am i being hacked again
-
Hello there!
I think I am being hacked again as I noticed yesterday that since the 21st of July 210 emails were being sent from the website everyday.
because of the logs i examined, I suspected MailPoet and deactivated it.
still, 73 mails were sent yesterday…
so, i clearly have a problem with mailpoet, but…. not only.
any piece of advice is welcome,
veronique
-
in yesterdays’s stats, i find :
there are 176 lines of :
213.186.33.2 https://www.ch-freudien-be.org – [27/Jul/2017:16:17:45 +0200] POST /WordPress/wp-cron.php?de3e9a982a0f0b6e673cd3be2173e816&action=wysija_cron&process=queue,bounce&silent=1 HTTP/1.1 200 – https://www.ch-freudien-be.org Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
and 599 lines of :
213.186.33.2 https://www.ch-freudien-be.org – [27/Jul/2017:23:59:20 +0200] POST /WordPress/wp-cron.php?doing_wp_cron=1501192760.5653278827667236328125 HTTP/1.1 200 248 https://www.ch-freudien-be.org/WordPress/wp-admin/plugins.php Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:54.0) Gecko/20100101 Firefox/54.0
and what should i worry about:
192.187.123.162 https://www.ch-freudien-be.org – [27/Jul/2017:07:28:02 +0200] GET /blog/beta/wp-admin/setup-config.php HTTP/1.1 200 76441 – –
72.30.14.14 https://www.ch-freudien-be.org – [27/Jul/2017:02:36:12 +0200] GET /?email_id=187&user_id=1171&urlpassed=aHR0cHM6Ly90d2l0dGVyLmNvbS8jIS93eXNpamE%3D&controller=stats&action=analyse&wysija-page=1&wysijap=subscriptions HTTP/1.1 302 – – Mozilla/5.0 (compatible; Yahoo Link Preview; https://help.yahoo.com/kb/mail/yahoo-link-preview-SLN23615.html)
72.30.14.14 https://www.ch-freudien-be.org – [27/Jul/2017:02:36:09 +0200] GET /?email_id=187&user_id=1177&urlpassed=aHR0cHM6Ly93d3cuZmFjZWJvb2suY29tL3d5c2lqYQ%3D%3D&controller=stats&action=analyse&wysija-page=1&wysijap=subscriptions HTTP/1.1 302 – – Mozilla/5.0 (compatible; Yahoo Link Preview; https://help.yahoo.com/kb/mail/yahoo-link-preview-SLN23615.html)
- The topic ‘am i being hacked again’ is closed to new replies.