benny148148
Member
Posted 15 years ago #
I've been getting a lot of errors lately with the following two lines.
Is somebody trying to hack my site? If so, how can I stop this? I don't have either of these two plugins...
[error] [client 198.53.80.13] script '/public_html/mediaHolder.php' not found or unable to stat, referer: http://www.google.com/
[error] [client 198.53.80.13] script '/public_html/wp-content/plugins/Enigma2.php' not found or unable to stat, referer: http://www.google.com/
are they always from the same IP?
I think someone is google searching and google is pointing them to something that doesn't exist
benny148148
Member
Posted 15 years ago #
Nope, three different days, three different IPs...I've banned all three of them obviously, but I don't know why my site would show up on a google search for those plugins...I've never even heard of them
VentureMaker
Member
Posted 15 years ago #
these are bots scanning the new for known vulnerable scripts I guess...
benny148148
Member
Posted 15 years ago #
I guess my questino then is how do they find my site? I removed the meta heading...so view-->source doesn't even mention WordPress...is this pretty common across most MU sites?
VentureMaker
Member
Posted 15 years ago #
Did you ban Google and other search engine bots?
Did you turn off 'pings' and 'pingbacks' on new posts?
If not - here's the answer :)
benny148148
Member
Posted 15 years ago #
I don't believe I did...I'm not quite sure how to ban search engine bots to be honest...care to tell? :)
I do have pings and pingbacks turned off though
VentureMaker
Member
Posted 15 years ago #
benny148148
Member
Posted 15 years ago #
Thanks VentureMaker! I guess my only question now is will banning search engine bots have any impact on how my site gets indexed in search engines?
VentureMaker
Member
Posted 15 years ago #
If you ban search engine bots - they will of course not index your website :)
But keep in mind that for example Google has indexing cache, and if your website has EVER been indexed by Google - chances are that it'll stay in cache.
http://labnol.blogspot.com/2005/09/clear-google-web-cache-delete-404.html
I can't pull up a working whois from here but I don't think that's a Google IP address.
If it was a Google IP, I'm sure folks would have talked about it more than twice.
benny148148
Member
Posted 15 years ago #
IP is from Telus Communications in Canada
IP Address 198.53.80.13
Host d198-53-80-13.abhsia.telus.net
Location CA CA, Canada
City Edmonton, AB -
Organization Telus Communications
ISP Telus Communications
AS Number AS852
Latitude 53°55'00" North
Longitude 113°50'00" West
Distance 8549.10 km (5312.17 miles)
I'm inclined to think there's a stray link to one, either, or both of those, the search engines cached it, and people are following the results.