hunderds of Requests with error response codes in httpd begin logwatch

Discussion in 'Apache' started by joujoba, Apr 20, 2011.

  1. #1
    hello,

    I have seen this always in my logwatch but now it really starts to worry me, i am using CentOS. can you please help me to know how to stop such attacks? thank you








    --------------------- httpd Begin ------------------------ 
     
     Requests with error response codes
        400 Bad Request
           /: 1 Time(s)
           /w00tw00t.at.ISC.SANS.DFind:): 2 Time(s)
           /w00tw00t.at.ISC.SANS.test0:): 2 Time(s)
        404 Not Found
           /PMA/main.php: 1 Time(s)
           /PMA2005/main.php: 1 Time(s)
           /admin/main.php: 1 Time(s)
           /admin/mysql/main.php: 1 Time(s)
           /admin/phpMyAdmin/main.php: 1 Time(s)
           /admin/phpmyadmin/main.php: 1 Time(s)
           /admin/pma/main.php: 1 Time(s)
           /admin/sysadmin/main.php: 1 Time(s)
           /db/main.php: 1 Time(s)
           /dbadmin/main.php: 1 Time(s)
           /myadmin/main.php: 1 Time(s)
           /mysql-admin/main.php: 1 Time(s)
           /mysql/main.php: 1 Time(s)
           /mysqladmin/main.php: 1 Time(s)
           /mysqlmanager/main.php: 1 Time(s)
           /p/m/a/main.php: 1 Time(s)
           /php-my-admin/main.php: 1 Time(s)
           /php-myadmin/main.php: 1 Time(s)
           /phpMyA/main.php: 1 Time(s)
           /phpMyAdmi/main.php: 1 Time(s)
           /phpMyAdmin-2.10.0/main.php: 1 Time(s)
           /phpMyAdmin-2.2.3/main.php: 1 Time(s)
           /phpMyAdmin-2.2.6/main.php: 1 Time(s)
           /phpMyAdmin-2.3.0/main.php: 1 Time(s)
           /phpMyAdmin-2.3.1/main.php: 1 Time(s)
           /phpMyAdmin-2.3.2/main.php: 1 Time(s)
           /phpMyAdmin-2.3.3/main.php: 1 Time(s)
           /phpMyAdmin-2.3.4/main.php: 1 Time(s)
           /phpMyAdmin-2.3.5/main.php: 1 Time(s)
           /phpMyAdmin-2.3.6/main.php: 1 Time(s)
           /phpMyAdmin-2.3.7/main.php: 1 Time(s)
           /phpMyAdmin-2.3.8/main.php: 1 Time(s)
           /phpMyAdmin-2.3.9/main.php: 1 Time(s)
           /phpMyAdmin-2.4.0/main.php: 1 Time(s)
           /phpMyAdmin-2.4.1/main.php: 1 Time(s)
           /phpMyAdmin-2.4.2/main.php: 1 Time(s)
           /phpMyAdmin-2.4.3/main.php: 1 Time(s)
           /phpMyAdmin-2.4.4/main.php: 1 Time(s)
           /phpMyAdmin-2.4.5/main.php: 1 Time(s)
           /phpMyAdmin-2.4.6/main.php: 1 Time(s)
           /phpMyAdmin-2.4.7/main.php: 1 Time(s)
           /phpMyAdmin-2.4.8/main.php: 1 Time(s)
           /phpMyAdmin-2.4.9/main.php: 1 Time(s)
           /phpMyAdmin-2.5.0/main.php: 1 Time(s)
           /phpMyAdmin-2.5.1/main.php: 2 Time(s)
           /phpMyAdmin-2.5.2/main.php: 1 Time(s)
           /phpMyAdmin-2.5.3/main.php: 1 Time(s)
           /phpMyAdmin-2.5.4/main.php: 2 Time(s)
           /phpMyAdmin-2.5.5-pl1/main.php: 1 Time(s)
           /phpMyAdmin-2.5.5-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.5.5-rc2/main.php: 1 Time(s)
           /phpMyAdmin-2.5.5/main.php: 1 Time(s)
           /phpMyAdmin-2.5.6-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.5.6-rc2/main.php: 1 Time(s)
           /phpMyAdmin-2.5.6/main.php: 2 Time(s)
           /phpMyAdmin-2.5.7-pl1/main.php: 1 Time(s)
           /phpMyAdmin-2.5.7/main.php: 1 Time(s)
           /phpMyAdmin-2.5.8/main.php: 1 Time(s)
           /phpMyAdmin-2.5.9/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-alpha/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-alpha2/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-beta1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-beta2/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-pl1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-pl2/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-pl3/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-rc2/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0-rc3/main.php: 1 Time(s)
           /phpMyAdmin-2.6.0/main.php: 2 Time(s)
           /phpMyAdmin-2.6.1-pl1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.1-pl2/main.php: 1 Time(s)
           /phpMyAdmin-2.6.1-pl3/main.php: 1 Time(s)
           /phpMyAdmin-2.6.1-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.1-rc2/main.php: 1 Time(s)
           /phpMyAdmin-2.6.1/main.php: 2 Time(s)
           /phpMyAdmin-2.6.2-beta1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.2-pl1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.2-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.2/main.php: 1 Time(s)
