The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Brute force from our server to someone else

Discussion in 'Security' started by CraftyPanda, Oct 27, 2014.

  1. CraftyPanda

    CraftyPanda Well-Known Member

    Joined:
    Nov 15, 2012
    Messages:
    84
    Likes Received:
    1
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    Hi guys,

    We have received a complaint from an external source saying someone on our IP address is trying to brute force their server. they have sent us the below logs but i dont where to start looking. They dont appear to give us very much information.

    Any help[ would be super appreciated.

    Code:
     - - [25/Oct/2014:22:33:28 +0200] "GET / HTTP/1.0" 301 260 "-" "-"
    [25/Oct/2014:22:33:28 +0200] "GET / HTTP/1.0" 301 519 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /wp-login.php HTTP/1.0" 301 272 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /wp-login.php HTTP/1.0" 301 543 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /blog/wp-login.php HTTP/1.0" 301 277 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /blog/wp-login.php HTTP/1.0" 301 553 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /demo/wp-login.php HTTP/1.0" 301 277 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /demo/wp-login.php HTTP/1.0" 301 553 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /wp/wp-login.php HTTP/1.0" 301 275 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /wp/wp-login.php HTTP/1.0" 301 549 "-" "-"
    25/Oct/2014:22:33:29 +0200] "GET /wordpress/wp-login.php HTTP/1.0" 301 282 "-" "-"
    25/Oct/2014:22:33:29 +0200] "GET /wordpress/wp-login.php HTTP/1.0" 301 563 "-" "-"
    25/Oct/2014:22:33:29 +0200] "GET /social/wp-login.php HTTP/1.0" 301 279 "-" "-"
    25/Oct/2014:22:33:29 +0200] "GET /social/wp-login.php HTTP/1.0" 301 557 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /administrator/index.php HTTP/1.0" 301 565 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /administrator/index.php HTTP/1.0" 301 283 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /admin.php HTTP/1.0" 301 537 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /admin.php HTTP/1.0" 301 269 "-" "-"
    [25/Oct/2014:22:33:29 +0200] "GET /uploadify/uploadify.css HTTP/1.0" 301 565 "-" "-"
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
Loading...

Share This Page