アクセスログを確認していたらこのWordPressへの攻撃を確認しましたので載せておきます。
要求元は
IP:62.212.73.98
名前:lw338.ua-hosting.com.ua
オランダからのアクセスの様です。
ユーザーエージェントは
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0
でした。
たぶん仕込まれた手動ではないプログラムでしょう。
この攻撃ではプラグインの不具合を狙っているようです。
/BLOGPath
/BLOGPath/
/BLOGPath/wp-content/plugins/contact-form-7/wp-contact-form-7.php
/BLOGPath/wp-content/plugins/1-flash-gallery/upload.php
/BLOGPath/wp-content/plugins/ajax_multi_upload/upload.php
/BLOGPath/wp-content/plugins/bulletproof-security/admin/uploadify/uploadify.php
/BLOGPath/wp-content/plugins/comments_plugin/uploadify/uploadify.php
/BLOGPath/wp-content/plugins/doptg/libraries/php/uploadify.php
/BLOGPath/wp-content/plugins/foxypress/uploadify/uploadify.php
/BLOGPath/wp-content/plugins/html5avmanager/lib/uploadify/custom.php
/BLOGPath/wp-content/plugins/image-symlinks/uploadify/uploadify.php
/BLOGPath/wp-content/plugins/mm-forms-community/includes/doajaxfileupload.php
/BLOGPath/wp-content/plugins/pods/js/uploadify.php
/BLOGPath/wp-content/plugins/wp-crm/third-party/uploadify/uploadify.php
/BLOGPath/wp-content/plugins/wp-property/third-party/uploadify/uploadify.php
/BLOGPath/wp-content/plugins/wp-symposium/uploadify/uploadify.php
/BLOGPath/wp-content/plugins/wpmarketplace/uploadify/uploadify.php
/BLOGPath/wp-content/plugins/uploader/uploadify.php
/BLOGPath/wp-content/plugins/uploadify/includes/process_upload.php
/BLOGPath/wp-content/plugins/very-simple-post-images/uploadify/uploadify.php
/BLOGPath/wp-content/plugins/easy-comment-uploads/upload-form.php
/BLOGPath/wp-content/plugins/radykal-fancy-gallery/admin/image-upload.php
/BLOGPath/wp-content/plugins/wpstorecart/php/upload.php
/BLOGPath/wp-content/plugins/gallery-plugin/upload/php.php
/BLOGPath/wp-content/plugins/font-uploader/font-upload.php
/BLOGPath/wp-content/plugins/complete-gallery-manager/frames/upload-images.php
/BLOGPath/wp-content/plugins/page-flip-image-gallery/upload.php
/BLOGPath/wp-content/plugins/advanced-custom-fields/core/actions/export.php
/BLOGPath/wp-content/plugins/wp-e-commerce/wpsc-admin/display-sales-logs.php
/BLOGPath/wp-content/plugins/lazy-seo/lazyseo.php
/BLOGPath/wp-content/plugins/ckeditor-for-wordpress/includes/upload.php
/BLOGPath/wp-content/plugins/wp-mailinglist/vendors/uploadify/upload.php
/BLOGPath/wp-content/plugins/global-flash-galleries/swfupload.php