vb.org Archive - View Single Post

wolfey · #3 06-24-2015, 08:45 AM

Thank you!

Well they are logging in somehow not using a username or password,
I don't see any damage or changes right now (no added plugins), looks like they delete them when done.

I don't see any updated files on my server, suspect files some but none modified this year (probably a product I added)

I banned and change the password to the other admin so they used another

I am currently upgrading to 4.2.3 now, hopefully that helps.

Can see anything else to check or fix here...

Here is yesterdays log (can you tell what they are trying to do?)

30509 Nicky 17:39, 23rd Jun 2015 plugin.php 84.33.43.76
30508 Nicky 17:39, 23rd Jun 2015 plugin.php update plugin id = 1871 84.33.43.76
30507 Nicky 17:38, 23rd Jun 2015 plugin.php edit plugin id = 1871 84.33.43.76
30506 Nicky 17:38, 23rd Jun 2015 modlog.php view 84.33.43.76
30505 Nicky 17:38, 23rd Jun 2015 modlog.php 84.33.43.76
30504 Nicky 17:37, 23rd Jun 2015 plugin.php 84.33.43.76
30503 Nicky 17:37, 23rd Jun 2015 plugin.php update plugin id = 1871 84.33.43.76
30502 Nicky 17:37, 23rd Jun 2015 plugin.php edit plugin id = 1871 84.33.43.76
30501 Nicky 17:36, 23rd Jun 2015 plugin.php 84.33.43.76
30500 Nicky 17:36, 23rd Jun 2015 plugin.php update 84.33.43.76
30499 Nicky 17:34, 23rd Jun 2015 modlog.php view 84.33.43.76
30498 Nicky 17:34, 23rd Jun 2015 modlog.php choose 84.33.43.76
30497 Nicky 17:34, 23rd Jun 2015 cronlog.php choose 84.33.43.76
30496 Nicky 17:33, 23rd Jun 2015 plugin.php add 84.33.43.76
30495 Nicky 17:32, 23rd Jun 2015 plugin.php modify
30494 Nicky 17:32, 23rd Jun 2015 stats.php index 84.33.43.76
30493 Nicky 17:32, 23rd Jun 2015 cronadmin.php modify 84.33.43.76
30492 Nicky 17:32, 23rd Jun 2015 admininfraction.php dolist 84.33.43.76
30491 Nicky 17:31, 23rd Jun 2015 admininfraction.php list 84.33.43.76
30490 Nicky 17:31, 23rd Jun 2015 user.php edit user id = 2 84.33.43.76
30489 Nicky 17:30, 23rd Jun 2015 banning.php modify 84.33.43.76
30488 Nicky 16:51, 23rd Jun 2015 plugin.php modify 84.33.43.76
30487 Nicky 16:50, 23rd Jun 2015 user.php edit user id = 2 84.33.43.76
30486 Nicky 16:50, 23rd Jun 2015 modlog.php view 84.33.43.76
30485 Nicky 16:49, 23rd Jun 2015 modlog.php choose

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01177 seconds Memory Usage 1,764KB Queries Executed 11 (?)
More Information
Template Usage: (1)SHOWTHREAD_SHOWPOST (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_box (1)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (1)post_thanks_postbit_info (1)postbit (1)postbit_onlinestatus (1)postbit_wrapper (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit reputationlevel showthread	Included Files: ./showpost.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_postinfo_query fetch_postinfo fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showpost_start bbcode_fetch_tags bbcode_create postbit_factory showpost_post postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start showpost_complete
Messages: