Hacking attacks?

[Mozartman]

Question to Zoom Search developers.

I decide to look at searchwords.log file because I was getting warnings that file was corrupted and found strange records. Sample below.

2018-02-02, 18:05:38, 94.73.150.176, "** convert int char 33 char 126 char 33 char 65 char 66 char 67 char 49 char 52 char 53 char 90 char 81 char 54 char 50 char 68 char 87 char 81 char 65 char 70 char 80 char 79 char 73 char 89 char 67 char 70 char 68 char 33 char 126 char 33", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.073, Rec = 3
2018-02-02, 18:05:39, 94.73.150.176, "email'0=a", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.055, Rec = 0
2018-02-02, 18:05:54, 94.73.150.176, "email2121121121212.1", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.060, Rec = 0
2018-02-02, 18:05:55, 94.73.150.176, "email and 1=1", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.055, Rec = 0
2018-02-02, 18:05:56, 94.73.150.176, "email and 1>1", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.040, Rec = 0
2018-02-02, 18:05:57, 94.73.150.176, "email and 'x'='x", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.054, Rec = 0
2018-02-02, 18:05:58, 94.73.150.176, "email and 'x'='y", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.056, Rec = 0
2018-02-02, 18:05:59, 94.73.150.176, "email"" and ""x""=""x", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.053, Rec = 0
2018-02-02, 18:06:01, 94.73.150.176, "email"" and ""x""=""y", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.058, Rec = 0
2018-02-02, 18:06:02, 94.73.150.176, "email and 1=1", Matches = 0, AND, PerPage = 10, PageNum = 0, No cats, Time = 0.054, Rec = 0

Are these hacking attacks?
If yes, question is how safe Zoom Search is against these hacks?

Thanks

[David]

Not a hack attempt as such. It is too simple for that. It is probing for Javascript and SQL vulnerabilities. Sometimes known as penetration testing.

The hits on your web site are spaced at 1 second intervals. So it is automated. IP address is slightly suspicious. If you Google the IP address other web sites are also reporting Sql injection probes from this source address. See,
https://www.abuseipdb.com/check/94.7...?page=1#report

Zoom is totally safe against SQL injection, simply because it doesn't use SQL.
We aren't aware of any Javascript issues, and they are normally way less serious in any case (as they result in cross site scripting issues on the client side, not any access to your server).
Clearly it has somewhat messed up the format of the text log file however.

We see similar probes all across our sites almost daily.

The additional load on your server is annoying but the response times were ~0.05 seconds. So getting 1 request per second isn't going to hurt much.

Keeping your web server software up to date is a good idea.

But in summary. You are safe ... to the best of our knowledge.