First Hacking Attempt - Should I Take Any Measures?

Corporal Joined: Apr 07, 2005 Posts: 65

got my first hacking attempt, should I take any further security measures?

I run Nuke Sentinel latest version 2.4a i think?? Anyway its the latest version... should I be worried at all?

heres what I was emailed...

Code:

Date & Time: 2005-11-02 07:32:45 EET GMT +0200
Blocked IP: 81.214.168.220
User ID: Anonymous (1)
Reason: Abuse-Author
--------------------
User Agent: Mozilla 4.0 (Linux)
Query String: www.mysite.co.uk/admin.php?op=AddAuthor&add_aid=i&add_name=Goda&add_pwd=x&add_email=xy@xy.com&add_radminsuper=1&admin=eCcgVU5JT04gU0VMRUNUIDEvKjox
Get String: www.mysite.co.uk/admin.php?op=AddAuthor&add_aid=i&add_name=Goda&add_pwd=x&add_email=xy@xy.com&add_radminsuper=1&admin=eCcgVU5JT04gU0VMRUNUIDEvKjox
Post String: www.mysite.co.uk/admin.php
Forwarded For: none
Client IP: none
Remote Address: 81.214.168.220
Remote Port: 4054
Request Method: POST

The IP belongs to Turk Telekom, they have no abuse email on their whois listing, how can I report this little Rainbow Brite wipe?

Posted: Wed Nov 02, 2005 2:22 pm

1) First of all, ban that stupid guy's C class IPs.
2) Check your security patches (2.3.1 is very tough)
3) turn off all wysiwyg editor options if you turned on
4) sentinal is ok
5) change admin file name in your config.php file or you can move admin.php file to other directory.

That seems your phpnuke site is relatively secure and hack-proof.

Good Protection so far.