Am I being Probed by Hackers?

SnapJacks

SnapJacks

New member
Dec 28, 2011
403
5
0
Sunnyvale
In my analytics I can see a referral visit from 127.0.0.1:49152 , when I click it for more details it says it is coming from /unlock/http://www.mysite.com/popular-page-on-my-site/

Never seen this before, can't find any info on it.

Any thoughts?
 


i know it's local host, which is why it weirded me out. like someone is trying to spoof my local host and unlock my wp account or something, hahaha...

ya sily, but just thought i would ask.

shared hosting plan on hostgator.
 
I recently had someone hack into my server and use my server and it's resources to start hacking into other servers. It got progressively worse, to the point where I had to wipe that server of all it's content. If I were you, I would contact your hosting company right away and ask them if they think it's an attack.
 
skank said:
I recently had someone hack into my server and use my server and it's resources to start hacking into other servers. .
Click to expand...

That's interesting, what was the vulnerability they exploited?

If I had to guess.... PHP path traversal?
 
IsotropicSpin said:
That's interesting, what was the vulnerability they exploited?

If I had to guess.... PHP path traversal?
Click to expand...

I was running an older version of plesk that hadn't the new security features, meaning that when the server got hacked it was "root compromised". I don't know the details of exactly how they managed to crack it though. I am now running the most up to date cPanel on both of my dedicated servers.
 
You must log in or register to reply here.
Top Bottom