Skip to:
Content
Pages
Categories
Search
Top
Bottom

Server overloaded. SQL injection and BP in logs

  • @vaarsn

    Participant

    Hi guys,

    I have a very big problem on the server. A couple days ago my WP database probably got sql injection. All the time powerful server is loaded as it’s possible to be loaded: 100% CPU usage, and no free RAM. I had checked apache logs and that is what I found:

    [Thu Feb 06 03:29:39 2014] [error] [client 179.43.137.110] WordPress database error Table 'eightlan_eightlan.wp_bp_activity_meta' doesn't exist for query SELECT activity_id, meta_key, meta_value FROM wp_bp_activity_meta WHERE activity_id IN (114846) made by require('wp-blog-header.php'), require_once('wp-includes/template-loader.php'), do_action('template_redirect'), call_user_func_array, bp_template_redirect, do_action('bp_template_redirect'), call_user_func_array, bp_screens, do_action('bp_screens'), call_user_func_array, bp_activity_screen_single_activity_permalink, bp_activity_get_specific, BP_Activity_Activity::get, bp_activity_update_meta_cache, bp_update_meta_cache, referer: http://eightlane.org/
    [Thu Feb 06 03:29:41 2014] [error] [client 179.43.137.110] WordPress database error Table 'eightlan_eightlan.wp_bp_activity_meta' doesn't exist for query SELECT activity_id, meta_key, meta_value FROM wp_bp_activity_meta WHERE activity_id IN (114846) made by require('wp-blog-header.php'), require_once('wp-includes/template-loader.php'), include('/themes/eightlane/page.php'), it_get_template_part, load_template, require_once('/themes/eightlane/inc/page-content.php'), the_content, apply_filters('the_content'), call_user_func_array, bp_replace_the_content, apply_filters('bp_replace_the_content'), call_user_func_array, BP_Activity_Theme_Compat->single_dummy_content, bp_buffer_template_part, bp_get_template_part, bp_locate_template, load_template, require('/plugins/buddypress/bp-templates/bp-legacy/buddypress/activity/single/home.php'), bp_has_activities, BP_Activity_Template->__construct, bp_activity_get_specific, BP_Activity_Activity::get, bp_activity_update_meta_cache, bp_update_meta_cache, referer: http://eightlane.org/
    [Thu Feb 06 03:29:49 2014] [error] [client 37.59.144.187] WordPress database error Table 'eightlan_eightlan.wp_bp_activity_meta' doesn't exist for query SELECT activity_id, meta_key, meta_value FROM wp_bp_activity_meta WHERE activity_id IN (101834) made by require('wp-blog-header.php'), require_once('wp-includes/template-loader.php'), do_action('template_redirect'), call_user_func_array, bp_template_redirect, do_action('bp_template_redirect'), call_user_func_array, bp_screens, do_action('bp_screens'), call_user_func_array, bp_activity_screen_single_activity_permalink, bp_activity_get_specific, BP_Activity_Activity::get, bp_activity_update_meta_cache, bp_update_meta_cache
    [Thu Feb 06 03:29:51 2014] [error] [client 37.59.144.187] WordPress database error Table 'eightlan_eightlan.wp_bp_activity_meta' doesn't exist for query SELECT activity_id, meta_key, meta_value FROM wp_bp_activity_meta WHERE activity_id IN (101834) made by require('wp-blog-header.php'), require_once('wp-includes/template-loader.php'), include('/themes/eightlane/page.php'), it_get_template_part, load_template, require_once('/themes/eightlane/inc/page-content.php'), the_content, apply_filters('the_content'), call_user_func_array, bp_replace_the_content, apply_filters('bp_replace_the_content'), call_user_func_array, BP_Activity_Theme_Compat->single_dummy_content, bp_buffer_template_part, bp_get_template_part, bp_locate_template, load_template, require('/plugins/buddypress/bp-templates/bp-legacy/buddypress/activity/single/home.php'), bp_has_activities, BP_Activity_Template->__construct, bp_activity_get_specific, BP_Activity_Activity::get, bp_activity_update_meta_cache, bp_update_meta_cache

    Also, I have hundreds messages in log like that.

    Can you please advice how to resolve my server’s issue? There is no errors inside of database (I had checked it with mysqlcheck). One related database was removed (I had created mysql dump) my server back to its normal state: 0.2% CPU usage and 2.5GB of free ram.

Viewing 2 replies - 1 through 2 (of 2 total)
  • @vaarsn

    Participant

    Can someone help me?

    @johnjamesjacoby

    Keymaster

    If the Activity meta table really was deleted, you’ll want to restore that table (and likely the entire database) from before your attack occurred.

    If you have evidence of BuddyPress being the attach vector (and not simply that your site is running BuddyPress) please follow the instructions provided at the link below:

    https://codex.wordpress.org/FAQ_Security

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Server overloaded. SQL injection and BP in logs’ is closed to new replies.
Skip to toolbar