Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> RN v2.20.00 - All Issues
Author Message
mds
Client


Joined: Dec 24, 2004
Posts: 194
Location: Michigan

PostPosted: Tue Apr 22, 2008 8:47 pm Reply with quote

to me it looks like a hack attempt ...too me anytime an sql query shows an insert or update then my assumption woould be correct right unless it was me of course...and theres somewhere around 2475 lines of this all from the same IP and sentinal did not catch it either..i see they tried again today..see the date stamp in the last code box

dblog file shows multiple attempts of
Code:
April 18, 2008, 12:51 pm 2006 : MySQL server has gone away

SQL was: UPDATE nuke_counter SET count=count+1 WHERE (type='total' AND var='hits') OR (var='Other' AND type='browser') OR (var='Other' AND type='os')
 remote addr: 131.107.151.157




Code:
April 18, 2008, 12:51 pm 2006 : MySQL server has gone away

SQL was: SELECT year FROM nuke_stats_year WHERE year='2008'
 remote addr: 131.107.151.157


Code:
April 18, 2008, 12:51 pm 2006 : MySQL server has gone away

SQL was: INSERT INTO nuke_stats_year VALUES ('2008','0')
 remote addr: 131.107.151.157


Code:
April 18, 2008, 12:51 pm 2006 : MySQL server has gone away

SQL was: INSERT INTO nuke_stats_date VALUES ('2008','1','1','0')
 remote addr: 131.107.151.157


Code:
April 18, 2008, 12:51 pm 2006 : MySQL server has gone away

SQL was: INSERT INTO nuke_stats_hour VALUES ('2008','04','18','11','0')
 remote addr: 131.107.151.157


Code:
April 22, 2008, 4:13 pm 2006 : MySQL server has gone away

SQL was: UPDATE nuke_stats_hour SET hits=hits+1 WHERE (year='2008') AND (month='04') AND (date='22') AND (hour='16')
 remote addr: 131.107.151.157
 
View user's profile Send private message
evaders99
Former Moderator in Good Standing


Joined: Apr 30, 2004
Posts: 3221

PostPosted: Tue Apr 22, 2008 8:54 pm Reply with quote

AS far as I can tell, it is just updating the stats used for the Statistics module. Maybe multiple attempts by the script because "MySQL server has gone away"

_________________
- Only registered users can see links on this board! Get registered or login! -

Need help? Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
mds
PostPosted: Tue Apr 22, 2008 8:58 pm Reply with quote

hmm ok each statement does show an incremented number or sets of numbers and the ip comes back as microsoft so maybe it was a bot/crawler looking around ?

not sure why the db wouldve been unavailable tho
 
sting
Involved
Involved


Joined: Sep 23, 2003
Posts: 456
Location: Somewhere out there...

PostPosted: Wed Apr 23, 2008 9:07 am Reply with quote

More than likely a bot or series of bots - I have never heard of someone attempting to hack a site by adding to its stats... unless someone wanted you to think your site was visited more than it actually was...

-sting

_________________
You see - I told you I wasn't paranoid. They were really out to get me. 
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number
mds
PostPosted: Wed Apr 23, 2008 6:50 pm Reply with quote

thanks for the replies much appreciated
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> RN v2.20.00 - All Issues

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©