Tag Info

New answers tagged

1

You could consider restricting the WordPress login access to your own IP by adding a htaccess file to the /wp-admin folder. Everyone not coming from your IP would receive a 401 error. However if you allow external users to log in to your site for commenting or posting content they would also be blocked unless you explictly whitelist their IP. See this ...


24

Every computer with a public IP gets this kind of attention permanently. There's nothing you can do to stop it (I once tried to complain to the provider owning the IP, never got a reply and gave up). What you can do is to make sure you're well protected against a possible attack (this bot seemed to look for WordPress, but there are others looking for apache, ...


4

As @william said, there is nothing to worry about if it's a bot (which it most probably is). If you would log also other traffic, you would also see many more bots trying to scan your server, connect via ssh, rdp... I am logging traffic on my ssh server, and each day I have hundreds of failed connection attempts from bots. But if you notice also other ...


2

It's just an automated bot trying to exploit vulnerable servers that run Wordpress. There's nothing to worry about and nothing to do about it, just make sure you're not running outdated services or one of them might find it like that.


2

In addition to the great points made here, I would like to clarify: what you are essentially dealing with any time you use eval() is having to answer the following questions: Is it worth securing? How thoroughly can I secure it and is that level acceptable? How confident can I be that it will stay secure over future evolutions of the codebase and ...


2

As explained by others, one can use eval to dynamically create code which makes it harder to understand the control flow of the program. But, I don't consider eval much more evil than all the other ways to generate code at run time, like document.write(...), object.innerHTML(...) and others. While these are mostly used to change the DOM of the program they ...


10

eval() is a possible vector for cross-site scripting. Under normal circumstances, an attacker attempting XSS might want to get script <script></script> tags past whatever encoding, filters or firewalls might be in place. If eval() is there operating on user input, it eliminates the need for script tags. Eval is present in many malicious scripts ...


23

eval() executes a string of characters as code. You use eval() precisely because the string contents are not known in advance, or even generated server-side; basically, you need eval() because the JavaScript itself will generate the string from data which is available only dynamically, in the client. Thus, eval() makes sense in situations where the ...


3

A DNS attack happens when an attacker can influence how your computer will resolve host/domain names. That can happen if an attacker is able to: Change the DNS server IP address in the network settings on your computer Change the DNS server IP address in the network settings on your router Change the hosts file on your computer Intercept and change DNS ...


2

When would a DNS attack actually happen? [...] [W]hen [...] my pc [first receives DNS servers from] the router which is connected to my isp's modem? That's an interesting possibility, to somehow inject an attacker's DNS servers in DHCP replies. This is not how it's usually done however, because an attacker can't get between the user's computer and the ...


2

A successful DNS redirection means the attacker can redirect you wherever he wants. He can setup a malicious website to exploit your system by various techniques. One example would be the recent exploits from Hacking Team; two 0-Days that can be used to exploit a fully patched machine remotely without any user interaction on all systems running Flash. So ...


-1

if you look at the meaning of DNS you can find your answer : domain name server, the system that automatically translates Internet addresses to the numeric machine addresses that computers use. With some DNS attacks you can redirect and pass victim's data to your server (e.g a mikrotik server), so you can sniff victim's data and inject something in the ...


4

There are a few possible scenarios, even after assuming Man in the Middle is not happening. Missing patches: If your system is missing a patch that allows RCE, that is an easy win. There are plenty of remote exploits that exist, and new ones every so often. Mitigation: Patch your system! Are you on a domain? You didn't mention Windows 7 Home or ...


1

Security is a process, where new software bugs are discovered from time to time. Sometimes by good people, and sometimes by bad people. Software bugs can be discovered in both user software, like Excel, but also in OS network stack. Windows 7 is based on rather well tested code, in which hundreds of remote vulnerabilities were found and patched during last ...


1

Scan the infected machine using a virus scanner on a bootable dvd/usb stick (http://www.google.com/search?q=live+image+virus+scan) download and burn it via a not infected device. If the virus scan does not allow you to repair the MBR you can use the procedure outlined in https://support.microsoft.com/en-us/kb/927392/en-us for Windows 7 and Vista, probably ...



Top 50 recent answers are included