ผมน่าจะโดน hack wordpress 2.6 ครับ มันเข้าไปสร้าง sub-domain หลอกเงินชาวบ้าน ผมจะทำยังไงดีครับโดน hostgator แบน เค้าให้ ตอบกลับ ก็ไม่รู้จะตอบยังไง นี้ตัวอย่าง email
Phishing Site URL:
http://paypalupdate.reviewprice.co.cc
Hello,
We have received complaints of a phishing site being hosted on your site as referenced above. Upon inspection, we found that a phishing site had been installed on your account. The vast majority of phishing sites are installed by malicious users who have found exploits in scripts previously (and legitimately) installed on the account. We have taken the above actions to prevent further malicious activities. Please make sure to update your password to something more secure at this point and to update all the scripts/plugins on your account to the latest version.
Your new account password is: xxxxxx
41.233.43.72 - izaclick [09/24/2008:07:00:21 -0000] "GET /frontend/x/subdomain/index.html HTTP/1.1" 200 0 "
http://70.86.17.34:2082/fronte...tes-paypal%2Fconfirm-paypal%2F 
" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.233.43.72 - izaclick [09/24/2008:07:01:25 -0000] "GET /frontend/x/subdomain/doredirectdomain.html?domain=beautycute_shopping-guild.info HTTP/1.1" 200 0 "
http://70.86.17.34:2082/frontend/x/subdomain/index.html " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.233.43.72 - izaclick [09/24/2008:07:01:27 -0000] "GET /frontend/x/subdomain/index.html HTTP/1.1" 200 0 "
http://70.86.17.34:2082/fronte...tes-paypal%2Fconfirm-paypal%2F " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.233.43.72 - izaclick [09/24/2008:07:01:35 -0000] "GET /frontend/x/subdomain/doredirectdomain.html?domain=paypalupdate_reviewprice.co.cc HTTP/1.1" 200 0 "
http://70.86.17.34:2082/frontend/x/subdomain/index.html " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.233.43.72 - izaclick [09/24/2008:07:02:00 -0000] "GET /frontend/x/subdomain/saveredirect.html?domain=paypalupdate_reviewprice.co.cc&url=http%3A%2F%2Fdoctor-doctor.co.kr%2Finc%2F.paypal%2Fpaypal%2Fcgi-bin%2Fwebscrcmd%3D_login-run%2Fwebscrcmd%3D_account-run%2Fupdates-paypal%2Fconfirm-paypal%2F HTTP/1.1" 200 0 "
http://70.86.17.34:2082/fronte...paypalupdate_reviewprice.co.cc " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
41.233.43.72 - izaclick [09/24/2008:07:02:04 -0000] "GET /frontend/x/subdomain/index.html HTTP/1.1" 200 0 "
http://70.86.17.34:2082/fronte...tes-paypal%2Fconfirm-paypal%2F " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
Thank You,
Chris Dixon
Network Security Division
866-964-2867 (General Support)
281-476-7801 (Abuse/Security Fax)
Your feedback is extremely important to us. Please rate this response at the URL below:
ผมจะทำยังไงดีครับ
แสดงกระทู้
