This morning my logs noted an unknown user logging in and shutting down HS3. The strange part is there appeared to be no username and password, yet the user was authorized. I have only two authorized users and they both have usernames. My logs show this (bottom to top):
Feb-25 9:18:15 AM Shutdown Application shutdown at 2/25/2017 9:18:15 AM
Feb-25 9:18:15 AM Warning Request from UI to shutdown
Feb-25 9:18:15 AM System Application shutdown request from external interface.
Feb-25 9:18:15 AM System Control Panel Immediate Script: &hs.shutdown()
Feb-25 9:18:11 AM Web Server Web Server authorized login successful from: 193.138.219.231 User:
The User is blank and the IP address is from Sweden and not known to me.
The jon00 whois program showed it was
Date & Time IP Address i Type User Visits Country Network Name Contact Name Address Server
2/25/2017 9:18:11 AM 193.138.219.231 WHOIS Source: RIPE
IP Address: 193.138.219.231
Country: Sweden
Network Name: ESAB-IPV4-NET-1
Owner Name: -
Contact Name: ESAB NOC
Address: 31173 Services AB, Scheelegatan 9, SE-212 28 Malmo, Sweden
Email: noc@31173.se
Abuse Email: abuse@31173.se
Phone: +46406181000
Fax: -
Authorized Authorized 1 Sweden ESAB-IPV4-NET-1 ESAB NOC 31173 Services AB, Scheeleg... RIPE
How can a person/bot log into my HS3 server with no username? How can I prevent this?
Feb-25 9:18:15 AM Shutdown Application shutdown at 2/25/2017 9:18:15 AM
Feb-25 9:18:15 AM Warning Request from UI to shutdown
Feb-25 9:18:15 AM System Application shutdown request from external interface.
Feb-25 9:18:15 AM System Control Panel Immediate Script: &hs.shutdown()
Feb-25 9:18:11 AM Web Server Web Server authorized login successful from: 193.138.219.231 User:
The User is blank and the IP address is from Sweden and not known to me.
The jon00 whois program showed it was
Date & Time IP Address i Type User Visits Country Network Name Contact Name Address Server
2/25/2017 9:18:11 AM 193.138.219.231 WHOIS Source: RIPE
IP Address: 193.138.219.231
Country: Sweden
Network Name: ESAB-IPV4-NET-1
Owner Name: -
Contact Name: ESAB NOC
Address: 31173 Services AB, Scheelegatan 9, SE-212 28 Malmo, Sweden
Email: noc@31173.se
Abuse Email: abuse@31173.se
Phone: +46406181000
Fax: -
Authorized Authorized 1 Sweden ESAB-IPV4-NET-1 ESAB NOC 31173 Services AB, Scheeleg... RIPE
How can a person/bot log into my HS3 server with no username? How can I prevent this?
Comment