81 - - [29/Nov/2015:18:53:08 +0100] "POST /wp-content/themes/twentyfifteen/js/admin.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:08 +0100] "POST /wp-includes/images/smilies/dump.php HTTP/1.1" 403 447 158.69.24.81 - - [29/Nov/2015:18:53:09 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/query-filtering/option.php HTTP/1.1" 403 479 158.69.24.81 - - [29/Nov/2015:18:53:10 +0100] "POST /wp-content/plugins/wp-mail-bank/assets/db.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:10 +0100] "POST /wp-content/uploads/2015/04/option.php HTTP/1.1" 403 451 158.69.24.81 - - [29/Nov/2015:18:53:11 +0100] "POST /wp-content/themes/sohohotel/images/prettyPhoto/template.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:11 +0100] "POST /wp-content/gallery/camere/dynamic/defines.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:12 +0100] "POST /wp-content/themes/twentyfourteen/images/blog.php HTTP/1.1" 403 460 158.69.24.81 - - [29/Nov/2015:18:53:13 +0100] "POST /wp-content/themes/twentythirteen/genericons/font/system.php HTTP/1.1" 403 465 158.69.24.81 - - [29/Nov/2015:18:53:13 +0100] "POST /wp-content/plugins/wordpress-seo/js/header.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:14 +0100] "POST /wp-content/plugins/?_wordfence/images/config.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:53:15 +0100] "POST /wp-content/plugins/?_contact-form-7/error.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:53:15 +0100] "POST /wp-content/uploads/2014/css.php HTTP/1.1" 200 1140 158.69.24.81 - - [29/Nov/2015:18:53:16 +0100] "POST /wp-content/themes/sohohotel/page-templates/template-homepage-1.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:17 +0100] "POST /wp-content/plugins/?_contact-form-7/modules/jetpack.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:53:17 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/inc/widgets/icl-language-switcher.class.php HTTP/1.1" 200 303 158.69.24.81 - - [29/Nov/2015:18:53:18 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/icl_api.php HTTP/1.1" 403 471 158.69.24.81 - - [29/Nov/2015:18:53:19 +0100] "POST /wp-content/plugins/hello.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:19 +0100] "POST /wp-content/plugins/cookie-law-info/cookie-law-info.php HTTP/1.1" 403 455 158.69.24.81 - - [29/Nov/2015:18:53:20 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/request-handling/wpml-request.class.php HTTP/1.1" 403 483 158.69.24.81 - - [29/Nov/2015:18:53:20 +0100] "POST /wp-content/plugins/quitenicebooking/includes/datepicker_translations.php HTTP/1.1" 403 478 158.69.24.81 - - [29/Nov/2015:18:53:21 +0100] "POST /wp-content/plugins/wordpress-seo/inc/class-wpseo-meta.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:22 +0100] "POST /wp-config-sample.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:22 +0100] "POST /wp-content/plugins/quitenicebooking/includes/quitenicebooking_booking_block_post.class.php HTTP/1.1" 403 480 158.69.24.81 - - [29/Nov/2015:18:53:23 +0100] "POST /wp-includes/l10n.php HTTP/1.1" 403 441 158.69.24.81 - - [29/Nov/2015:18:53:24 +0100] "POST /themes.php HTTP/1.1" 403 429 158.69.24.81 - - [29/Nov/2015:18:53:24 +0100] "POST /wp-content/plugins/?_nextgen-gallery-pro/modules/cheque/cache.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:53:25 +0100] "POST /wp-includes/js/tinymce/plugins/wordpress/info.php HTTP/1.1" 403 462 158.69.24.81 - - [29/Nov/2015:18:53:25 +0100] "POST /wp-content/plugins/wordpress-seo/vendor/list.php HTTP/1.1" 403 458 158.69.24.81 - - [29/Nov/2015:18:53:26 +0100] "POST /wp-content/gallery/asolo/functions.php HTTP/1.1" 403 453 158.69.24.81 - - [29/Nov/2015:18:53:27 +0100] "POST /wp-content/uploads/2014/01/proxy.