Contenu | Rechercher | Menus

Annonce

Si vous avez des soucis pour rester connecté, déconnectez-vous puis reconnectez-vous depuis ce lien en cochant la case
Me connecter automatiquement lors de mes prochaines visites.

À propos de l'équipe du forum.

Pages : 1

#1 Le 07/11/2010, à 15:36

dgeodjo

attack ZmEu [resolu]

Linuxien bonjour,

j'ai installé depuis un bout de temps un serveur ubuntu qui aujourd'hui tourne sous la 10.04.
Lorsque je regarde les log d'apache2, j'aperçois une tentative de connexion sur phpmyadmin sous le non de "ZmEu"

92.137.145.220 - - [07/Nov/2010:00:08:33 +0100] "*" 200 6309 "-" "-"
174.37.162.202 - - [07/Nov/2010:05:08:49 +0100] "GET //phpmyadmin/ HTTP/1.1" 404 463 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
174.37.162.202 - - [07/Nov/2010:05:08:54 +0100] "GET //phpMyAdmin/ HTTP/1.1" 404 464 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
174.37.162.202 - - [07/Nov/2010:05:09:00 +0100] "GET // HTTP/1.1" 200 1780 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
174.37.162.202 - - [07/Nov/2010:05:09:06 +0100] "GET //mysqladmin/ HTTP/1.1" 404 464 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
174.37.162.202 - - [07/Nov/2010:05:09:12 +0100] "GET //pma/ HTTP/1.1" 404 458 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
174.37.162.202 - - [07/Nov/2010:05:09:18 +0100] "GET //db/ HTTP/1.1" 404 457 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
174.37.162.202 - - [07/Nov/2010:05:09:24 +0100] "GET //dbadmin/ HTTP/1.1" 404 461 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
174.37.162.202 - - [07/Nov/2010:05:09:30 +0100] "GET //mysql/ HTTP/1.1" 404 461 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
174.37.162.202 - - [07/Nov/2010:05:09:36 +0100] "GET //sql/ HTTP/1.1" 404 458 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
174.37.162.202 - - [07/Nov/2010:05:09:42 +0100] "GET //myadmin/ HTTP/1.1" 404 461 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"

j'aimerais bien savoir de quoi il s'agit et qu'est-ce qu'il est préférable de faire (est-ce dangereux comme attack etc).
La dernière fois que j'ai vue ces lignes apparaitre dans le log il y a eu des tentatives de connexion toutes les 5s pendant 2h.. mais toutes les réponses se sont traduise en erreur 404.
cette fois-ci il y a succès 200, est-ce que cela signifie au niveau de la sécurité du serveur ? 

174.37.162.202 - - [07/Nov/2010:05:09:00 +0100] "GET // HTTP/1.1" 200 1780 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"

bien évidement l'IP n'est pas la même que la dernière fois et visiblement fail2ban ne fait rien pour ce genre d'attaque.

Peut-on prendre ce genre d'attaque à la légère ou pas ? comment y faire fasse ?

très cordialement

Dgeodjo

Dernière modification par dgeodjo (Le 10/11/2010, à 22:17)

Hors ligne

#2 Le 07/11/2010, à 15:41

dgeodjo

Re : attack ZmEu [resolu]