           /phpMyAdmin-2.6.3-pl1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.3-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.3/main.php: 2 Time(s)
           /phpMyAdmin-2.6.4-pl1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.4-pl2/main.php: 1 Time(s)
           /phpMyAdmin-2.6.4-pl3/main.php: 1 Time(s)
           /phpMyAdmin-2.6.4-pl4/main.php: 1 Time(s)
           /phpMyAdmin-2.6.4-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.6.4/main.php: 1 Time(s)
           /phpMyAdmin-2.6.5/main.php: 1 Time(s)
           /phpMyAdmin-2.6.6/main.php: 1 Time(s)
           /phpMyAdmin-2.6.7/main.php: 1 Time(s)
           /phpMyAdmin-2.6.8/main.php: 1 Time(s)
           /phpMyAdmin-2.6.9/main.php: 1 Time(s)
           /phpMyAdmin-2.7.0-beta1/main.php: 1 Time(s)
           /phpMyAdmin-2.7.0-pl1/main.php: 1 Time(s)
           /phpMyAdmin-2.7.0-pl2/main.php: 1 Time(s)
           /phpMyAdmin-2.7.0-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.7.0/main.php: 1 Time(s)
           /phpMyAdmin-2.7.1/main.php: 1 Time(s)
           /phpMyAdmin-2.7.2/main.php: 1 Time(s)
           /phpMyAdmin-2.7.3/main.php: 1 Time(s)
           /phpMyAdmin-2.7.4/main.php: 1 Time(s)
           /phpMyAdmin-2.7.5/main.php: 1 Time(s)
           /phpMyAdmin-2.7.6/main.php: 1 Time(s)
           /phpMyAdmin-2.7.7/main.php: 1 Time(s)
           /phpMyAdmin-2.7.8/main.php: 1 Time(s)
           /phpMyAdmin-2.7.9/main.php: 1 Time(s)
           /phpMyAdmin-2.8.0-beta1/main.php: 1 Time(s)
           /phpMyAdmin-2.8.0-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.8.0-rc2/main.php: 1 Time(s)
           /phpMyAdmin-2.8.0.1/main.php: 1 Time(s)
           /phpMyAdmin-2.8.0.2/main.php: 1 Time(s)
           /phpMyAdmin-2.8.0.3/main.php: 1 Time(s)
           /phpMyAdmin-2.8.0.4/main.php: 1 Time(s)
           /phpMyAdmin-2.8.0/main.php: 1 Time(s)
           /phpMyAdmin-2.8.1-rc1/main.php: 1 Time(s)
           /phpMyAdmin-2.8.1/main.php: 1 Time(s)
           /phpMyAdmin-2.8.2/main.php: 1 Time(s)
           /phpMyAdmin-2.8.3/main.php: 1 Time(s)
           /phpMyAdmin-2.8.4/main.php: 1 Time(s)
           /phpMyAdmin-2.8.5/main.php: 1 Time(s)
           /phpMyAdmin-2.8.6/main.php: 1 Time(s)
           /phpMyAdmin-2.8.7/main.php: 1 Time(s)
           /phpMyAdmin-2.8.8/main.php: 1 Time(s)
           /phpMyAdmin-2.8.9/main.php: 1 Time(s)
           /phpMyAdmin-2.9.1/main.php: 1 Time(s)
           /phpMyAdmin-2.9.2/main.php: 1 Time(s)
           /phpMyAdmin-2/main.php: 1 Time(s)
           /phpMyAdmin-3/main.php: 1 Time(s)
           /phpMyAdmin-4/main.php: 1 Time(s)
           /phpMyAdmin/main.php: 1 Time(s)
           /phpMyAdmin1/main.php: 1 Time(s)
           /phpMyAdmin2/main.php: 1 Time(s)
           /phpMyAds/main.php: 1 Time(s)
           /phpm/main.php: 1 Time(s)
           /phpmanager/main.php: 1 Time(s)
           /phpmy-admin/main.php: 1 Time(s)
           /phpmy/main.php: 1 Time(s)
           /phpmyad-sys/main.php: 1 Time(s)
           /phpmyad/main.php: 1 Time(s)
           /phpmyadmin/main.php: 1 Time(s)
           /phpmyadmin2/main.php: 1 Time(s)
           /pma2005/main.php: 1 Time(s)
           /sqlmanager/main.php: 1 Time(s)
           /sqlweb/main.php: 1 Time(s)
           /sysadmin/main.php: 1 Time(s)
           /web/phpMyAdmin/main.php: 1 Time(s)
           /web/phpmyadmin/main.php: 1 Time(s)
           /web/sysadmin/main.php: 1 Time(s)
           /webadmin/main.php: 1 Time(s)
           /webdb/main.php: 1 Time(s)
           /websql/main.php: 1 Time(s)
     
     ---------------------- httpd End -------------------------
    Code (markup):
     
    joujoba, Apr 20, 2011 IP
  2. MartinPrestovic

    MartinPrestovic Peon

    Messages:
    213
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    0
    #2
    I wouldn't worry about it too much. They are being handled correctly by being issued with 404 or 400 error codes.

    As long as any software such as phpMyAdmin which you do have installed, is appropriately secured, then you wont have any problems.

    If you start trying to block those requests you will end up chasing your tail because new ones come out all the time. Not to mention wasting a huge amount of your server resources.
     
    MartinPrestovic, Apr 20, 2011 IP
  3. joujoba

    joujoba Peon

    Messages:
    100
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    ok thank you
     
    joujoba, Apr 20, 2011 IP