security van website??

Article View: be.comp.internet

Article #2058

#2058

From: user
Date: Mon, 01 Nov 2010 22:13

48 lines
3459 bytes

Ik zie in de access log vana apach het volgende: enkele variaties van php -
admin calls : pogingen om in te breken??

125.215.205.180 - - [31/Oct/2010:22:26:02 +0100] "GET //phpmyadmin/ 
HTTP/1.1" 404 467 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
125.215.205.180 - - [31/Oct/2010:22:26:03 +0100] "GET //phpMyAdmin/ 
HTTP/1.1" 404 468 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
200.251.24.36 - - [31/Oct/2010:23:23:25 +0100] "GET //phpmyadmin/ HTTP/1.1" 
404 467 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
200.251.24.36 - - [31/Oct/2010:23:23:26 +0100] "GET //phpMyAdmin/ HTTP/1.1" 
404 468 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
77.221.156.210 - - [01/Nov/2010:18:18:08 +0100] "GET 
//phpmyadmin/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 480 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
77.221.156.210 - - [01/Nov/2010:18:18:08 +0100] "GET 
//pma/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 476 "-" "Mozilla/4.0 
(compatible; MSIE 6.0; Windows 98)"
77.221.156.210 - - [01/Nov/2010:18:18:08 +0100] "GET 
//admin/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 477 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
77.221.156.210 - - [01/Nov/2010:18:18:08 +0100] "GET 
//dbadmin/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 478 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
77.221.156.210 - - [01/Nov/2010:18:18:09 +0100] "GET 
//mysql/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 478 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
77.221.156.210 - - [01/Nov/2010:18:18:09 +0100] "GET //php-my-
admin/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 482 "-" "Mozilla/4.0 
(compatible; MSIE 6.0; Windows 98)"
77.221.156.210 - - [01/Nov/2010:18:18:09 +0100] "GET 
//myadmin/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 479 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
77.221.156.210 - - [01/Nov/2010:18:18:09 +0100] "GET 
//PHPMYADMIN/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 482 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
77.221.156.210 - - [01/Nov/2010:18:18:09 +0100] "GET 
//phpMyAdmin/config/config.inc.php?p=phpinfo(); HTTP/1.1" 404 481 "-" 
"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"



-- 
--
What's on Shortwave guide: choose an hour, go!
http://shortwave.tk
700+ Radio Stations on SW http://swstations.tk
300+ languages on SW http://radiolanguages.tk

Technical Details

Message-ID: <iane2i$btf$1@news.eternal-september.org>

Path:

arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!goblin1!goblin.stu.neva.ru!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Thread: f4ad3,792a72366bdd2844,start
X-Google-NewGroupId: yes
X-Google-Attributes: gid73c00622a7,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!goblin1!goblin.stu.neva.ru!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail
From: user <no@thanks.be>
Newsgroups: be.comp.internet
Subject: security van website??
Followup-To: be.comp.internet
Date: Mon, 01 Nov 2010 23:13:38 +0100
Organization: A noiseless patient Spider
Lines: 48
Message-ID: <iane2i$btf$1@news.eternal-september.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7Bit
Injection-Date: Mon, 1 Nov 2010 22:13:38 +0000 (UTC)
Injection-Info: mx03.eternal-september.org; posting-host="cA7wnuZ7m6bx7/cD41bx7g";
 logging-data="12207"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/zm8oZhfk3704UjfxCwsZk"
User-Agent: KNode/4.3.2
Cancel-Lock: sha1:jKp8tm3cN5g1y64FzD5nH3Fqx2w=