voici le log de la fois d'avant

213.151.89.37 - - [29/Oct/2010:16:48:25 +0200] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 404 486 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:48:30 +0200] "GET /scripts/setup.php HTTP/1.1" 404 468 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:48:36 +0200] "GET /admin/scripts/setup.php HTTP/1.1" 404 472 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:48:42 +0200] "GET /admin/pma/scripts/setup.php HTTP/1.1" 404 474 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:48:48 +0200] "GET /admin/phpmyadmin/scripts/setup.php HTTP/1.1" 404 477 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:48:54 +0200] "GET /db/scripts/setup.php HTTP/1.1" 404 470 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:00 +0200] "GET /dbadmin/scripts/setup.php HTTP/1.1" 404 473 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:06 +0200] "GET /myadmin/scripts/setup.php HTTP/1.1" 404 474 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:12 +0200] "GET /mysql/scripts/setup.php HTTP/1.1" 404 472 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:18 +0200] "GET /mysqladmin/scripts/setup.php HTTP/1.1" 404 476 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:24 +0200] "GET /typo3/phpmyadmin/scripts/setup.php HTTP/1.1" 404 479 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:30 +0200] "GET /phpadmin/scripts/setup.php HTTP/1.1" 404 473 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:36 +0200] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 476 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:42 +0200] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 475 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:48 +0200] "GET /phpmyadmin1/scripts/setup.php HTTP/1.1" 404 476 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:49:54 +0200] "GET /phpmyadmin2/scripts/setup.php HTTP/1.1" 404 476 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:00 +0200] "GET /pma/scripts/setup.php HTTP/1.1" 404 471 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:06 +0200] "GET /web/phpMyAdmin/scripts/setup.php HTTP/1.1" 404 478 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:12 +0200] "GET /xampp/phpmyadmin/scripts/setup.php HTTP/1.1" 404 479 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:18 +0200] "GET /web/scripts/setup.php HTTP/1.1" 404 471 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:24 +0200] "GET /php-my-admin/scripts/setup.php HTTP/1.1" 404 477 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:30 +0200] "GET /websql/scripts/setup.php HTTP/1.1" 404 472 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:36 +0200] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 404 475 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:42 +0200] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 404 476 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:48 +0200] "GET /phpMyAdmin-2/scripts/setup.php HTTP/1.1" 404 477 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:50:54 +0200] "GET /php-my-admin/scripts/setup.php HTTP/1.1" 404 477 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:00 +0200] "GET /phpMyAdmin-2.2.3/scripts/setup.php HTTP/1.1" 404 479 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:06 +0200] "GET /phpMyAdmin-2.2.6/scripts/setup.php HTTP/1.1" 404 479 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:12 +0200] "GET /phpMyAdmin-2.5.1/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:18 +0200] "GET /phpMyAdmin-2.5.4/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:24 +0200] "GET /phpMyAdmin-2.5.5-rc1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:30 +0200] "GET /phpMyAdmin-2.5.5-rc2/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:36 +0200] "GET /phpMyAdmin-2.5.5/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:42 +0200] "GET /phpMyAdmin-2.5.5-pl1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:48 +0200] "GET /phpMyAdmin-2.5.6-rc1/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:51:54 +0200] "GET /phpMyAdmin-2.5.6-rc2/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:00 +0200] "GET /phpMyAdmin-2.5.6/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:06 +0200] "GET /phpMyAdmin-2.5.7/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:12 +0200] "GET /phpMyAdmin-2.5.7-pl1/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:18 +0200] "GET /phpMyAdmin-2.6.0-alpha/scripts/setup.php HTTP/1.1" 404 485 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:24 +0200] "GET /phpMyAdmin-2.6.0-alpha2/scripts/setup.php HTTP/1.1" 404 487 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:30 +0200] "GET /phpMyAdmin-2.6.0-beta1/scripts/setup.php HTTP/1.1" 404 485 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:36 +0200] "GET /phpMyAdmin-2.6.0-beta2/scripts/setup.php HTTP/1.1" 404 485 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:42 +0200] "GET /phpMyAdmin-2.6.0-rc1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:48 +0200] "GET /phpMyAdmin-2.6.0-rc2/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:52:54 +0200] "GET /phpMyAdmin-2.6.0-rc3/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:00 +0200] "GET /phpMyAdmin-2.6.0/scripts/setup.php HTTP/1.1" 404 481 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:06 +0200] "GET /phpMyAdmin-2.6.0-pl1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:12 +0200] "GET /phpMyAdmin-2.6.0-pl2/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:18 +0200] "GET /phpMyAdmin-2.6.0-pl3/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:24 +0200] "GET /phpMyAdmin-2.6.1-rc1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:30 +0200] "GET /phpMyAdmin-2.6.1-rc2/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:36 +0200] "GET /phpMyAdmin-2.6.1/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:42 +0200] "GET /phpMyAdmin-2.6.1-pl1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:48 +0200] "GET /phpMyAdmin-2.6.1-pl2/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:53:54 +0200] "GET /phpMyAdmin-2.6.1-pl3/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:00 +0200] "GET /phpMyAdmin-2.6.2-rc1/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:06 +0200] "GET /phpMyAdmin-2.6.2-beta1/scripts/setup.php HTTP/1.1" 404 485 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:12 +0200] "GET /phpMyAdmin-2.6.2-rc1/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:18 +0200] "GET /phpMyAdmin-2.6.2/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:24 +0200] "GET /phpMyAdmin-2.6.2-pl1/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:30 +0200] "GET /phpMyAdmin-2.6.3/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:36 +0200] "GET /phpMyAdmin-2.6.3-rc1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:42 +0200] "GET /phpMyAdmin-2.6.3/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:48 +0200] "GET /phpMyAdmin-2.6.3-pl1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:54:54 +0200] "GET /phpMyAdmin-2.6.4-rc1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:00 +0200] "GET /phpMyAdmin-2.6.4-pl1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:06 +0200] "GET /phpMyAdmin-2.6.4-pl2/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:12 +0200] "GET /phpMyAdmin-2.6.4-pl3/scripts/setup.php HTTP/1.1" 404 484 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:18 +0200] "GET /phpMyAdmin-2.6.4-pl4/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:24 +0200] "GET /phpMyAdmin-2.6.4/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:30 +0200] "GET /phpMyAdmin-2.7.0-beta1/scripts/setup.php HTTP/1.1" 404 485 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:36 +0200] "GET /phpMyAdmin-2.7.0-rc1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:42 +0200] "GET /phpMyAdmin-2.7.0-pl1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:48 +0200] "GET /phpMyAdmin-2.7.0-pl2/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:55:54 +0200] "GET /phpMyAdmin-2.7.0/scripts/setup.php HTTP/1.1" 404 481 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:00 +0200] "GET /phpMyAdmin-2.8.0-beta1/scripts/setup.php HTTP/1.1" 404 485 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:06 +0200] "GET /phpMyAdmin-2.8.0-rc1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:12 +0200] "GET /phpMyAdmin-2.8.0-rc2/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:18 +0200] "GET /phpMyAdmin-2.8.0/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:24 +0200] "GET /phpMyAdmin-2.8.0.1/scripts/setup.php HTTP/1.1" 404 482 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:30 +0200] "GET /phpMyAdmin-2.8.0.2/scripts/setup.php HTTP/1.1" 404 482 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:36 +0200] "GET /phpMyAdmin-2.8.0.3/scripts/setup.php HTTP/1.1" 404 482 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:42 +0200] "GET /phpMyAdmin-2.8.0.4/scripts/setup.php HTTP/1.1" 404 481 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:48 +0200] "GET /phpMyAdmin-2.8.1-rc1/scripts/setup.php HTTP/1.1" 404 483 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:56:54 +0200] "GET /phpMyAdmin-2.8.1/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:00 +0200] "GET /phpMyAdmin-2.8.2/scripts/setup.php HTTP/1.1" 404 480 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:06 +0200] "GET /sqlmanager/scripts/setup.php HTTP/1.1" 404 476 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:12 +0200] "GET /mysqlmanager/scripts/setup.php HTTP/1.1" 404 478 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:18 +0200] "GET /p/m/a/scripts/setup.php HTTP/1.1" 404 471 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:24 +0200] "GET /PMA2005/scripts/setup.php HTTP/1.1" 404 474 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:30 +0200] "GET /pma2005/scripts/setup.php HTTP/1.1" 404 474 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:36 +0200] "GET /phpmanager/scripts/setup.php HTTP/1.1" 404 475 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:42 +0200] "GET /php-myadmin/scripts/setup.php HTTP/1.1" 404 476 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:48 +0200] "GET /phpmy-admin/scripts/setup.php HTTP/1.1" 404 476 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:57:54 +0200] "GET /webadmin/scripts/setup.php HTTP/1.1" 404 474 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:58:00 +0200] "GET /sqlweb/scripts/setup.php HTTP/1.1" 404 472 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:58:06 +0200] "GET /websql/scripts/setup.php HTTP/1.1" 404 472 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:58:12 +0200] "GET /webdb/scripts/setup.php HTTP/1.1" 404 471 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:58:18 +0200] "GET /mysqladmin/scripts/setup.php HTTP/1.1" 404 476 "-" "ZmEu"
213.151.89.37 - - [29/Oct/2010:16:58:24 +0200] "GET /mysql-admin/scripts/setup.php HTTP/1.1" 404 477 "-" "ZmEu"
125.215.205.180 - - [29/Oct/2010:18:38:51 +0200] "GET //phpmyadmin/ HTTP/1.1" 404 465 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"
125.215.205.180 - - [29/Oct/2010:18:38:56 +0200] "GET //phpMyAdmin/ HTTP/1.1" 404 466 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"

