J'ai récupéré ça dans mes logs, donc j'ai plutôt l'impression que la tentative était dirigée contre mon serveur, et non contre le site du FBI : ========================================================== # grep "123.242.224.7" access.log 123.242.224.7 - - [16/Apr/2014:23:29:05 +0200] "GET / HTTP/1.1" 403 140 "-" "Mozilla/5.0 (FHScan Core 1.1)" 123.242.224.7 - - [16/Apr/2014:23:30:04 +0200] "GET http://www.fbi.gov/ HTTP/1.1" 403 140 "-" "-" 123.242.224.7 - - [16/Apr/2014:23:30:40 +0200] "CONNECT www.fbi.gov:80 HTTP/1.0" 400 172 "-" "-" 123.242.224.7 - - [16/Apr/2014:23:31:13 +0200] "GET /admin/ HTTP/1.1" 403 140 "-" "Mozilla/5.0 (FHScan Core 1.1)" 123.242.224.7 - - [16/Apr/2014:23:31:36 +0200] "GET /~root/ HTTP/1.1" 403 140 "-" "Mozilla/5.0 (FHScan Core 1.1)" 123.242.224.7 - - [16/Apr/2014:23:31:54 +0200] "GET /configuration_administrator/VoIP/VoIP_1.htm HTTP/1.1" 403 140 "-" "Mozilla/5.0 (FHScan Core 1.1)" 123.242.224.7 - - [16/Apr/2014:23:32:23 +0200] "GET /cgi/index_voipgate.cgi HTTP/1.1" 403 140 "-" "Mozilla/5.0 (FHScan Core 1.1)" ========================================================== # grep "123.242.224.7" error.log 2014/04/16 23:29:05 [error] 11222#0: *1724586 access forbidden by rule, client: 123.242.224.7, server: localhost, request: "GET / HTTP/1.1", host: "5.135.191.38" 2014/04/16 23:30:04 [error] 11222#0: *1724591 access forbidden by rule, client: 123.242.224.7, server: localhost, request: "GET http://www.fbi.gov/ HTTP/1.1", host: "www.fbi.gov" 2014/04/16 23:31:13 [error] 11222#0: *1724637 access forbidden by rule, client: 123.242.224.7, server: localhost, request: "GET /admin/ HTTP/1.1", host: "5.135.191.38" 2014/04/16 23:31:36 [error] 11222#0: *1724637 access forbidden by rule, client: 123.242.224.7, server: localhost, request: "GET /~root/ HTTP/1.1", host: "5.135.191.38" 2014/04/16 23:31:54 [error] 11222#0: *1724637 access forbidden by rule, client: 123.242.224.7, server: localhost, request: "GET /configuration_administrator/VoIP/VoIP_1.htm HTTP/1.1", host: "5.135.191.38" 2014/04/16 23:32:23 [error] 11222#0: *1724637 access forbidden by rule, client: 123.242.224.7, server: localhost, request: "GET /cgi/index_voipgate.cgi HTTP/1.1", host: "5.135.191.38" ========================================================== Pour info, la racine de mon serveur n'est autorisée qu'aux IP que j'utilise. Je ne comprends pas bien cette histoire de proxies, je vais me renseigner. Le 17 avr. 14 à 17:50, Jean-Jacques Doti a écrit :
|