Jump to content

Another Worthless Hacker


Recommended Posts

Another worthless sonofabitch hacker is at it again messing with our invision boards:

[code][root@phpfreaks logs]# grep -R '61.129.102.208' *
access.log:61.129.102.208 - - [27/Jun/2006:12:51:49 -0500] "GET /forums/index.php HTTP/1.1" 200 106758 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:05 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:34 -0500] "GET /forums/index.php?act=Reg&CODE=00 HTTP/1.1" 200 57059 "http://www.phpfreaks.com/forums/index.php" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:35 -0500] "GET /forums/index.php?act=Reg&CODE=00 HTTP/1.1" 200 57074 "http://www.phpfreaks.com/forums/index.php" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:37 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32779 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:52 -0500] "POST /forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1 HTTP/1.1" 200 65671 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:52:55 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:10 -0500] "GET /forums/index.php?act=Reg&CODE=image&rc=3cdc110484114eddac91e216abce9e13 HTTP/1.1" 200 8822 "http://www.phpfreaks.com/forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:11 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-user-name&name=gabby&__=1151430792609 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:13 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-display-name&name=ha&__=1151430794062 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:16 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-display-name&name=gabby&__=1151430797140 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:21 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-email-address&email=iwgoqibibcjwq@mailinator.com&__=1151430802359 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:22 -0500] "GET /forums/index.php?s=&act=xmlout&do=check-email-address&email=iwgoqibibcjwq@mailinator.com&__=1151430802750 HTTP/1.1" 200 8 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:26 -0500] "POST /forums/index.php HTTP/1.1" 200 55342 "http://www.phpfreaks.com/forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:30 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:53 -0500] "GET /forums/index.php?act=Reg&CODE=03&uid=35150&aid=716b5be3e97e1edf63cdd3b83e133b96 HTTP/1.1" 302 - "http://mailinator.com/mailinator/showmail.jsp?email=iwgoqibibcjwq&msgnum=0" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:54 -0500] "GET /forums/index.php?&act=Login&CODE=autologin&fromreg=1 HTTP/1.1" 302 - "http://mailinator.com/mailinator/showmail.jsp?email=iwgoqibibcjwq&msgnum=0" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:55 -0500] "GET /forums/index.php?act=Login&CODE=00 HTTP/1.1" 200 57439 "http://mailinator.com/mailinator/showmail.jsp?email=iwgoqibibcjwq&msgnum=0" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:53:58 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:08 -0500] "POST /forums/index.php?act=Login&CODE=01 HTTP/1.1" 302 - "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:09 -0500] "GET /forums/index.php? HTTP/1.1" 200 101625 "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:12 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32794 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:18 -0500] "GET /forums/index.php?showuser=20097 HTTP/1.1" 200 63746 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:22 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32779 "http://www.phpfreaks.com/forums/index.php?showuser=20097" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:25 -0500] "GET /forums/index.php?showuser=1 HTTP/1.1" 200 57432 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:28 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32643 "http://www.phpfreaks.com/forums/index.php?showuser=1" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:39 -0500] "GET /forums/index.php?showuser=2 HTTP/1.1" 200 63680 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:41 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32643 "http://www.phpfreaks.com/forums/index.php?showuser=2" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:52 -0500] "GET /forums/index.php?act=Login&CODE=03&k=f51e476f798450dabab8df42eb9a085d HTTP/1.1" 302 - "http://www.phpfreaks.com/forums/index.php?showuser=2" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:53 -0500] "GET /forums/index.php? HTTP/1.1" 200 99551 "http://www.phpfreaks.com/forums/index.php?showuser=2" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:54:55 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32658 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:03 -0500] "GET /forums/index.php?act=Login&CODE=00 HTTP/1.1" 200 57439 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:06 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32658 "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:13 -0500] "GET /forums/index.php?act=Reg&CODE=10 HTTP/1.1" 200 56730 "http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:16 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32658 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=10" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:20 -0500] "GET /forums/index.php?act=Reg&CODE=image&rc=828c57f91992d588169f7ab212dff6c4 HTTP/1.1" 200 8830 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=10" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:24 -0500] "POST /forums/index.php? HTTP/1.1" 200 55164 "http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=10" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:55:27 -0500] "GET /error.php?action=reportError&enum=404 HTTP/1.1" 200 32658 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
access.log:61.129.102.208 - - [27/Jun/2006:12:56:04 -0500] "GET / HTTP/1.1" 200 47183 "http://www.phpfreaks.com/forums/index.php?" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4"
error.log:[Tue Jun 27 12:52:04 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php
error.log:[Tue Jun 27 12:52:36 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=00
error.log:[Tue Jun 27 12:52:55 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1
error.log:[Tue Jun 27 12:53:30 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php
error.log:[Tue Jun 27 12:53:58 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00
error.log:[Tue Jun 27 12:54:11 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?
error.log:[Tue Jun 27 12:54:21 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?showuser=20097
error.log:[Tue Jun 27 12:54:27 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?showuser=1
error.log:[Tue Jun 27 12:54:41 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?showuser=2
error.log:[Tue Jun 27 12:54:55 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?
error.log:[Tue Jun 27 12:55:05 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Login&CODE=00
error.log:[Tue Jun 27 12:55:15 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?act=Reg&CODE=10
error.log:[Tue Jun 27 12:55:26 2006] [error] [client 61.129.102.208] File does not exist: /home/www.phpfreaks.com/public_html/forums/ipb_css.css, referer: http://www.phpfreaks.com/forums/index.php?
[/code]
Link to comment
Share on other sites

Pehaps they are using an old IPB security exploit. Prehaps upgrading the board agin to the latest release, IPB2.1.6 might help keep them obey.

Also phpfreak. Should this of been posted in the Admin forum? And nice see you around too [img src=\"style_emoticons/[#EMO_DIR#]/smile.gif\" style=\"vertical-align:middle\" emoid=\":smile:\" border=\"0\" alt=\"smile.gif\" /]
Link to comment
Share on other sites

This thread is more than a year old. Please don't revive it unless you have something important to add.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.