Caught!

Red Squirrel · Post by **Red Squirrel** » Tue Mar 08, 2005 6:55 pm

Some guy trying to log in to the admin cp. Did not even enter a username or password. He searched for Light Alloy 2.9 found a thread on it, and I guess it was not what he was looking for so he wanted to hack us.

Code: Select all

195.248.164.47 - - [07/Mar/2005:20:46:56] "http://www.iceteks.com/forums/index.php?showtopic=3000&" (http://www.google.com.ua/search?q=Light+Alloy+2.9&hl=uk&lr=&start=20&sa=N) - - Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10 Channel: 0
195.248.164.47 - - [07/Mar/2005:20:47:36] "http://www.iceteks.com/forums/admin.php" () - - Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10 Channel: 0
195.248.164.47 - - [07/Mar/2005:20:49:11] "http://www.iceteks.com/forums/admin.php?adsess=" (http://www.iceteks.com/forums/admin.php) - - Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10 Channel: 0
 
Showed 3 entries out of 85079 entries. (0%)
Report generated on 08/Mar/2005:19:09:06 
[code] 

[color=#888888][size=85]Archived topic from Iceteks,  old topic ID:3156, old post ID:25809[/size][/color]

Andy · Post by **Andy** » Tue Mar 08, 2005 8:48 pm

Um RED this person is on a router. It might be hard to block. Keep your eye on this one.

Archived topic from Iceteks, old topic ID:3156, old post ID:25811

Red Squirrel · Post by **Red Squirrel** » Tue Mar 08, 2005 10:53 pm

Easy to block, but just did not bother. I'll just keep an eye open but he's far from getting past any type of security around here.

Archived topic from Iceteks, old topic ID:3156, old post ID:25812

Andy · Post by **Andy** » Wed Mar 09, 2005 12:14 am

OK. That would be good to do.

Archived topic from Iceteks, old topic ID:3156, old post ID:25814

Triple6_wild · Post by **Triple6_wild** » Wed Mar 09, 2005 3:28 am

now that we know where to log in .... lets all try to get in lol

Archived topic from Iceteks, old topic ID:3156, old post ID:25818

ycontrol · Post by **ycontrol** » Wed Mar 09, 2005 4:04 am

Nobody can get past Red's security.......lol.

Archived topic from Iceteks, old topic ID:3156, old post ID:25819

Triple6_wild · Post by **Triple6_wild** » Wed Mar 09, 2005 4:38 am

oh i know that

Archived topic from Iceteks, old topic ID:3156, old post ID:25822

Streety · Post by **Streety** » Wed Mar 09, 2005 3:07 pm

admin.php?

I think we could have quessed thank without needing to be told.

Archived topic from Iceteks, old topic ID:3156, old post ID:25827

Red Squirrel · Post by **Red Squirrel** » Wed Mar 09, 2005 3:08 pm

Yeah admin.php is always default for most forums, really it could be renamed in most cases and still work with only a few changes to the script but hiding files is far from being security, it will only make finding the door harder.

What's funny is some guy once that found another security panel because of something I posted, and actually brute forced his way. Do you know how much emails that sends me? No way I can miss that. LOL

Archived topic from Iceteks, old topic ID:3156, old post ID:25828

Red Squirrel · Post by **Red Squirrel** » Wed Mar 09, 2005 3:54 pm

Oh, and the username and password is not "hi"

Archived topic from Iceteks, old topic ID:3156, old post ID:25829