Serverlog prüfen - 11.11.2012

Kategorie: gehackt?
Erstellt: Donnerstag, 17. Januar 2013 23:27
Zuletzt aktualisiert: Donnerstag, 28. März 2013 17:45
Geschrieben von Martina Major

189.24.43.200 - - [10/Nov/2012:06:58:16 +0100] "GET //index.php?option=com_garyscookbook&func=newItem HTTP/1.1" 301 633 "-" "-"
189.24.43.200 - - [10/Nov/2012:06:58:17 +0100] "GET /component/option,com_garyscookbook/func,newItem/lang,de/ HTTP/1.1" 200 49061 "-" "-"
66.249.66.98 - - [10/Nov/2012:07:00:09 +0100] "GET /aktuelles/Page-5.htm HTTP/1.1" 200 5843 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
189.24.43.200 - - [10/Nov/2012:07:01:35 +0100] "GET //index.php?option=com_garyscookbook&func=newItem HTTP/1.1" 301 678 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:35 +0100] "GET /component/option,com_garyscookbook/func,newItem/lang,de/ HTTP/1.1" 200 12170 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:37 +0100] "GET /components/com_garyscookbook/themes/theme1//css/gcbmain.css HTTP/1.1" 200 1743 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:37 +0100] "GET /media/system/css/modal.css HTTP/1.1" 200 977 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:37 +0100] "GET //components/com_garyscookbook/assets/js/product_attributes.js HTTP/1.1" 200 1597 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:37 +0100] "GET /media/system/js/modal.js HTTP/1.1" 200 3599 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:38 +0100] "GET /templates/system/css/general.css HTTP/1.1" 200 1305 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:38 +0100] "GET /templates/mm_gruenewiese_a2/css/template.css HTTP/1.1" 200 2189 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:38 +0100] "GET /templates/mm_gruenewiese_a2/css/position.css HTTP/1.1" 200 935 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:38 +0100] "GET /templates/mm_gruenewiese_a2/css/galery.css HTTP/1.1" 200 1388 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:39 +0100] "GET /templates/system/css/system.css HTTP/1.1" 200 1062 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:37 +0100] "GET /plugins/system/mtupgrade/mootools.js HTTP/1.1" 200 34518 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:38 +0100] "GET /plugins/editors/tinymce/jscripts/tiny_mce/tiny_mce.js HTTP/1.1" 200 58203 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:43 +0100] "GET /plugins/editors/tinymce/jscripts/tiny_mce/langs/de.js HTTP/1.1" 200 2511 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:43 +0100] "GET /plugins/editors/tinymce/jscripts/tiny_mce/themes/advanced/editor_template.js HTTP/1.1" 200 7759 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:44 +0100] "GET /plugins/editors/tinymce/jscripts/tiny_mce/themes/advanced/langs/de.js HTTP/1.1" 200 1543 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:45 +0100] "GET /templates/mm_gruenewiese_a2/images/gruene_wiese_oben.png HTTP/1.1" 200 6625 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:45 +0100] "GET /templates/mm_gruenewiese_a2/images/gb1_zu.gif HTTP/1.1" 200 1405 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:45 +0100] "GET /images/stories/gb_blank.png HTTP/1.1" 200 887 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:45 +0100] "GET /templates/mm_gruenewiese_a2/images/gruene_wiese_mitte.png HTTP/1.1" 200 3645 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:45 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/de.png HTTP/1.1" 200 1038 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:45 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/unknown.png HTTP/1.1" 200 746 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:45 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/us.png HTTP/1.1" 200 1102 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:46 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/at.png HTTP/1.1" 200 896 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:45 +0100] "GET /templates/mm_gruenewiese_a2/images/wiese.png HTTP/1.1" 200 62098 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:45 +0100] "GET /templates/mm_gruenewiese_a2/images/alles_fliegt_66.png HTTP/1.1" 200 17298 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:47 +0100] "GET //index.php?option=com_garyscookbook&func=newItem HTTP/1.1" 301 591 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:47 +0100] "GET /component/option,com_garyscookbook/func,newItem/lang,de/ HTTP/1.1" 200 12170 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:49 +0100] "GET /templates/mm_gruenewiese_a2/images/wiese.png HTTP/1.1" 206 549 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:49 +0100] "GET /templates/mm_gruenewiese_a2/images/alles_fliegt_66.png HTTP/1.1" 206 547 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:49 +0100] "GET /templates/mm_gruenewiese_a2/images/gruene_wiese_mitte.png HTTP/1.1" 200 3646 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:49 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/de.png HTTP/1.1" 200 1039 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:49 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/unknown.png HTTP/1.1" 200 746 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/us.png HTTP/1.1" 200 1102 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/ru.png HTTP/1.1" 200 913 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/fr.png HTTP/1.1" 200 1039 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/nl.png HTTP/1.1" 200 946 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/uk.png HTTP/1.1" 200 1108 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/ua.png HTTP/1.1" 200 940 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/at.png HTTP/1.1" 200 896 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_joomlastats/images/tld-png-16x11-1/lv.png HTTP/1.1" 200 958 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /images/stories/valid-rss-rogers.png HTTP/1.1" 404 791 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:51 +0100] "GET /components/com_garyscookbook/themes/theme1/images/de-DE.tn_nopicture.jpg HTTP/1.1" 200 6936 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:51 +0100] "GET /components/com_garyscookbook/themes/theme1/images/info_29.png HTTP/1.1" 200 1254 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:51 +0100] "GET /components/com_garyscookbook/themes/theme1/images/logo_small.jpg HTTP/1.1" 200 2818 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_garyscookbook/themes/theme1/images/de-DE.nopicture.jpg HTTP/1.1" 200 15622 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:52 +0100] "GET /images/logo-major-webdesign.png HTTP/1.1" 200 3177 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:52 +0100] "GET /images/major-online-logo30x29.png HTTP/1.1" 200 3247 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:52 +0100] "GET /plugins/editors/tinymce/jscripts/tiny_mce/themes/advanced/skins/default/ui.css HTTP/1.1" 200 3458 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /components/com_garyscookbook/themes/theme1/images/home.gif HTTP/1.1" 200 32374 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:53 +0100] "GET /plugins/editors/tinymce/jscripts/tiny_mce/themes/advanced/skins/default/content.css HTTP/1.1" 200 1110 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:53 +0100] "GET /templates/system/css/editor.css HTTP/1.1" 200 995 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:53 +0100] "GET /templates/mm_gruenewiese_a2/images/gb1_ani.gif HTTP/1.1" 200 11653 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:54 +0100] "GET /images/stories/valid-rss-rogers.png HTTP/1.1" 404 791 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:54 +0100] "GET /templates/system/images/j_button2_left.png HTTP/1.1" 200 903 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:54 +0100] "GET /templates/system/images/j_button2_blank.png HTTP/1.1" 200 891 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:50 +0100] "GET /templates/mm_gruenewiese_a2/images/wiese.png HTTP/1.1" 206 81763 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:55 +0100] "GET /templates/mm_gruenewiese_a2/images/gruene_wiese_unten.png HTTP/1.1" 200 4366 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:55 +0100] "GET /plugins/editors/tinymce/jscripts/tiny_mce/themes/advanced/img/icons.gif HTTP/1.1" 200 12001 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:01:53 +0100] "GET /templates/mm_gruenewiese_a2/images/alles_fliegt_66.png HTTP/1.1" 206 204949 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:02 +0100] "GET /favicon.ico HTTP/1.1" 200 1841 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:06 +0100] "POST /component/option,com_garyscookbook/func,newItem/lang,de/index.php HTTP/1.1" 200 1956 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:14 +0100] "GET /components/com_garyscookbook/themes/theme1/images/new.png HTTP/1.1" 200 929 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/index.php" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:15 +0100] "GET /index.php?option=com_garyscookbook&func=detail&id=110 HTTP/1.1" 301 596 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/index.php" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:15 +0100] "GET /component/option,com_garyscookbook/func,detail/id,110/lang,de/ HTTP/1.1" 200 7283 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,newItem/lang,de/index.php" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:17 +0100] "GET /images/stories/valid-rss-rogers.png HTTP/1.1" 404 792 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,detail/id,110/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:17 +0100] "GET /components/com_garyscookbook/themes/theme1/images/arrow.png HTTP/1.1" 200 662 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,detail/id,110/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:17 +0100] "GET /components/com_garyscookbook/themes/theme1/images/prev_d.png HTTP/1.1" 200 890 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,detail/id,110/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:17 +0100] "GET /components/com_garyscookbook/themes/theme1/images/next_d.png HTTP/1.1" 200 889 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,detail/id,110/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:17 +0100] "GET /images/M_images/printButton.png HTTP/1.1" 200 873 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,detail/id,110/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:17 +0100] "GET /components/com_garyscookbook/themes/theme1/images/pdf_button.png HTTP/1.1" 200 1076 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,detail/id,110/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:17 +0100] "GET /components/com_garyscookbook/img_pictures/aefaef-110-HP-0.orion HTTP/1.1" 200 2962 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,detail/id,110/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:18 +0100] "GET /components/com_garyscookbook/themes/theme1/images/idx.png HTTP/1.1" 200 1957 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,detail/id,110/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:18 +0100] "GET /components/com_garyscookbook/themes/theme1/images/point_kl.png HTTP/1.1" 200 1445 "http://sub.meine-domain.de/component/option,com_garyscookbook/func,detail/id,110/lang,de/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"
189.24.43.200 - - [10/Nov/2012:07:02:20 +0100] "GET /components/com_garyscookbook/img_pictures/w.php.orion HTTP/1.1" 404 809 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11"

