[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: scans in my hosts. (Debian 5.0 and Apache 2.2.9)



If your phpMyAdmin installations are safe and protected and you wish to remove these from your log files for vanity reasons, please see this guide with a cool fail2ban config that should help you:
http://foosel.org/blog/2008/04/banning_phpmyadmin_bots_using_fail2ban

Ash.

On Thu, Jul 29, 2010 at 3:49 PM, Sjors Gielen <mailinglist@dazjorz.com> wrote:

Op 29 jul 2010, om 16:34 heeft OLCESE, Marcelo Oscar. het volgende geschreven:

> Estimated:
> I am taking these scans in my hosts. (Debian 5.0 and Apache 2.2.9)
> This has been repeating since a  weeks.
> Know what can be? What can I do to eliminate?
>
> Thanks.
>
> Marcelo Olcese.

Someone is scanning your system for vulnerable PHPMyAdmin installations, and other possibly vulnerable stuff. As long as you watch your PHPMyAdmin installations if you have any and make sure nobody can abuse them, nothing's wrong. Try, for example, requiring http authentication to access the directories, or turning off your webserver if you didn't need it anyway.

Sjors


Reply to: