My server's been hacked EMERGENCY
Looking thru my logs, I found this:
(The log files are on that paste).
Question is, this guy began using "all requests allowed" which is...? (Explain it please?) and eventually was making requests from "127.0.0.1" which means he's using my local system?
If anyone can explain this, or help prevent it, I'd like to know, and this would be highly appreciated.
PS: I've since blocked their IP, but what's stopping this from happening again?