Serverlog prüfen

Kategorie: gehackt?
Erstellt: Donnerstag, 17. Januar 2013 21:00
Zuletzt aktualisiert: Donnerstag, 17. Januar 2013 22:43
Geschrieben von Martina Major

Da ich nun wusste, wann die Datei auf den Server gekommen war, konnte ich in den ServerLogs die entsprechende Zeit eingrenzen:

41.129.177.66 - - [14/Jan/2013:13:37:22 +0100] "GET //components/com_garyscookbook/img_pictures/belo-130-HP-0.php ...
41.129.177.66 - - [14/Jan/2013:13:37:52 +0100] "POST //components/com_garyscookbook/img_pictures/belo-130-HP-0.php HTTP/1.1" 200 557 ...

Die Datei belo-130_HP-0-php hat per "POST" die Datei xb.php hochgeladen.

41.129.177.66 - - [14/Jan/2013:13:38:35 +0100] "GET //components/com_garyscookbook/img_pictures/xb.php HTTP/1.1" 200 4679 ...

Die Datei xb.php wurde dann mit diversen Verzeichnissen getestet.
Ca. 3 Minuten später war die bel.php im Images-Verzeichnis und wurde auch sofort abgerufen.

 

Stellt sich noch die Frage, wie ist doe belo-130-HP-0.php auf den Server gekommen?

Wann? Am 12.01.2013 um 22:03 mit einem Eintrag eines Rezeptes wurde ein Bild hochgeladen.

^