Jak odolávat útokům?

[Thomas123]

Zdravím, mám malý server, mám tam nějaké weby, více než 150 lidí denně tam nebude. Ošem trápí mě logy tohoto serveru, co mě nejvíce dojalo jsou logy Apache:

Kód: [Vybrat]

[Sun Aug 16 12:10:40 2009] [error] [client 91.121.119.38] File does not exist: /var/www/scripts
[Sun Aug 16 12:11:31 2009] [error] [client 91.121.119.38] File does not exist: /var/www/admin
[Sun Aug 16 12:12:23 2009] [error] [client 91.121.119.38] File does not exist: /var/www/Admin
[Sun Aug 16 12:13:14 2009] [error] [client 91.121.119.38] File does not exist: /var/www/cpanelsql
[Sun Aug 16 12:14:05 2009] [error] [client 91.121.119.38] File does not exist: /var/www/db
[Sun Aug 16 12:14:57 2009] [error] [client 91.121.119.38] File does not exist: /var/www/dbadmin
[Sun Aug 16 12:15:49 2009] [error] [client 91.121.119.38] File does not exist: /var/www/myadmin
[Sun Aug 16 12:16:41 2009] [error] [client 91.121.119.38] File does not exist: /var/www/mysql
[Sun Aug 16 12:17:32 2009] [error] [client 91.121.119.38] File does not exist: /var/www/mysqladmin
[Sun Aug 16 12:18:24 2009] [error] [client 91.121.119.38] File does not exist: /var/www/mysql-admin
[Sun Aug 16 12:19:16 2009] [error] [client 91.121.119.38] File does not exist: /var/www/mysqlmanager
[Sun Aug 16 12:20:07 2009] [error] [client 91.121.119.38] File does not exist: /var/www/p
[Sun Aug 16 12:20:59 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpmanager
[Sun Aug 16 12:21:50 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpmya
[Sun Aug 16 12:23:33 2009] [error] [client 91.121.119.38] File does not exist: /var/www/php-myadmin
[Sun Aug 16 12:24:25 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpmy-admin
[Sun Aug 16 12:25:16 2009] [error] [client 91.121.119.38] File does not exist: /var/www/php-my-admin
[Sun Aug 16 12:26:07 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin
[Sun Aug 16 12:26:59 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.11.8.1
[Sun Aug 16 12:27:50 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.2.3
[Sun Aug 16 12:28:42 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.2.6
[Sun Aug 16 12:29:33 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.1
[Sun Aug 16 12:30:25 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.4
[Sun Aug 16 12:31:17 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.5
[Sun Aug 16 12:32:08 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.5-pl1
[Sun Aug 16 12:33:00 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.5-rc1
[Sun Aug 16 12:33:51 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.5-rc2
[Sun Aug 16 12:34:43 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.6
[Sun Aug 16 12:35:34 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.6-rc1
[Sun Aug 16 12:36:25 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.6-rc2
[Sun Aug 16 12:37:17 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.7
[Sun Aug 16 12:38:08 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.5.7-pl1
[Sun Aug 16 12:39:01 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0
[Sun Aug 16 12:39:51 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-alpha
[Sun Aug 16 12:40:43 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-alpha2
[Sun Aug 16 12:41:34 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-beta1
[Sun Aug 16 12:42:26 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-beta2
[Sun Aug 16 12:43:17 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-pl1
[Sun Aug 16 12:44:08 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-pl2
[Sun Aug 16 12:45:00 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-pl3
[Sun Aug 16 12:45:52 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-rc1
[Sun Aug 16 12:46:44 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-rc2
[Sun Aug 16 12:47:35 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.0-rc3
[Sun Aug 16 12:48:27 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.1
[Sun Aug 16 12:49:18 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.1-pl1
[Sun Aug 16 12:50:09 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.1-pl2
[Sun Aug 16 12:51:01 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.1-pl3
[Sun Aug 16 12:51:53 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.1-rc1
[Sun Aug 16 12:52:44 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.1-rc2
[Sun Aug 16 12:53:35 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.2
[Sun Aug 16 12:54:26 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.2-beta1
[Sun Aug 16 12:55:19 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.2-pl1
[Sun Aug 16 12:56:10 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.2-rc1
[Sun Aug 16 12:57:01 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.3
[Sun Aug 16 12:57:52 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.3-pl1
[Sun Aug 16 12:58:44 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.3-rc1
[Sun Aug 16 12:59:36 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.4
[Sun Aug 16 13:00:27 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.4-pl1
[Sun Aug 16 13:01:18 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.4-pl2
[Sun Aug 16 13:02:09 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.4-pl3
[Sun Aug 16 13:03:01 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.4-pl4
[Sun Aug 16 13:03:52 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.6.4-rc1
[Sun Aug 16 13:04:43 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.7.0
[Sun Aug 16 13:05:34 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.7.0-beta1
[Sun Aug 16 13:06:26 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.7.0-pl1
[Sun Aug 16 13:07:17 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.7.0-pl2
[Sun Aug 16 13:08:06 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.7.0-rc1
[Sun Aug 16 13:08:57 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.0.1
[Sun Aug 16 13:09:48 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.0.2
[Sun Aug 16 13:10:39 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.0.3
[Sun Aug 16 13:11:30 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.0.4
[Sun Aug 16 13:12:21 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.0
[Sun Aug 16 13:13:15 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.0-beta1
[Sun Aug 16 13:14:03 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.0-rc1
[Sun Aug 16 13:14:54 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.0-rc2
[Sun Aug 16 13:15:45 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.1
[Sun Aug 16 13:16:36 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.1-rc1
[Sun Aug 16 13:17:27 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2.8.2
[Sun Aug 16 13:18:18 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpmyadmin2
[Sun Aug 16 13:19:10 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin2
[Sun Aug 16 13:20:00 2009] [error] [client 91.121.119.38] File does not exist: /var/www/phpMyAdmin-2
[Sun Aug 16 13:20:51 2009] [error] [client 91.121.119.38] File does not exist: /var/www/pma
[Sun Aug 16 13:21:42 2009] [error] [client 91.121.119.38] File does not exist: /var/www/PMA
[Sun Aug 16 13:22:33 2009] [error] [client 91.121.119.38] File does not exist: /var/www/pma2005
[Sun Aug 16 13:23:24 2009] [error] [client 91.121.119.38] File does not exist: /var/www/PMA2005
[Sun Aug 16 13:24:15 2009] [error] [client 91.121.119.38] File does not exist: /var/www/SQL
[Sun Aug 16 13:25:07 2009] [error] [client 91.121.119.38] File does not exist: /var/www/sqlmanager
[Sun Aug 16 13:25:58 2009] [error] [client 91.121.119.38] File does not exist: /var/www/sqlweb
[Sun Aug 16 13:26:49 2009] [error] [client 91.121.119.38] File does not exist: /var/www/SSLMySQLAdmin
[Sun Aug 16 13:27:40 2009] [error] [client 91.121.119.38] File does not exist: /var/www/webadmin
[Sun Aug 16 13:28:33 2009] [error] [client 91.121.119.38] File does not exist: /var/www/webdb
[Sun Aug 16 13:29:24 2009] [error] [client 91.121.119.38] File does not exist: /var/www/websql

