CIO Tech Eksperten IT-JOB IT-Kurser Events Podcast Søg
Cookie ikon
Avatar billede 0xffff Nybegynder
08. juni 2007 - 13:26 Der er 3 kommentarer og
1 løsning

hack eller ikke hack?

Hejsa alle,

Nu er jeg ikke så stærk i hele webserver setup. Jeg har en WAMP server kørende sat op som default, ud over det har jeg ikke mere sat op.

Jeg bruger det til udvikling og til et par test sites som jeg leger lidt rundt med.

Jeg har nu kigget i apache log filerne, og hvad jeg ser syntes jeg ikke ser så godt ud. Jeg har en masse af den spam der står nedenfor i min log, fra en hel masse varierende IP adresser.

Spørgsmålene er så:
#1 Har jeg ret i at antage at det som min log viser er at der er en masse der forsøger at hacke min webserver ?

#2 Kan jeg antage at de ikke allerede har lavet noget?

#3 Hvilke sikringsmetoder, hvis nogle, kan jeg anvende, således at de ikke engang kan komme så vidt som de er kommet nu?



[Wed May 30 13:08:14 2007] [error] [client 218.150.108.236] client denied by server configuration: D:/wamp/www/index.htm
[Wed May 30 14:03:29 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/phpmyadmin/main.php
[Wed May 30 14:03:31 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin
[Wed May 30 14:03:32 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/PMA
[Wed May 30 14:03:34 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/admin
[Wed May 30 14:03:36 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/dbadmin
[Wed May 30 14:03:37 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/mysql
[Wed May 30 14:03:39 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/myadmin
[Wed May 30 14:03:41 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpmyadmin2
[Wed May 30 14:03:42 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin2
[Wed May 30 14:03:44 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2
[Wed May 30 14:03:45 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/php-my-admin
[Wed May 30 14:03:47 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.2.3
[Wed May 30 14:03:49 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.2.6
[Wed May 30 14:03:51 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.1
[Wed May 30 14:03:52 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.4
[Wed May 30 14:03:55 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.5-rc1
[Wed May 30 14:03:56 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.5-rc2
[Wed May 30 14:03:57 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.5
[Wed May 30 14:03:59 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.5-pl1
[Wed May 30 14:04:00 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.6-rc1
[Wed May 30 14:04:02 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.6-rc2
[Wed May 30 14:04:03 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.6
[Wed May 30 14:04:05 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.7
[Wed May 30 14:04:06 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.5.7-pl1
[Wed May 30 14:04:08 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-alpha
[Wed May 30 14:04:09 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-alpha2
[Wed May 30 14:04:11 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-beta1
[Wed May 30 14:04:12 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-beta2
[Wed May 30 14:04:13 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-rc1
[Wed May 30 14:04:14 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-rc2
[Wed May 30 14:04:15 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-rc3
[Wed May 30 14:04:17 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0
[Wed May 30 14:04:19 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-pl1
[Wed May 30 14:04:20 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-pl2
[Wed May 30 14:04:21 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.0-pl3
[Wed May 30 14:04:22 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.1-rc1
[Wed May 30 14:04:23 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.1-rc2
[Wed May 30 14:04:24 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.1
[Wed May 30 14:04:26 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.1-pl1
[Wed May 30 14:04:27 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.1-pl2
[Wed May 30 14:04:28 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.1-pl3
[Wed May 30 14:04:30 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.2-rc1
[Wed May 30 14:04:32 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.2-beta1
[Wed May 30 14:04:33 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.2-rc1
[Wed May 30 14:04:35 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.2
[Wed May 30 14:04:36 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.2-pl1
[Wed May 30 14:04:38 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.3
[Wed May 30 14:04:39 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.3-rc1
[Wed May 30 14:04:40 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.3
[Wed May 30 14:04:41 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.3-pl1
[Wed May 30 14:04:43 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.4-rc1
[Wed May 30 14:04:44 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.4-pl1
[Wed May 30 14:04:45 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.4-pl2
[Wed May 30 14:04:46 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.4-pl3
[Wed May 30 14:04:48 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.4-pl4
[Wed May 30 14:04:49 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.6.4
[Wed May 30 14:04:51 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.7.0-beta1
[Wed May 30 14:04:53 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.7.0-rc1
[Wed May 30 14:04:55 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.7.0-pl1
[Wed May 30 14:04:55 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.7.0-pl2
[Wed May 30 14:04:57 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.7.0
[Wed May 30 14:04:58 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.0-beta1
[Wed May 30 14:05:00 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.0-rc1
[Wed May 30 14:05:02 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.0-rc2
[Wed May 30 14:05:03 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.0
[Wed May 30 14:05:05 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.0.1
[Wed May 30 14:05:06 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.0.2
[Wed May 30 14:05:08 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.0.3
[Wed May 30 14:05:09 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.0.4
[Wed May 30 14:05:10 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.1-rc1
[Wed May 30 14:05:12 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.1
[Wed May 30 14:05:13 2007] [error] [client 68.216.115.172] client denied by server configuration: D:/wamp/www/phpMyAdmin-2.8.2
Avatar billede bufferzone Praktikant
08. juni 2007 - 13:32 #1
1. Dette ligner en scanning med en applikations sårbarhedsscannet, f.eks. Nikto. Det er altså ikke et hack, men forberedelsen til det.

