1
vote
0answers
42 views

Why would someone repeatedly enter “-1” into a site search? [closed]

One of the websites I work on has been getting bombarded with site searches of "-1". The IP address appears to be coming from Eastern Europe and my first suspicion is that this is malicious. However ...
1
vote
3answers
290 views

Is this a security breach?

I have a server running Ubuntu 10.04LTS (I know it is too old), which over the last couple of weeks has on occasion been unresponsive to network traffic, and needed a hard reset first thing in the ...
1
vote
1answer
152 views

client 157.56.229.87 attempt to invoke directory as script: /usr/lib/cgi-bin/

Ok, so i frequently check my logs and see an array of errors logs from people "scoping the joint" but today i noticed a new one: [client 157.56.229.87] attempt to invoke directory as script: ...
1
vote
4answers
322 views

Apache Website : How to protect against URL testing

I have a website running on Linux with Apache. I can see on the access log file several IP addresses trying to access some common and well known application like PhpMyAdmin, probably to hack the ...
4
votes
3answers
1k views

How do I secure my Asterisk server?

Our asterisk server was compromised. some calls were made to Asia countries last weekend. Thought we have improved our network configuration, we still want to determine how the intrusion was done, we ...
4
votes
2answers
686 views

Mac Server Access.log concerns, possibly hacked? (newb sorry)

this is what my web access.log looks like (well a short snippet) 46.4.33.46 - - [20/Jul/2011:11:56:18 +0100] "GET http://allegro.pl/matematyka-wokol-nas-6-zeszyt-cwiczen-czesc-1-2-i1727657348.html ...
9
votes
7answers
2k views

Hacking prevention, forensics, auditing and counter measures

Recently (but it is also a recurrent question) we saw 3 interesting threads about hacking and security: My server's been hacked EMERGENCY. Finding how a hacked server was hacked File ...
1
vote
6answers
565 views

Analyzing Server Logs

I currently have a medium-sized website, that probably has a few security flaws. That's probably normal, I think. You can't catch everything. The problem is, I also have a couple script kiddies whom ...