Jak se mám bránit, zbytečně mi to zatěžuje server a rozhodně bych našel lepší využití výpočetního výkonu.

[Spock lone wolf]

Co třeba začít přidáním IP (příp. rozsahu) do blocklistu?
Stačí přidat IP do /etc/hosts.deny

[8472]

1. zisti si co je ta IPcka zač.
2. ak je ta IPcka len nejaky humus, tak ju blokni, napr. 'iptables -A INPUT -s 91.121.119.38 -j DROP' (resp. vloz to aj do /etc/rc.local aby sa to zavadzalo po starte systemu)

[petrakis]

to je klasicky robot co se ti snazi dostat do databaze. Tady mas vypis ohledne te Ip adresy:

http://www.db.ripe.net/whois?form_type=simple&full_query_string=&searchtext=91.121.119.38&submit.x=12&submit.y=9&submit=Search

pres .htacces mu dej block ( pokud chces muzes cely rozsah IP adres, rozsah vidis v linku co jsem ti postnul)

[Thomas123]

Jednou jsem to už blokoval, ale pak zase přišel z jiné IP adresy, potom zase z jiné až jsem nakonec zablokoval i Google 

Neexistuje nějaký takový veřejný blacklist nebo nějaká možnost server s něčím takovým propojit a mít tak aktuální roboty blokované? Nebo to budu muset po jedné IP adrese blokovat?