Is someone trying to hack my site?

Discussion in 'Security' started by geester1, Oct 1, 2009.

  1. #1
    Looking through cpanel, I see lots of the following:

    /wp-content/uploads/2009/05/WP/travesti-rmvb-download.html
    Http Code: 404 Date: Sep 30 13:54:38 Http Version: HTTP/1.1 Size in Bytes: 323
    Referer: -
    Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)

    /wp-content/uploads/2009/05/WP/catherine-bosley-video.html
    Http Code: 404 Date: Sep 30 13:54:56 Http Version: HTTP/1.1 Size in Bytes: 323
    Referer: -
    Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)

    /wp-content/uploads/2009/05/WP/sedap-main-pantat.html
    Http Code: 404 Date: Sep 30 13:55:07 Http Version: HTTP/1.1 Size in Bytes: 318
    Referer: -
    Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)

    /wp-content/uploads/2009/05/WP/beach-volleyball-oops.html
    Http Code: 404 Date: Sep 30 13:55:16 Http Version: HTTP/1.1 Size in Bytes: 322
    Referer: -
    Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)


    /wp-content/uploads/2009/05/WP/download-transcender-ccna-exam-rapid.html
    Http Code: 404 Date: Sep 30 13:56:09 Http Version: HTTP/1.1 Size in Bytes: 337
    Referer: -
    Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)

    /news/wp-content/uploads/2009/05/WP/kiss-with-a-fist.html
    Http Code: 404 Date: Sep 30 14:00:37 Http Version: HTTP/1.1 Size in Bytes: 317
    Referer: -
    Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)

    Or can anyone explain what is happening? Is someone submitting my site to "bad neighbourhood" sites in order for google to discredit site? But all the urls come up with 404 error.
     
    geester1, Oct 1, 2009 IP
  2. Thibaut

    Thibaut Well-Known Member

    Messages:
    886
    Likes Received:
    26
    Best Answers:
    0
    Trophy Points:
    140
    #2
    Could be or maybe obsolet references if your domain is a second hand.
    I would advise you to reject the traffic and look for the references via Google Webmaster Tool.

    Cheers.
    Thibaut
     
    Thibaut, Oct 1, 2009 IP
  3. geester1

    geester1 Well-Known Member

    Messages:
    2,250
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    105
    #3
    Looked in google tools for webmasters found nothing (not as though I know what I am looking for!!)
     
    geester1, Oct 1, 2009 IP
  4. Steve Powers

    Steve Powers Peon

    Messages:
    1,196
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #4
    I don't think it's an activity of hacking.But you'd better check it carefully and strengthen the protection of your
    website.By the way,make sure the links on your website work well.It may also caused by the network problem.
     
    Steve Powers, Oct 2, 2009 IP
  5. awesometbn

    awesometbn Peon

    Messages:
    268
    Likes Received:
    8
    Best Answers:
    0
    Trophy Points:
    0
    #5
    This looks like an automated probe to see if any of those files exist. Anyone can spoof their agent to say it's Googlebot. See http://www.smart-it-consulting.com/internet/google/googlebot-spoofer/

    You probably want to lockdown a few of your Wordpress settings to prevent spammers and unwanted robots. Consider editing your robots.txt file, and .htaccess, and web server file permission levels, and a few more ideas from the following blog post about Wordpress security.

    http://www.root777.com/wordpress/wordpress-security-tips-to-protect-your-wordpress-blog/

    Keep an eye on your logs and be proactive about blocking anything you feel is strange or unfamiliar.
     
    awesometbn, Oct 12, 2009 IP
  6. tnenad

    tnenad Guest

    Messages:
    70
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #6
    I can do a full vulnerabilities scan for that website! (Done by security professionals from Serbia)
    If you're interested, contact me.
     
    tnenad, Oct 15, 2009 IP