SITO BLOCCATO

[nik8989]

Salve,
ho ricevuto questa email dal mio server. Non essendo affatto esperto vorrei capire come devo procedere.
Grazie mille a tutti


Gentile Cliente,[/size]abbiamo bloccato in via preventiva il sito "aaaaa.com[/s]" perchè contenente delle vulnerabilità nella sua struttura che vengono utilizzate per caricare ed inviare email di spam.La preghiamo di verificare con il suo sviluppatore queste vulnerabilità:212.227.135.10 - - [01/Mar/2014:07:28:32 +0100] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1" 200 24324 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:28:32 +0100] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20 HTTP/1.1" 200 23922 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:28:32 +0100] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1" 200 24324 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:28:34 +0100] "POST /component/option,com_sefservicemap/Itemid,135/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20 HTTP/1.1" 200 24101 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:28:34 +0100] "POST /component/option,com_sefservicemap/Itemid,135/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1" 200 24503 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:28:35 +0100] "POST /component/option,com_sefservicemap/Itemid,135/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20 HTTP/1.1" 200 24101 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:28:35 +0100] "POST /component/option,com_sefservicemap/Itemid,135/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1" 200 24503 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:28:45 +0100] "GET /images/stories/food.php?rf HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6"212.227.135.10 - - [01/Mar/2014:07:28:47 +0100] "GET /component/option,com_sefservicemap/Itemid,135/images/stories/food.php?rf HTTP/1.1" 200 38484 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6"83.233.11.7 - - [01/Mar/2014:07:37:36 +0100] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1" 200 24324 "-" "BOT/0.1 (BOT for JCE)"83.233.11.7 - - [01/Mar/2014:07:38:00 +0100] "GET //images/stories/explore.gif HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6"83.233.11.7 - - [01/Mar/2014:07:38:01 +0100] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1" 200 24324 "-" "BOT/0.1 (BOT for JCE)"83.233.11.7 - - [01/Mar/2014:07:38:18 +0100] "GET /component/option,com_sefservicemap/Itemid,135//images/stories/explore.gif HTTP/1.1" 200 38448 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6"212.227.135.10 - - [01/Mar/2014:07:39:16 +0100] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20 HTTP/1.1" 200 23922 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:39:16 +0100] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1" 200 24324 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:39:16 +0100] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20 HTTP/1.1" 200 23922 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:39:16 +0100] "POST /index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1" 200 24324 "-" "BOT/0.1 (BOT for JCE)"212.227.135.10 - - [01/Mar/2014:07:39:25 +0100] "GET /images/stories/food.php?rf HTTP/1.1" 200 656 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6"5.35.243.107 - - [01/Mar/2014:18:00:33 +0100] "POST //administrator/components/com_maianmedia/utilities/charts/php-ofc-library/ofc_upload_image.php?name=lobex21.php HTTP/1.1" 200 840 "-" "libwww-perl/6.03"5.35.243.107 - - [01/Mar/2014:18:00:34 +0100] "POST //administrator/components/com_jnews/includes/openflashchart/php-ofc-library/ofc_upload_image.php?name=lobex21.php HTTP/1.1" 200 844 "-" "libwww-perl/6.03"[/size][/color]

[maxzilla]

Ciao
prova ad aggiornare l'editor Jce, vediamo se e' sufficiente

[nik8989]

Come faccio? ho una versione vecchissima di joomla (che ora non ricordo) e tra l'altro non posso accedere al sito nemmeno dal lato admin perchè è tutto bloccato.
devo farlo da ftp?

[maxzilla]

Meglio se ti fai dare l'ultimo backup funzionante del sito, e poi aggiorni sia joomla che jce ed altre eventuali estensioni vulnerabili.

[giusebos]

datei una mano a mantenere pulito ed in ordine

titoli in minuscolo
codice nei tag code