Ktos zapoadl jakiegos perlowskiego pajaczka, przyblokuj ip dokompiluj dso
mod_secure i tyle
----- Original Message -----
From: "Przemysław Śmiały" <xtc@lancaster.one.pl>
To: <slacklist@olek.waw.pl>
Sent: Saturday, June 11, 2005 12:23 PM
Subject: [slacklist] Włam na apacza ???

> Hej! Przeglądam sobie logi do apacza i ... sami zobaczcie kawałek:
> cat error.log
>
> [Tue Jun 07 20:47:38 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats
> [Tue Jun 07 20:47:40 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats.pl
> [Tue Jun 07 20:47:45 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats
> [Tue Jun 07 20:47:46 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats.pl
> [Tue Jun 07 20:47:51 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats
> [Tue Jun 07 20:47:52 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats.pl
> [Tue Jun 07 20:47:54 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/cgi
> [Tue Jun 07 20:47:59 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats
> [Tue Jun 07 20:47:59 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/stats
> [Tue Jun 07 20:48:00 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/cgi
> [Tue Jun 07 20:48:04 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/stats
> [Tue Jun 07 20:48:04 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/stats
> [Tue Jun 07 20:48:08 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats
> [Tue Jun 07 20:48:09 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/stats
> [Tue Jun 07 20:48:09 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats.pl
> [Tue Jun 07 20:48:14 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/cgi
> [Tue Jun 07 20:48:16 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/stats
> [Tue Jun 07 20:48:17 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats.pl
> [Tue Jun 07 20:48:22 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/cgi
> [Tue Jun 07 20:48:24 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats.pl
> [Tue Jun 07 22:46:14 2005] [notice] caught SIGTERM, shutting down
> [Tue Jun 07 22:47:39 2005] [notice] Apache/2.0.52 (Unix) PHP/4.3.11
> configured
> -- resuming normal operations
> [Wed Jun 08 12:52:34 2005] [error] [client 192.168.1.1] File does not
> exist:
> /dane/strona/~cddb
> [Thu Jun 09 20:11:48 2005] [error] [client 61.62.22.219] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats
> [Thu Jun 09 20:11:48 2005] [error] [client 61.62.22.219] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats.pl
> [Thu Jun 09 20:11:49 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/cgi
> [Thu Jun 09 20:11:50 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/cp
> [Thu Jun 09 20:11:51 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/stat-cgi
> [Thu Jun 09 20:11:52 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/awstats
> [Thu Jun 09 20:11:52 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/awstats
> [Thu Jun 09 20:11:58 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/cp
> [Thu Jun 09 20:11:59 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/stat-cgi
> [Thu Jun 09 20:11:59 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/awstats
> [Thu Jun 09 20:12:00 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/awstats
> [Thu Jun 09 20:27:39 2005] [error] [client 69.53.28.218] File does not
> exist:
> /dane/strona/scripts
> [Fri Jun 10 11:44:14 2005] [notice] caught SIGTERM, shutting down
> [Fri Jun 10 11:46:02 2005] [notice] Apache/2.0.52 (Unix) PHP/4.3.11
> configured
> -- resuming normal operations
> [Fri Jun 10 21:14:47 2005] [error] [client 210.95.84.200] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/proxj3.cgi
> [Fri Jun 10 21:14:47 2005] [error] [client 210.95.84.200] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/proxj3.cgi
> [Fri Jun 10 21:14:56 2005] [error] [client 210.95.84.200] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/proxj3.cgi
>
> ____________________________
>
> Trochę tego dużo, za co przepraszam, ale zdaje mi się że kroś chce mi się
> włamać. Mam się czego obawiać czy to raczejnormalne ataki lamerów? A może
> ktoś
> szuka u mnie dziury?
> Czego mam ni[Tue Jun 07 20:47:38 2005] [error] [client 80.51.117.15]
> script
> not found or unable to stat: /usr/local/httpd/cgi-bin/awstats
> [Tue Jun 07 20:47:40 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats.pl
> [Tue Jun 07 20:47:45 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats
> [Tue Jun 07 20:47:46 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats.pl
> [Tue Jun 07 20:47:51 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats
> [Tue Jun 07 20:47:52 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats.pl
> [Tue Jun 07 20:47:54 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/cgi
> [Tue Jun 07 20:47:59 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats
> [Tue Jun 07 20:47:59 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/stats
> [Tue Jun 07 20:48:00 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/cgi
> [Tue Jun 07 20:48:04 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/stats
> [Tue Jun 07 20:48:04 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/stats
> [Tue Jun 07 20:48:08 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats
> [Tue Jun 07 20:48:09 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/stats
> [Tue Jun 07 20:48:09 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats.pl
> [Tue Jun 07 20:48:14 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/cgi
> [Tue Jun 07 20:48:16 2005] [error] [client 80.51.117.15] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/stats
> [Tue Jun 07 20:48:17 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats.pl
> [Tue Jun 07 20:48:22 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/cgi
> [Tue Jun 07 20:48:24 2005] [error] [client 80.51.117.15] File does not
> exist:
> /dane/strona/awstats.pl
> [Tue Jun 07 22:46:14 2005] [notice] caught SIGTERM, shutting down
> [Tue Jun 07 22:47:39 2005] [notice] Apache/2.0.52 (Unix) PHP/4.3.11
> configured
> -- resuming normal operations
> [Wed Jun 08 12:52:34 2005] [error] [client 192.168.1.1] File does not
> exist:
> /dane/strona/~cddb
> [Thu Jun 09 20:11:48 2005] [error] [client 61.62.22.219] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats
> [Thu Jun 09 20:11:48 2005] [error] [client 61.62.22.219] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/awstats.pl
> [Thu Jun 09 20:11:49 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/cgi
> [Thu Jun 09 20:11:50 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/cp
> [Thu Jun 09 20:11:51 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/stat-cgi
> [Thu Jun 09 20:11:52 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/awstats
> [Thu Jun 09 20:11:52 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/awstats
> [Thu Jun 09 20:11:58 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/cp
> [Thu Jun 09 20:11:59 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/stat-cgi
> [Thu Jun 09 20:11:59 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/awstats
> [Thu Jun 09 20:12:00 2005] [error] [client 61.62.22.219] File does not
> exist:
> /dane/strona/awstats
> [Thu Jun 09 20:27:39 2005] [error] [client 69.53.28.218] File does not
> exist:
> /dane/strona/scripts
> [Fri Jun 10 11:44:14 2005] [notice] caught SIGTERM, shutting down
> [Fri Jun 10 11:46:02 2005] [notice] Apache/2.0.52 (Unix) PHP/4.3.11
> configured
> -- resuming normal operations
> [Fri Jun 10 21:14:47 2005] [error] [client 210.95.84.200] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/proxj3.cgi
> [Fri Jun 10 21:14:47 2005] [error] [client 210.95.84.200] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/proxj3.cgi
> [Fri Jun 10 21:14:56 2005] [error] [client 210.95.84.200] script not found
> or
> unable to stat: /usr/local/httpd/cgi-bin/proxj3.cgi
>
> ________________________
>
> Przepraszam że tak dużo tego, ale to i tak tylko kawałek loga. Co o tym
> sądzicie bo według mnie ktoś próbuje się włamać na mojego indianina. Czy
> mam
> się czegoś obawiać, czy może to standardowe ataki lamerów? A może ktoś
> szuka
> dziury?
> Czeego nie instalować, na co mogą być te ataki?
>
>
> --
> Przemek
>
Received on Sat Jun 11 17:04:21 2005