Attempted hack on your site? (type: pnSecurity Alert) postnuke 764  Début

  • Bonjour,
    Pour la premiere fois, je suis inquiet pour mon site, j'ai reçu ce message d'alerte 177 fois:
    Je ne sais pas trop ce que je dois faire, pourriez vous M'aiguiller s'il vous plait?

    Attention site admin of oneclicklocation.com,
    On 11 Mar 2009 at 11:08 the PostNuke code has
    detected that somebody tried to send information
    to your site that may have been intended as a
    hack. Do not panic, it may be harmless: maybe this
    detection was triggered by something you did!
    Anyway, it was detected and blocked.
    The suspicious activity was recognized in
    pnAntiCracker on line 103, and is of the type
    pnSecurity Alert.
    Additional information given by the code which
    detected this: COOKIE Intrusion detection.

    Below you will find a lot of information obtained
    about this attempt, that may help you to find
    what happened and maybe who did it.


    =====================================
    Information about this user:
    =====================================
    This person is not logged in.
    IP numbers: [note: when you are dealing with a
    real cracker these IP numbers might not be from
    the actual computer he is working on]
    IP according to HTTP_CLIENT_IP:
    IP according to REMOTE_ADDR: 83.115.48.133
    IP according to
    GetHostByName($_SERVER['REMOTE_ADDR']):
    83.115.48.133


    =====================================
    Browser information
    =====================================
    HTTP_USER_AGENT: Mozilla/5.0 (Windows; U; Windows
    NT 5.1; fr; rv:1.9.0.7) Gecko/2009021910
    Firefox/3.0.7
    BROWSER * 0 :

    =====================================
    Information in the $_GET array
    This is about variables that may have been in the
    URL string or in a 'GET' type form.
    =====================================

    =====================================
    Information in the $_POST array
    This is about visible and invisible form elements.
    =====================================

    =====================================
    Information in the $_COOKIE array
    =====================================
    COOKIE * __utma :
    171714302.4154477120664414700.1235338019.1235338019.1236721669.2
    COOKIE * __utmz :
    171714302.1236721951.2.2.utmcsr=Google|utmccn=(organic)|utmcmd=organic|utmctr=
  • Hello !

    apparamment, la personne a du tenter de modifier son cookier a la main pour tenter un truc... je pense que tu peux laisser tomber se message sans soucis. Si tu en reçois en grand nombre, ca peux d'avantage faire penser a une réelle attaque.

    Gilles



    Gilles  ><>°
  • Merci de ta réponse rapide
    Je m'inquiétais car 177 fois le même message c'est déja pas mal !
    Mais que fais cette ligne Google|utmccn=(organic) dans le message?
    et puis c'est bizare il y a le code d'un de mes logos proposé sur ma page "échange de liens".
    J'espère que ce n'est pas grave.
    A plus !
  • 2 visiteurs

Données pour les 20 dernières minutes