Apache2 log - Server Gehackt ?

Apache, Lighttpd, nginx, Cherokee
oemi1980
Posts: 25
Joined: 2006-10-07 09:52
 

Apache2 log - Server Gehackt ?

Post by oemi1980 »

Habe mir gerade den Apache log angesehen und eigenartiges bemerkt.
Kann es sein das mein Server Gehackt is ?

Code: Select all

87.118.100.232 - - [14/Dec/2006:14:02:29 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
212.241.203.224 - - [14/Dec/2006:14:12:29 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
212.241.203.224 - - [14/Dec/2006:16:14:10 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
85.88.12.130 - - [14/Dec/2006:17:30:54 +0100] "HEAD / HTTP/1.0" 302 - "-" "-"
84.19.177.168 - - [14/Dec/2006:20:12:35 +0100] "GET / HTTP/1.0" 302 - "-" "-"
80.82.141.19 - - [14/Dec/2006:20:58:25 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
213.246.61.91 - - [14/Dec/2006:22:55:28 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
67.36.196.90 - - [14/Dec/2006:23:26:34 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
212.241.203.224 - - [15/Dec/2006:00:34:34 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
212.241.203.224 - - [15/Dec/2006:01:41:33 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
213.246.61.91 - - [15/Dec/2006:02:28:23 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
212.241.203.109 - - [15/Dec/2006:02:58:23 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
194.72.238.62 - - [15/Dec/2006:06:34:33 +0100] "HEAD / HTTP/1.0" 302 - "-" "-"
212.241.203.109 - - [15/Dec/2006:07:09:08 +0100] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 316 "-" "-"
83.50.249.26 - - [15/Dec/2006:07:36:20 +0100] "GET / HTTP/1.1" 302 - "-" "-"
Top
User avatar
daemotron
Administrator
Administrator
Posts: 2641
Joined: 2004-01-21 17:44
 

Re: Apache2 log - Server Gehackt ?

Post by daemotron »

oemi1980 wrote:Kann es sein das mein Server Gehackt is ?
Das kann ich Dir nicht beanworten, aber Dein Apache-Log bietet jedenfalls keinen Anlass zur Sorge - Irgendjemand versucht, die ominöse Datei w00tw00t.at.ISC.SANS.DFind:) abzurufen, aber Dein Indianer antwortet immer brav mit einem 400 (File not found).
Top
User avatar
Joe User
Project Manager
Project Manager
Posts: 11183
Joined: 2003-02-27 01:00
Location: Hamburg
 

Re: Apache2 log - Server Gehackt ?

Post by Joe User »

Nein, zumindest diese Logzeilen zeigen keinen erfolgreichen Hack...
PayPal.Me/JoeUser ● FreeBSD Remote Installation
Wings for Life ● Wings for Life World Run

„If there’s more than one possible outcome of a job or task, and one
of those outcomes will result in disaster or an undesirable consequence,
then somebody will do it that way.“ -- Edward Aloysius Murphy Jr.
Top

Return to “Webserver”