Another Worthless Hacker

[phpfreak]

Another worthless sonofabitch hacker is at it again messing with our invision boards:

[code][root@phpfreaks logs]# grep -R '61.129.102.208' *
access.log:61.129.102.208 - - [27/Jun/2006:12:51:49 -0500] "GET /forums/index.php HTTP/1.1" 200 106758 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:05 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:34 -0500] "GET /forums/index.php?act=Reg&CODE=00 HTTP/1.1" 200 57059 "http://www.phpfreaks.com/forums/index.php" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:35 -0500] "GET /forums/index.php?act=Reg&CODE=00 HTTP/1.1" 200 57074 "http://www.phpfreaks.com/forums/index.php" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:37 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32779 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:52 -0500] "POST /forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1 HTTP/1.1" 200 65671 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:55 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:10 -0500] "GET /forums/index.php?act=Reg&CODE=image&rc=3cdc110484114eddac91e216abce9e13 HTTP/1.1" 200 8822 "http://www.phpfreaks.com/forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:11 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-user-name&name=gabby&__=1151430792609 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:13 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-display-name&name=ha&__=1151430794062 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:16 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-display-name&name=gabby&__=1151430797140 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:21 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-email-address&email=iwgoqibibcjwq@mailinator.com&__=1151430802359 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:22 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-email-address&email=iwgoqibibcjwq@mailinator.com&__=1151430802750 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:26 -0500] "POST /forums/index.php HTTP/1.1" 200 55342 "http://www.phpfreaks.com/forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:30 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:53 -0500] "GET /forums/index.php?act=Reg&CODE=03&uid=35150&aid=716b5be3e97e1edf63cdd3b83e133b96 HTTP/1.1" 302 - "http://mailinator.com/mailinator/showmail.jsp?email=iwgoqibibcjwq&msgnum=0" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:54 -0500] "GET /forums/index.php?&act=Login&CODE=autologin&fromreg=1 HTTP/1.1" 302 - "http://mailinator.com/mailinator/showmail.jsp?email=iwgoqibibcjwq&msgnum=0" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:55 -0500] "GET /forums/index.php?act=Login&CODE=00 HTTP/1.1" 200 57439 "http://mailinator.com/mailinator/showmail.jsp?email=iwgoqibibcjwq&msgnum=0" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:58 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:08 -0500] "POST /forums/index.php?act=Login&CODE=01 HTTP/1.1" 302 - "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:09 -0500] "GET /forums/index.php? HTTP/1.1" 200 101625 "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:12 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:18 -0500] "GET /forums/index.php?showuser=20097 HTTP/1.1" 200 63746 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:22 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32779 "http://www.phpfreaks.com/forums/index.php?showuser=20097" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:25 -0500] "GET /forums/index.php?showuser=1 HTTP/1.1" 200 57432 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:28 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32643 "http://www.phpfreaks.com/forums/index.php?showuser=1" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:39 -0500] "GET /forums/index.php?showuser=2 HTTP/1.1" 200 63680 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:41 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32643 "http://www.phpfreaks.com/forums/index.php?showuser=2" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:52 -0500] "GET /forums/index.php?act=Login&CODE=03&k=f51e476f798450dabab8df42eb9a085d HTTP/1.1" 302 - "http://www.phpfreaks.com/forums/index.php?showuser=2" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:53 -0500] "GET /forums/index.php? HTTP/1.1" 200 99551 "http://www.phpfreaks.com/forums/index.php?showuser=2" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:55 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32658 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:03 -0500] "GET /forums/index.php?act=Login&CODE=00 HTTP/1.1" 200 57439 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:06 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32658 "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:13 -0500] "GET /forums/index.php?act=Reg&CODE=10 HTTP/1.1" 200 56730 "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:16 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32658 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=10" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:20 -0500] "GET /forums/index.php?act=Reg&CODE=image&rc=828c57f91992d588169f7ab212dff6c4 HTTP/1.1" 200 8830 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=10" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:24 -0500] "POST /forums/index.php? HTTP/1.1" 200 55164 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=10" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:27 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32658 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:56:04 -0500] "GET / HTTP/1.1" 200 47183 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
error.log:[Tue Jun 27 12:52:04 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php
error.log:[Tue Jun 27 12:52:36 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=00
error.log:[Tue Jun 27 12:52:55 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1
error.log:[Tue Jun 27 12:53:30 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php
error.log:[Tue Jun 27 12:53:58 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00
error.log:[Tue Jun 27 12:54:11 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?
error.log:[Tue Jun 27 12:54:21 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?showuser=20097
error.log:[Tue Jun 27 12:54:27 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?showuser=1
error.log:[Tue Jun 27 12:54:41 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?showuser=2
error.log:[Tue Jun 27 12:54:55 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?
error.log:[Tue Jun 27 12:55:05 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00
error.log:[Tue Jun 27 12:55:15 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=10
error.log:[Tue Jun 27 12:55:26 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?
[/code]

[wildteen88]

Pehaps they are using an old IPB security exploit. Prehaps upgrading the board agin to the latest release, IPB2.1.6 might help keep them obey.

Also phpfreak. Should this of been posted in the Admin forum? And nice see you around too [img src=\"style_emoticons/[#EMO_DIR#]/smile.gif\" style=\"vertical-align:middle\" emoid=\":smile:\" border=\"0\" alt=\"smile.gif\" /]

[ober]

Probably wouldn't be a bad time to migrate to SMF!

[lead2gold]

i don't understand the purpose of gaining illegal control over a site and just vandalising it when successful? Who is actually impressed, what exactly do people acomplish by doing this?