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:27 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/request-handling/ini.php HTTP/1.1" 403 477 158.69.24.81 - - [29/Nov/2015:18:53:28 +0100] "POST /wp-content/plugins/nextgen-gallery/pope/lib/press.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:28 +0100] "POST /wp-includes/js/imgareaselect/dir.php HTTP/1.1" 403 450 158.69.24.81 - - [29/Nov/2015:18:53:29 +0100] "POST /wp-includes/js/tinymce/plugins/wordpress/utf.php HTTP/1.1" 403 460 158.69.24.81 - - [29/Nov/2015:18:53:30 +0100] "POST /wp-content/plugins/wp-mail-bank/assets/css/font/inc.php HTTP/1.1" 403 465 158.69.24.81 - - [29/Nov/2015:18:53:30 +0100] "POST /wp-content/plugins/wordpress-seo/frontend/file.php HTTP/1.1" 403 460 158.69.24.81 - - [29/Nov/2015:18:53:31 +0100] "POST /wp-content/uploads/2015/06/page.php HTTP/1.1" 403 451 158.69.24.81 - - [29/Nov/2015:18:53:31 +0100] "POST /wp-content/ngg/modules/photocrati-nextgen_pro_thumbnail_grid/templates/ini.php HTTP/1.1" 200 979 158.69.24.81 - - [29/Nov/2015:18:53:32 +0100] "POST /wp-content/plugins/quitenicebooking/views/error.htm.php HTTP/1.1" 403 466 158.69.24.81 - - [29/Nov/2015:18:53:33 +0100] "POST /wp-content/plugins/contact-form-7/modules/date.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:33 +0100] "POST /wp-includes/link-template.php HTTP/1.1" 403 446 158.69.24.81 - - [29/Nov/2015:18:53:34 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/url-handling/wpml-slug-filter.class.php HTTP/1.1" 403 484 158.69.24.81 - - [29/Nov/2015:18:53:35 +0100] "POST /wp-content/plugins/wordpress-seo/vendor/autoload_52.php HTTP/1.1" 403 466 158.69.24.81 - - [29/Nov/2015:18:53:35 +0100] "POST /wp-content/plugins/akismet/views/start.php HTTP/1.1" 403 456 158.69.24.81 - - [29/Nov/2015:18:53:36 +0100] "POST /wp-content/plugins/?_contact-form-7/modules/akismet.php HTTP/1.1" 200 303 158.69.24.81 - - [29/Nov/2015:18:53:37 +0100] "POST /wp-includes/capabilities.php HTTP/1.1" 403 445 158.69.24.81 - - [29/Nov/2015:18:53:37 +0100] "POST /wp-content/themes/sohohotel/single.php HTTP/1.1" 403 451 158.69.24.81 - - [29/Nov/2015:18:53:38 +0100] "POST /diff.php HTTP/1.1" 403 428 158.69.24.81 - - [29/Nov/2015:18:53:38 +0100] "POST /wp-content/themes/sohohotel/functions/widgets/start.php HTTP/1.1" 403 464 158.69.24.81 - - [29/Nov/2015:18:53:39 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_horizontal_filmstrip/session.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:40 +0100] "POST /wp-content/uploads/2014/03/blog.php HTTP/1.1" 403 451 158.69.24.81 - - [29/Nov/2015:18:53:40 +0100] "POST /wp-includes/js/crop/dir.php HTTP/1.1" 403 444 158.69.24.81 - - [29/Nov/2015:18:53:41 +0100] "POST /wp-content/plugins/?_contact-form-7/includes/js/admin.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:53:41 +0100] "POST /wp-content/plugins/?_nextgen-gallery-pro/modules/object.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:53:42 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/post-menus/title.php HTTP/1.1" 403 474 158.69.24.81 - - [29/Nov/2015:18:53:43 +0100] "POST /wp-includes/js/tinymce/plugins/wplink/sql.php HTTP/1.1" 403 458 158.69.24.81 - - [29/Nov/2015:18:53:43 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/nextgen_pro_film/press.php HTTP/1.1" 403 475 158.69.24.81 - - [29/Nov/2015:18:53:44 +0100] "POST /wp-content/gallery/camere/cache.php HTTP/1.1" 200 981 158.69.24.81 - - [29/Nov/2015:18:53:45 +0100] "POST /wp-content/plugins/contact-form-7/modules/date.php HTTP/1.1" 403 464 158.69.24.81 - - [29/Nov/2015:18:53:45 +0100] "POST /wp-content/plugins/quitenicebooking/views/payment_success_error.htm.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:46 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/menu/edit-languages.php HTTP/1.1" 200 303 158.69.24.81 - - [29/Nov/2015:18:53:47 +0100] "POST /wp-content/plugins/contact-form-7/includes/capabilities.php HTTP/1.1" 403 469 158.69.24.81 - - [29/Nov/2015:18:53:47 +0100] "POST /wp-includes/class-json.php HTTP/1.1" 403 444 158.69.24.81 - - [29/Nov/2015:18:53:48 +0100] "POST /wp-content/themes/sohohotel/footer.php HTTP/1.1" 403 451 158.69.24.81 - - [29/Nov/2015:18:53:48 +0100] "POST /wp-content/plugins/wpml-translation-management/menu/sub/dashboard.php HTTP/1.1" 403 474 158.69.24.81 - - [29/Nov/2015:18:53:49 +0100] "POST /wp-content/plugins/?_wordfence/js/file.php HTTP/1.1" 403 438 158.69.24.81 - - [29/Nov/2015:18:53:50 +0100] "POST /utf.php HTTP/1.1" 403 427 158.69.24.81 - - [29/Nov/2015:18:53:50 +0100] "POST /wp-includes/js/tinymce/skins/lightgray/gallery.php HTTP/1.1" 403 462 158.69.24.81 - - [29/Nov/2015:18:53:51 +0100] "POST /wp-content/uploads/2014/06/file.php HTTP/1.1" 403 450 158.69.24.81 - - [29/Nov/2015:18:53:52 +0100] "POST /wp-includes/images/wlw/alias.php HTTP/1.1" 200 308 158.69.24.81 - - [29/Nov/2015:18:53:52 +0100] "POST /wp-content/plugins/?_nextgen-gallery-pro/modules/test_gateway/dir.php HTTP/1.1" 403 438 158.69.24.81 - - [29/Nov/2015:18:53:53 +0100] "POST /wp-content/themes/sohohotel/images/prettyPhoto/facebook/plugin.php HTTP/1.1" 403 472 158.69.24.81 - - [29/Nov/2015:18:53:53 +0100] "POST /wp-content/themes/sohohotel/images/prettyPhoto/dark_rounded/lib.php HTTP/1.1" 200 308 158.69.24.81 - - [29/Nov/2015:18:53:54 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/upgrade-functions/3.2/stats.php HTTP/1.1" 403 482 158.69.24.81 - - [29/Nov/2015:18:53:55 +0100] "POST /wp-content/plugins/?_nextgen-gallery-pro/modules/nextgen_pro_ecommerce/dir.php HTTP/1.1" 403 403 158.69.24.81 - - [29/Nov/2015:18:53:56 +0100] "POST /wp-content/plugins/wpml-translation-management/res/js/include.php HTTP/1.1" 200 862 158.69.24.81 - - [29/Nov/2015:18:53:56 +0100] "POST /wp-content/plugins/index.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:57 +0100] "POST /wp-includes/class-phpmailer.php HTTP/1.1" 200 333 158.69.24.81 - - [29/Nov/2015:18:53:58 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/classes/wpml-mail/class-wpml-mail-language-switcher.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:53:58 +0100] "POST /wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 450 158.69.24.81 - - [29/Nov/2015:18:53:59 +0100] "POST /wp-content/themes/twentyfourteen/header.php HTTP/1.1" 403 450 158.69.24.81 - - [29/Nov/2015:18:54:00 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/wpml-translation-selector.class.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:54:00 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/languages.php HTTP/1.1" 403 469 158.69.24.81 - - [29/Nov/2015:18:54:01 +0100] "POST /functions.php HTTP/1.1" 200 333 158.69.24.81 - - [29/Nov/2015:18:54:01 +0100] "POST /wp-content/uploads/2014/10/error.php HTTP/1.1" 403 450 158.69.24.81 - - [29/Nov/2015:18:54:02 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/inc/taxonomy-term-translation/nav-menu-translation/admin.php HTTP/1.1" 403 491 158.69.24.81 - - [29/Nov/2015:18:54:03 +0100] "POST /wp-content/plugins/nextgen-gallery-pro/modules/test_gateway/dirs.php HTTP/1.1" 403 476 158.69.24.81 - - [29/Nov/2015:18:54:03 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/locale/orig/help.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:54:04 +0100] "POST /wp-content/plugins/wpml-translation-management/res/css/option.php HTTP/1.1" 403 469 158.69.24.81 - - [29/Nov/2015:18:54:04 +0100] "POST /wp-content/uploads/2014/10/alias.php HTTP/1.1" 403 451 158.69.24.81 - - [29/Nov/2015:18:54:05 +0100] "POST /wp-content/plugins/wpml-translation-management/menu/ajax.php HTTP/1.1" 200 739 158.69.24.81 - - [29/Nov/2015:18:54:06 +0100] "POST /wp-content/plugins/?_wordfence/lib/menu_blockedIPs.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:54:06 +0100] "POST /wp-content/themes/twentyfourteen/content-featured-post.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:54:07 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/edit-languages.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:54:08 +0100] "POST /wp-content/plugins/?_contact-form-7/modules/count.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:54:08 +0100] "POST /page.php HTTP/1.1" 403 428 158.69.24.81 - - [29/Nov/2015:18:54:09 +0100] "POST /wp-includes/js/tinymce/plugins/hr/header.php HTTP/1.1" 403 456 158.69.24.81 - - [29/Nov/2015:18:54:09 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/Twig/Filter/user.php HTTP/1.1" 403 475 158.69.24.81 - - [29/Nov/2015:18:54:10 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/menu/functions.php HTTP/1.1" 403 471 158.69.24.81 - - [29/Nov/2015:18:54:11 +0100] "POST /wp-content/uploads/2015/07/menu.php HTTP/1.1" 403 451 158.69.24.81 - - [29/Nov/2015:18:54:11 +0100] "POST /wp-content/plugins/wpml-translation-management/page.php HTTP/1.1" 200 680 158.69.24.81 - - [29/Nov/2015:18:54:12 +0100] "POST /wp-content/plugins/wordpress-seo/wp-seo.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:54:13 +0100] "POST /wp-content/plugins/wp-mail-bank/views/other-services.php HTTP/1.1" 403 465 158.69.24.81 - - [29/Nov/2015:18:54:13 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/classes/core-abstract-classes/class-wpml-sp-and-pt-user.php HTTP/1.1" 200 335 158.69.24.81 - - [29/Nov/2015:18:54:14 +0100] "POST /search.php HTTP/1.1" 403 429 158.69.24.81 - - [29/Nov/2015:18:54:14 +0100] "POST /wp-content/plugins/?_sitepress-multilingual-cms/locale/orig/db.php HTTP/1.1" 403 439 158.69.24.81 - - [29/Nov/2015:18:54:15 +0100] "POST /wp-content/uploads/2015/03/help.php HTTP/1.1" 403 449 158.69.24.81 - - [29/Nov/2015:18:54:16 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/lib/Twig/Function/user.php HTTP/1.1" 200 335 58.96.174.157 - - [29/Nov/2015:18:54:51 +0100] "POST /wp-content/plugins/sitepress-multilingual-cms/classes/core-abstract-classes/class-wpml-sp-and-pt-user.php HTTP/1.1" 200 359 5.39.222.252 - - [29/Nov/2015:18:56:13 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416 5.39.222.252 - - [29/Nov/2015:18:56:14 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416 5.39.222.252 - - [29/Nov/2015:18:56:14 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416 5.39.222.252 - - [29/Nov/2015:18:56:14 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416 5.39.222.252 - - [29/Nov/2015:19:01:57 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416 5.39.222.252 - - [29/Nov/2015:19:01:58 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416 5.39.222.252 - - [29/Nov/2015:19:01:58 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416 5.39.222.252 - - [29/Nov/2015:19:01:58 +0100] "POST /wp-admin/maint/ms-sites.php HTTP/1.1" 403 416
- The topic ‘Attempt to Access Your Hosting Account’ is closed to new replies.