[LUG.ro] Intento de intrusión
Desarrollo
desarrollo en webmind.com.ar
Vie Oct 29 07:12:31 ART 2010
Hola a todos:
Nuevamente recurro a la lista con nuevos problemas. Recientemente he
instalado logwatch en un Debian que tengo para desarrollo y en los
reportes recibo todos los días mensajes como el siguiente:
--------------------- httpd Begin ------------------------
A total of 6 sites probed the server
190.140.47.75
190.219.48.171
190.8.44.50
200.35.162.193
201.222.96.178
41.153.221.193
Requests with error response codes
400 Bad Request
null: 2 Time(s)
401 Unauthorized
/: 19 Time(s)
//phpMyAdmin/: 1 Time(s)
//phpmyadmin/: 1 Time(s)
/PMA2005/scripts/setup.php: 1 Time(s)
/admin/css/ventanas/alert.css: 2 Time(s)
/admin/css/ventanas/ventanas_default.css: 2 Time(s)
/admin/phpmyadmin/scripts/setup.php: 1 Time(s)
/admin/pma/scripts/setup.php: 1 Time(s)
/admin/scripts/setup.php: 1 Time(s)
/php-my-admin/scripts/setup.php: 2 Time(s)
/php-myadmin/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.2.3/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.2.6/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.4/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.5-pl1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.5-rc1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.5-rc2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.5/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.6-rc1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.6-rc2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.6/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.7-pl1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.5.7/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-alpha/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-alpha2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-beta1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-beta2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-pl1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-pl2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-pl3/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-rc1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-rc2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0-rc3/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.0/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.1-pl1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.1-pl2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.1-pl3/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.1-rc1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.1-rc2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.2-beta1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.2-pl1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.2-rc1/scripts/setup.php: 2 Time(s)
/phpMyAdmin-2.6.2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.3-pl1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.3-rc1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.3/scripts/setup.php: 2 Time(s)
/phpMyAdmin-2.6.4-pl1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.4-pl2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.4-pl3/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.4-pl4/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.4-rc1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.6.4/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.7.0-beta1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.7.0-pl1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.7.0-pl2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.7.0-rc1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.7.0/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.0-beta1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.0-rc1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.0-rc2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.0.1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.0.2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.0.3/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.0.4/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.0/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.1-rc1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.1/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2.8.2/scripts/setup.php: 1 Time(s)
/phpMyAdmin-2/scripts/setup.php: 1 Time(s)
/phpMyAdmin/scripts/setup.php: 2 Time(s)
/phpadmin/scripts/setup.php: 1 Time(s)
/phpmanager/scripts/setup.php: 1 Time(s)
/phpmy-admin/scripts/setup.php: 1 Time(s)
/phpmyadmin/scripts/setup.php: 2 Time(s)
/phpmyadmin1/scripts/setup.php: 1 Time(s)
/phpmyadmin2/scripts/setup.php: 1 Time(s)
La lista continúa pero me parece que ya es más que evidente que algún
programa o alguien está intentando algo con mi servidor. Ya que no
conozco de temas relacionados con la seguridad, me gustaría que me
recomendaran alguna herramienta para protegerme de estos intentos, ya
que no sólo ponen en riesgo mi servidor sinó que además consumen ancho
de banda.
Saludos y gracias
Adrián
Más información sobre la lista de distribución Lugro