Hello Hackers ,
Me and my brother are making a website. We installed apache server and took a day off. Next day, when we went to upload files we saw server hack was attempted.
Two attacks came from Moscow and three from china.
Worst part is that they are using free scripts found on github.
I would like to know what shall we do ? I mean we are literally getting started.
Apparently , hackers tried to steal password and also did "camera" scan thinking this is IP address for Cisco PVC-2300. This is what we see in logs.
1. GET /oidtable.cgi?grep='$IFS/etc/privpasswd;
2. /oamp/System.xml?action=login&user=L1_admin&password=L1_51
1. GET /oidtable.cgi?grep='$IFS/etc/privpasswd; 2. /oamp/System.xml?action=login&user=L1_admin&password=L1_51
All suggestions are welcome.