[Closed]: Is this a hacker? (logs included)

[Edgar Fletcher]

What are these guys up to? I suspect no good.

from access log:

125.122.24.181 - - [17/Jun/2009:02:25:16 -0400] "POST /db_input.php HTTP/1.1" 417 819 "http://www.mydomain.com/db_input.php" "-"
125.122.24.181 - - [17/Jun/2009:02:35:27 -0400] "POST /db_input.php HTTP/1.1" 417 819 "http://www.mydomain.com/db_input.php" "-"
125.122.24.181 - - [17/Jun/2009:03:09:38 -0400] "POST /db_input.php HTTP/1.1" 417 819 "http://www.mydomain.com/db_input.php" "-"

125.120.139.246 - - [17/Jun/2009:11:53:34 -0400] "POST /db_input.php HTTP/1.1" 417 819 "http://www.mydomain.com/db_input.php" "-"

[Joachim Müller]

Post even less information. We're mind-readers. Our capabilities are amazing. We'll look into our magic crystal balls and will tell you in an instant. Please just wait your turn. The next available psychic will look into your issues. Please stand by. Beep.
If you don't want to wait, post the real content of your log and a link to your gallery (minimum!).

[Edgar Fletcher]

Ok.

I get some activity on my gallery which causes me to be suspicious; what is it?

Now get real. I obfuscated my domain in the log segment because it matters not what the site is ... the hits to the php files are what is in question. My site is always updated to the latest version. Are you always so accommodating? If you don't know the answer to the question, simply ignoring the thread would have been better than your flippant response.  I am in my sixth year of using Coppermine ... never had to ask a question before, and you can be sure I will not do it again. Feel free to ban my username.

[François Keller]

If you don't know the answer to the question, simply ignoring the thread would have been better than your flippant response

Joachim told you to give us the real content of your log, and a link to your galerie so we can have a better idea to help you.

I am in my sixth year of using Coppermine ... never had to ask a question before, 

nice to see you have no problems in six years, it's surely because Coppermine is an amazing script, simple to use...

and you can be sure I will not do it again. Feel free to ban my username.

It's your choice...

[Joachim Müller]

I obfuscated my domain in the log segment because it matters not what the site is ...

It matters must. It's of utmost importance. We need to see it to advice anything. That's why I asked for it. It's you who has been posting aq "flippant response" and I have really no idea why we should bother dealing with people like you who come here and drop their question without showing any respect to the rules that exist on this board. If you're invited into someone else's house, do you always pee on the carpet first?

My site is always updated to the latest version.

Maybe you should leave that to supporters to decide.

If you don't know the answer to the question

There can be no answer to your question with so little information. You need to post more information to enable others to help you. That's what I said, nothing else.

Feel free to ban my username.

We don't ban people lightheartedly. We ban people because they misbehave dramatically. So far, you only have misbehaved sightly. Let's end this discussion and the silly accusations and return to your issues instead if you still need help. If you don't need help, then fine - stay away.

[Edgar Fletcher]

Joachim,

It may be a good idea to take some time off from supporting Coppermine. Do a quick survey of your recent responses to requests from real users. It is not a good indicator when a project manager singes users for asking questions. For example, why would you chastise a user for installing an old version?  An appropriate response may be along the lines of,

"Thanks for using Coppermine, but unfortunately, the version you are using is quite old. Click on this link to download and install the latest version. I'll be happy to address your questions about the current version."

I am a former support person. I know the strains. Take some rest. Coppermine is a great product! Let's not let fatigue scare future users away!

Edgar

[Joe Carver]

@  Edgar Fletcher

Check these links:

• http://forum.coppermine-gallery.net/index.php/topic,55415.0.html
• http://forum.coppermine-gallery.net/index.php/topic,55415.msg270616.html#msg270616

The obvious answer to your silly (IMO) question probably could have been found by searching the support
forum, Google or one of the security sites.

Response to a post or question isn't always dependent on knowledge With free support, freedom of choice
is the responder's option.

[Fabricio Ferrero]

@Edgar Fletcher: Despite that you broke some rules, let's says that you didn't. More than half of the issue that are posted here may solve with an upgrade. And, of course, you would stop some noob hack your site. Read again what you quoted... does any of the words sound bad?

Or it was kindly asking for a requirement needed to be allowed to post?

If you were hacked, I'm 99% sure that you was not running the last stable version. Please, post a link and you will have support accordingly.

[Joachim Müller]

This is leading nowhere - Edgar, take this as an appreciation of your efforts: <°)))o><
Locking.