dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
1723
GraysonPeddi
Grayson Peddie
join:2010-06-28
Tallahassee, FL
Ubiquiti EdgeRouter PoE
Ubiquiti UniFi AP-AC

GraysonPeddi

Member

404 - Result: Used Self-Learning System Data? Nickname?

I once find something interesting when I setup 404 email alert in my WordPress theme's 404.php page (my own custom theme):

TIME: September 25th 2013, 12:12pm
*404: http: // graysonpeddie.com/my-dream-travel-to-a-world-of-the-future/+Result:+used+self-learning+system+data;+chosen+nickname+%22jpkmsrxo5%22;+sent;
SITE: http://graysonpeddie.com/
REFERRER: http: // graysonpeddie.com/my-dream-travel-to-a-world-of-the-future/+Result:+used+self-learning+system+data;+chosen+nickname+%22jpkmsrxo5%22;+sent;
QUERY STRING: 
REMOTE ADDRESS: 192.187.119.21X
REMOTE IDENTITY: undefined
USER AGENT: Opera/9.80 (Windows NT 6.2; WOW64) Presto/2.12.388 Version/12.11
 

(Space added around double slashes to prevent link-clicking so clicking in the referrer link will result in a 404 not found.)

Now I have a question with a code below:

+Result:+used+self-learning+system+data;+chosen+nickname+%22jpkmsrxo5%22;+sent;
 

What could this mean? 404 and REFERRER does look pretty much the same. I must assume that some script kiddie must be trying to hack my website.

I am unsure if this has something to do with my webpage...

»graysonpeddie.com/my-dre ··· -future/

justin
..needs sleep
Mod
join:1999-05-28
2031
Billion BiPAC 7800N
Apple AirPort Extreme (2011)

1 edit

justin

Mod

If you do a google you will find hundreds (thousands?) of these URLs recorded. It isn't new, I see them from 2012.

It appears to be a wordpress posting SEO bot called XRumer

It is incorrectly leaving its diagnostics. It is leaving these URLs everywhere because it is fetching them, and fetching them can mean some sites record them, especially if the URLs are not 404 they leak into the wild and then into google.

For example:
http://liuhaob5.wordpress.com/2011/09/26/how-to-use-the-nds-r4-r4r4ir4i-ds/

[ Activation ] Result: used self-learning system data; chosen nickname "liupingkaka"; profile edited; logged in; success (profile was registered successfully, but there is no permissions for creating new topic); BB-code not working;
 
Result: used self-learning system data; captcha decoded (3 attempts); success %u2013 posted to "mero tax";
 
Result: used self-learning system data; captcha recognized; registered (100%); profile edited; logged in; success %u2013 posted to "Talk Shit";
 
Result: used self-learning system data; captcha recognized; registered (100%); profile edited; logged in; success %u2013 posted to first encountered partition "Rules"; (reply to topic);
 
Result: used self-learning system data; captcha recognized; registered (100%); profile edited; logged in; success %u2013 posted to "Your first forum";
 
Result: used self-learning system data; registered (100%); logged in; success %u2013 posted to "General Gaming Discussion";
 
 

»en.wikipedia.org/wiki/XRumer
justin

justin

Mod

Click for full size
Click for full size
Yours for the low low price of $650

wow there is a lot of money in making pick-axes for gold miners.
GraysonPeddi
Grayson Peddie
join:2010-06-28
Tallahassee, FL
Ubiquiti EdgeRouter PoE
Ubiquiti UniFi AP-AC

1 edit

GraysonPeddi to justin

Member

to justin
Thanks for letting me know about XRumer. I'm using Growmap Anti-Spambot Plugin and I'm unsure if that is the cause of 404 error for XRumer.

Heh, here comes another wave of 404 errors dealing with FCKEditor which I do not have. Heh heh.

Stupid bots.

And I don't have Simple Dropbox Upload Plugin installed in WordPress. Looks like someone is trying to scan for unpatched vulnerability, no? Okay, I digressed. At least I'm keeping WordPress up-to-date including plugins.