2. Nej det kan du aldrig.

3. Det ser indledningsvis ud som om du ikke er sårber over for det der her scannes efter, har du overhoved de forespurgte stier på serveren.

Du kan sikkert hardne din boks yderligere. Der findes masser af vejledninger på nettet til apache hardening se f.eks. www.nsa.gov
Avatar billede bufferzone Praktikant
08. juni 2007 - 13:33 #2
Ellers kan du overveje at tage IDS i brug, f.eks. Snort (www.snort.org) den vil kunne alarmmerer dig og sikkert også fortælle dig hvad der sker. Den kender f.eks. Nikto's signatur
Avatar billede 0xffff Nybegynder
08. juni 2007 - 14:54 #3
ok, takker. Vil prøve at kigge på de sites du har listet.
Avatar billede bufferzone Praktikant
08. juni 2007 - 14:59 #4
Hold også øje med dine logs og hvis du har forskellige web løsninger, det kunne f.eks. være phpmyadmin eller jomla så kik på http://www.securityfocus.com/bid og klik dig frem til om disse systemer er sårbare. om der er løsninger til disse sårbarheder
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
It-udvikling kurser
Uanset kodesprog, så giver vi dig mulighederne for at udvikle det, du behøver.
Se alle It-udvikling kurser

Flere spørgsmål fra Webservere kategorien

Titel Indlæg Oprettet Seneste aktivitet
Yousee Af nu_igen i Webservere 1 08/04/202408:21 09/04/202409:44
.htaccess til PHP API Af Jan i Webservere 9 29/02/202408:05 29/02/202409:30
Web.config Af ingeman i Webservere 0 07/01/202409:53 -
IIS virker ikke på asp sider... Af bsn i Webservere 8 15/10/202313:14 18/10/202308:51
Ingen forbindelse Af ZeBa i Webservere 5 08/04/202319:17 08/04/202319:55
Se alle spørgsmål i kategorien Opret spørgsmål

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Opret Log ind

Du kan også logge ind via nedenstående tjenester



Alle kategorier på Eksperten
Seneste spørgsmål Seneste aktivitet
I dag 11:14 Bærbar til Sims 3? Af idamarie i PC
I dag 10:49 Adobe til excel Af densortehingst i Andet software
I dag 09:26 Chrome Af fjorbak i Andet netværk
I går 21:08 Hvor kan man se Alan Turings mekaniske apparat til at løse Enignas koder Af KurtG i Andet hardware
I går 18:46 Kan det passe ;-) Af fjorbak i Routere & Switches
White papers
Flere white papers »


Premium
Teaser billede
Microsoft skyder dele af skylden for CrowdStrike-nedbrud på 15 år gammel EU-aftale
Læs mere »
Derfor står Danske Bank foran en kæmpe AWS-transformation: Ellers skulle vi bygge en ny infrastruktur for at følge med
Det er blevet kaldt ”det største it-nedbrud i historien” og omkostningerne kan nemt løbe op i syv milliarder kroner: Men hvem skal betale for Crowdstrikes fejl?
Europas største software-leverandør stryger frem på cloud-fronten – men 97 procent af overskuddet er forduftet
Se alle »
Computerworld
Teaser billede
Microsoft-nedbrud spreder sig: It-systemer i lufthavne verden over er ramt
Læs mere »
Test: Denne mikro-pc er smartere end de stærkeste desktop-maskiner - men flopper alligevel
Elon Musk dropper CrowdStrike efter kæmpe nedbrud
Hundredevis af flyafgange ramt af stort Microsoft-nedbrud
Se alle »
CIO
Teaser billede
Microsoft er på sagen: I gang med at løse kæmpe nedbrud efter katastrofal Crowdstrike-fejl
Læs mere »
Så mange Microsoft-enheder blev ramt af gigantisk Crowdstrike-koks
Telenor skrotter ældre it-system: Nyt system er en hyldevare
Peter Lüth udlever CTO-drømmen: Bygger et system fra bunden og tjener kassen på det
Se alle »
Job & Karriere
Teaser billede
Efter 12 år er NNIT's hovedkvarter i Søborg nu ryddet og tomt - alle arbejder hjemme: "Det er med et vist vemod"
Læs mere »
Norlys skal splittes op i fem selskaber: Nu bliver flere ansatte og ledere fyret
Dansk top-profil trækker sig fra Microsoft: Skal være direktør i TDC Erhverv
KMD-direktør forlader selskabet: Det skal hun nu
Se alle »
White paper
Teaser billede
Sådan: Sikker, hurtig og fleksibel storage til dine kritiske data
Læs mere »
Opdag fordelene ved cloud-baseret backup og recovery
Sådan får du overblik og beskytter dine cloudapplikationer
Unbreakable - sådan sikrer du dig vedvarende og uafbrudt adgang til dine data
Se alle »

IT-JOB
Events
Flere events »
White papers
Flere white papers »
IT-Kurser
Se alle vores it-kurser »