PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : Passt auf eure Pfade auf...



darkmoon.2xt.de
12.06.06, 11:59
Ziemlich dreisst, hatte wohl vorgestern so nen Crawler auf meinem Webserver.

Apache error log sagt:


[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/phpmyadmin
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/PMA
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/mysql
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/admin
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/db
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/dbadmin
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/web
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/admin
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/admin
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/admin
[Sat Jun 10 20:32:05 2006] [error] [client 85.214.45.85] File does not exist: /var/www/mysql-admin
[Sat Jun 10 20:32:06 2006] [error] [client 85.214.45.85] File does not exist: /var/www/phpmyadmin2
[Sat Jun 10 20:32:06 2006] [error] [client 85.214.45.85] File does not exist: /var/www/mysqladmin
[Sat Jun 10 20:32:06 2006] [error] [client 85.214.45.85] File does not exist: /var/www/mysql-admin
[Sat Jun 10 20:32:06 2006] [error] [client 85.214.45.85] File does not exist: /var/www/phpMyAdmin-2.5.6
[Sat Jun 10 20:32:06 2006] [error] [client 85.214.45.85] File does not exist: /var/www/phpMyAdmin-2.5.4
[Sat Jun 10 20:32:06 2006] [error] [client 85.214.45.85] File does not exist: /var/www/phpMyAdmin-2.5.1
[Sat Jun 10 20:32:06 2006] [error] [client 85.214.45.85] File does not exist: /var/www/phpMyAdmin-2.2.3
[Sat Jun 10 20:32:06 2006] [error] [client 85.214.45.85] File does not exist: /var/www/phpMyAdmin-2.2.6
[Sat Jun 10 20:32:06 2006] [error] [client 85.214.45.85] File does not exist: /var/www/myadmin
[Sat Jun 10 20:45:04 2006] [error] [client 84.95.66.150] File does not exist: /var/www/phpmyadmin
[Sat Jun 10 20:45:04 2006] [error] [client 84.95.66.150] File does not exist: /var/www/PMA
[Sat Jun 10 20:45:04 2006] [error] [client 84.95.66.150] File does not exist: /var/www/mysql
[Sat Jun 10 20:45:04 2006] [error] [client 84.95.66.150] File does not exist: /var/www/admin
[Sat Jun 10 20:45:05 2006] [error] [client 84.95.66.150] File does not exist: /var/www/db
[Sat Jun 10 20:45:05 2006] [error] [client 84.95.66.150] File does not exist: /var/www/dbadmin
[Sat Jun 10 20:45:05 2006] [error] [client 84.95.66.150] File does not exist: /var/www/web
[Sat Jun 10 20:45:05 2006] [error] [client 84.95.66.150] File does not exist: /var/www/admin
[Sat Jun 10 20:45:06 2006] [error] [client 84.95.66.150] File does not exist: /var/www/admin
[Sat Jun 10 20:45:06 2006] [error] [client 84.95.66.150] File does not exist: /var/www/admin
[Sat Jun 10 20:45:06 2006] [error] [client 84.95.66.150] File does not exist: /var/www/mysql-admin
[Sat Jun 10 20:45:07 2006] [error] [client 84.95.66.150] File does not exist: /var/www/phpmyadmin2
[Sat Jun 10 20:45:07 2006] [error] [client 84.95.66.150] File does not exist: /var/www/phpMyAdmin-2.2.6
[Sat Jun 10 20:45:07 2006] [error] [client 84.95.66.150] File does not exist: /var/www/myadmin


ich weiss schon warum ich mir ein shellscript geschrieben hab mit dem ich die admin tools ausserhalb der administrativen tätigkeiten ins /root verzeichnis verschiebe... und sonst haben sie auch keinen der default-namen.

Aber damit als Wink mit dem Zaunpfahl an die "Neu-Admins" hier im Forum.

PierreS
12.06.06, 12:10
Ich habe einfach alle Web-Admin-Tools (OK, ist bei mir nur phpMyAdmin und Webalizer) in einen chost gepackt, der per .htaccess geschützt ist. Das sollte eigentlich reichen und mögliche Sicherheitslücken der Scripte können von außen nicht genutzt werden.