Hors ligne

#3 Le 10/11/2010, à 03:03

Yann

Re : attack ZmEu [resolu]

C'est rien du tout, c'est un bot qui scanne ton serveur pour savoir si tu n'aurais pas une vieille version de phpmyadmin, de webmin ou autre afin de lancer un exploit de manière automatique. Comme tu vois chez toi, "404" a chaque ligne, il ne trouve rien et gaspille juste son CPU (ou plutot celui des machines infectées, les IPs varient) et le tien.

Si dans le tas tu vois une requete qui aboutit, "200" au lieu de 404, suivie d une multitute de requetes bizarres sur la meme adresse, et que ladite adresse héberge un phpmyadmin out of date, alors il faudrait t'inquiéter wink Mais ca n'a pas l'air d'être ton cas. Ca arrive tout le temps. Lis tes logs ssh, ca doit ressembler a ca aussi wink

Et pourtant moi, jsuis pas du genre délicat,
Dans un coin de la musse, j'ai posé mon matelas - Paulo Anarkao

Hors ligne

#4 Le 10/11/2010, à 21:04

dgeodjo

Re : attack ZmEu [resolu]

Merci bien pour ces précisions ! c'est rassurant smile

ce qui m'avait inquiété c'était cette ligne

174.37.162.202 - - [07/Nov/2010:05:09:00 +0100] "GET // HTTP/1.1" 200 1780 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro"

mais je ne pense pas que se soit un problème.

Hors ligne

#5 Le 10/11/2010, à 22:02

Yann

Re : attack ZmEu [resolu]

Non, / c'est ta page d'accueil, // , a priori ca a du lui retourner la page d'accueil aussi smile

Et pourtant moi, jsuis pas du genre délicat,
Dans un coin de la musse, j'ai posé mon matelas - Paulo Anarkao

Hors ligne

#6 Le 10/11/2010, à 22:16

dgeodjo

Re : attack ZmEu [resolu]

ok c'est bien ce qu'il me semblait
Bonne soirée

je met en résolut

Dernière modification par dgeodjo (Le 10/11/2010, à 22:26)

Hors ligne

Pages : 1