Jump to content

Archived

This topic is now archived and is closed to further replies.

Sam-AUST

Is this the who's online of a security breach?

Recommended Posts

I've attached a screencapture of the who's online. I googled part of the weird URLs showing and found mention of AWStats and security vulnerabilities. Is this a sign something has happened on my site and if there has been malicious code installed, where do I look to locate it?

post-332255-0-50517200-1458604140_thumb.png

Share this post


Link to post
Share on other sites

I don't see mention of AWStats in the links so your question is not clear, at least to me. However, the IP at the bottom that is repeated many times is clearly a hacker playing games. I suggest you block him with 188.116.0.0/18 unless you know the IP to be good. It is from Poland.

Share this post


Link to post
Share on other sites

That's some script kiddie throwing everything in his script at your site in hopes that somethng will work. As far as I know it won't. Ban the IP if you want to, or if it's loading your server, otherwise ignore it.

 

Regards

Jim


See my profile for a list of my addons and ways to get support.

Share this post


Link to post
Share on other sites

×