Advertisement:
« previous next »
Pages: 1 2 [3] 4

Author Topic: Suspicious activity  (Read 3833 times)

marius-ciclistu

  • issues
  • Hero Member
  • *
  • Posts: 1652
  • "BE GRATEFUL TO THOSE THAT SUPPORTED YOU"
Re: Suspicious activity
« Reply #30 on: July 26, 2017, 01:17:43 pm »
Quote from: theinvisible on July 26, 2017, 01:08:57 pm
i'm posting last 3 lines here

ip - - [25/Jul/2017:09:15:10 -0400] "GET / HTTP/1.1" 200 38463 "http://www.mysite.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:54.0) Gecko/20100101 Firefox/54.0"
ip - - [25/Jul/2017:09:15:14 -0400] "GET /user/register HTTP/1.1" 200 23514 "http://www.mysite.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:54.0) Gecko/20100101 Firefox/54.0"
ip - - [25/Jul/2017:09:15:14 -0400] "POST / HTTP/1.1" 200 - "Osclass (v.373)" "-"

These are your logins, right?
But this is not an error log.
Logged

Aficionado

  • Guest
Re: Suspicious activity
« Reply #31 on: July 26, 2017, 01:24:28 pm »
Quote from: marius-ciclistu on July 26, 2017, 01:15:50 pm
Quote from: Aficionado on July 26, 2017, 01:07:05 pm
I have never seen a GZ log file. WHY GZ ?
For example my host archivates the logs once in a while.

Sure, i though a DEBUG.lOG GZ.
Logged

marius-ciclistu

  • issues
  • Hero Member
  • *
  • Posts: 1652
  • "BE GRATEFUL TO THOSE THAT SUPPORTED YOU"
Re: Suspicious activity
« Reply #32 on: July 26, 2017, 01:26:02 pm »
Quote from: Aficionado on July 26, 2017, 01:24:28 pm
Quote from: marius-ciclistu on July 26, 2017, 01:15:50 pm
Quote from: Aficionado on July 26, 2017, 01:07:05 pm
I have never seen a GZ log file. WHY GZ ?
For example my host archivates the logs once in a while.

Sure, i though a DEBUG.lOG GZ.

He checked the 1st option exposed by me, not the debug one.
Logged

theinvisible

  • Sr. Member
  • ****
  • Posts: 311
Re: Suspicious activity
« Reply #33 on: July 26, 2017, 01:27:47 pm »
Quote from: marius-ciclistu on July 26, 2017, 01:17:43 pm
Quote from: theinvisible on July 26, 2017, 01:08:57 pm
i'm posting last 3 lines here

ip - - [25/Jul/2017:09:15:10 -0400] "GET / HTTP/1.1" 200 38463 "http://www.mysite.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:54.0) Gecko/20100101 Firefox/54.0"
ip - - [25/Jul/2017:09:15:14 -0400] "GET /user/register HTTP/1.1" 200 23514 "http://www.mysite.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:54.0) Gecko/20100101 Firefox/54.0"
ip - - [25/Jul/2017:09:15:14 -0400] "POST / HTTP/1.1" 200 - "Osclass (v.373)" "-"

These are your logins, right?
But this is not an error log.

I don't see an error log file in my logs folder.
Logged

marius-ciclistu

  • issues
  • Hero Member
  • *
  • Posts: 1652
  • "BE GRATEFUL TO THOSE THAT SUPPORTED YOU"
Re: Suspicious activity
« Reply #34 on: July 26, 2017, 01:29:56 pm »
Enable the debug php in osclass then.
Logged

theinvisible

  • Sr. Member
  • ****
  • Posts: 311
Re: Suspicious activity
« Reply #35 on: July 26, 2017, 01:31:50 pm »
Quote from: marius-ciclistu on July 26, 2017, 01:29:56 pm
Enable the debug php in osclass then.

enabled and i got this one

[26-Jul-2017 14:31:12 Asia/Kolkata] PHP Fatal error:  Call to a member function result() on boolean in /home/graffitt/public_html/oc-content/plugins/spamprotection/classes/class.spamprotection.php on line 1373
[26-Jul-2017 14:31:22 Asia/Kolkata] PHP Fatal error:  Call to a member function numRows() on boolean in /home/graffitt/public_html/oc-content/plugins/spamprotection/classes/class.spamprotection.php on line 1313
Logged

theinvisible

  • Sr. Member
  • ****
  • Posts: 311
Re: Suspicious activity
« Reply #36 on: July 26, 2017, 01:32:31 pm »
i think it is an error with spam protection plugin
Logged

marius-ciclistu

  • issues
  • Hero Member
  • *
  • Posts: 1652
  • "BE GRATEFUL TO THOSE THAT SUPPORTED YOU"
Re: Suspicious activity
« Reply #37 on: July 26, 2017, 01:33:59 pm »
Try to login via proxy with another ip. (you can use tor browser for that)
Logged

theinvisible

  • Sr. Member
  • ****
  • Posts: 311
Re: Suspicious activity
« Reply #38 on: July 26, 2017, 01:38:42 pm »
I tried to login using a different computer and different net connection. but everything is still the same.
Logged

marius-ciclistu

  • issues
  • Hero Member
  • *
  • Posts: 1652
  • "BE GRATEFUL TO THOSE THAT SUPPORTED YOU"
Re: Suspicious activity
« Reply #39 on: July 26, 2017, 01:39:57 pm »
My knowledge ends here in this regard...for shure others will help.
Logged

theinvisible

  • Sr. Member
  • ****
  • Posts: 311
Re: Suspicious activity
« Reply #40 on: July 26, 2017, 01:41:35 pm »
Quote from: marius-ciclistu on July 26, 2017, 01:39:57 pm
My knowledge ends here in this regard...for shure others will help.

its ok.. thank you bro..  :)
Logged

Aficionado

  • Guest
Re: Suspicious activity
« Reply #41 on: July 26, 2017, 01:43:23 pm »
For now, connect via ftp and delete the spam plugin. And then check if that was the only problem. Can you login?
Logged

theinvisible

  • Sr. Member
  • ****
  • Posts: 311
Re: Suspicious activity
« Reply #42 on: July 26, 2017, 01:53:53 pm »
Quote from: Aficionado on July 26, 2017, 01:43:23 pm
For now, connect via ftp and delete the spam plugin. And then check if that was the only problem. Can you login?

yes. now i logged in successfully..
Logged

Aficionado

  • Guest
Re: Suspicious activity
« Reply #43 on: July 26, 2017, 01:57:11 pm »
Ok, was that an old version of the Spam Plugin or 1.7, do you recall ?
Logged

theinvisible

  • Sr. Member
  • ****
  • Posts: 311
Re: Suspicious activity
« Reply #44 on: July 26, 2017, 02:01:30 pm »
i don't remember.. but i just copied that files into my computer before deleting it. do you want me to upload it here?
Logged
Pages: 1 2 [3] 4
« previous next »