1. ¡OFERTA! con cupón "DIRVPS": hosting por $0,01 y también VPS Linux y Windows por $0,01 el primer mes por Interserver ← publi
    Descartar aviso
Descartar aviso
Al usar este sitio web, aceptas que nosotros y nuestros socios podamos establecer cookies para fines tales como personalizar el contenido y la publicidad. Más información.

Peticiones archivo inexistente apache (Posible botnet/DoS)

Tema en 'Servidores Dedicados' iniciado por hclick, 31 Mar 2011.

  1. hclick

    hclick Nuevo usuario

    He logrado aislar el problema del post anterior. Se recibe una petición sobre un archivo inexistente en Apache, algo así como 50 veces al minuto, y termina bloqueándose el mismo Apache. He pasado el chkrootkit pero no me saca nada. ¿Alguna idea? He bloqueado estas ips por IPTABLES, pero claro, en otros logs salen otras ips, con lo que sería imposible ir bloqueando una tras otra.
    Adjunto el log:

    CODE, HTML o PHP Insertado:
    [Thu Mar 31 14:13:09 2011] [notice] Apache configured -- resuming normal operations
[Thu Mar 31 14:13:10 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:13:10 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:13:12 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:13:14 2011] [error] [client 92.115.107.52] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:13:20 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:13:21 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:13:22 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes


[Thu Mar 31 14:53:55 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:00 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:03 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:05 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:10 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:13 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:15 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:20 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:24 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:25 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:30 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:34 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:35 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:41 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:44 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:45 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:51 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:54 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:54:55 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:55:01 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:55:04 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:55:06 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:55:10 2011] [error] [client 92.115.107.52] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:55:11 2011] [error] [client 92.114.225.198] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:55:14 2011] [error] [client 93.116.145.132] File does not exist: /var/www/vhosts/default/htdocs/yes
[Thu Mar 31 14:55:16 2011] [error] [client 109.185.252.47] File does not exist: /var/www/vhosts/default/htdocs/yes
     
    hclick, 31 Mar 2011
    #1
  2. Anunciante

    Anunciante

     
  3. hclick

    hclick Nuevo usuario

    Hemos encontrado en los access_log de apache esto:
    15.107.52 - - [31/Mar/2011:15:05:12 +0200] "POST /yes/getcfg.php HTTP/1.1" 404 275 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows $
    92.114.225.198 - - [31/Mar/2011:15:05:15 +0200] "POST /yes/getcfg.php HTTP/1.1" 404 275 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows$
    92.115.107.52 - - [31/Mar/2011:15:05:22 +0200] "POST /yes/getcfg.php HTTP/1.1" 404 275 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Win

    Hace referencia al mismo fichero, pero no sabemos donde está.
     
    hclick, 31 Mar 2011
    #2
  4. comvive

    comvive Usuario activo

    crea el fichero vacio con touch /var/www/vhosts/default/htdocs/yes y reduce los tiempos de timeout.

    y no te tirara el servidor.

    un saludo
     
    comvive, 1 Abr 2011
    #3


Alojamiento web, Hosting Reseller, Servidores Dedicados - All in Hosting


    
    
    
    
Blog · Sitios amigos: GuiaHosting · Unidominios · Interalta ·