XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Modules Support forums / 
  3. Module usage questions 
  4.  / Protector-ISOCOM
Register
1
hackbrill
Protector-ISOCOM

I just found this entry in Protector-Protect Center:

Isolated comment-in found. (-19/**/UNION/**/SELECT/**/0,1,pass,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/**/FROM/**/xoops_users/**/LIMIT/**/1,1/*http://zodila.hub.io/stats.txt?)

The IP Agent: 222.124.10.163

It appears, IMHO, to be a database query for a password and possibly the admin password. The prefix was wrong for the database, so I don't think he got the info he was needing.

Should I ban the IP 222.124.10.163 and did Protector protect me in this circumstance? I noticed plenty of "*/" placed in the query.

I'm hoping everything is ok. Thanks in advance for any input.
2
JMorris
Re: Protector-ISOCOM

  • 2007/5/6 3:14

  • JMorris

  • XOOPS is my life!

  • Posts: 2722

  • Since: 2004/4/11


Yes, ban the IP. You may want to set Protector to automatically ban IPs that perform such queries.

Chances are, the attacker is using a proxy.

Make sure all your modules are up to date and that you are using the latest version of XOOPS and Protector.
Insanity can be defined as "doing the same thing over and over and expecting different results."

Stupidity is not a crime. Therefore, you are free to go.
3
skenow
Re: Protector-ISOCOM

  • 2007/5/6 3:28

  • skenow

  • Home away from home

  • Posts: 993

  • Since: 2004/11/17


Anything Protector logs Protector can also stop. Along with James' recommendation, review your preferences for Protector. The documentation MadFish (http://www.crushdepth.net) just completed is an excellent reference for Protector.
4
hackbrill
Re: Protector-ISOCOM

Thanks for the timely response!
5
mrphilong
Re: Protector-ISOCOM

  • 2007/5/6 10:58

  • mrphilong

  • Quite a regular

  • Posts: 351

  • Since: 2006/7/14


I got the same and many entries from Protector's log too, when I posted it in here my ip got banned!

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

314 user(s) are online (250 user(s) are browsing Support Forums)

Members: 0

Guests: 314

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits