Bonjour,
Ne sachant pas trop où mettre ce sujet je le dépose ici et si ce n’est pas l’endroit je laisse le soin aux modos de le déplacer. Merci
En regardant mes logs ce matin j’ai vu ces lignes dans le http.error. J’en ai 2 ou 3 pages entre 23:38 et 23:45. Voici un extrait :
Qui peut me dire à quoi cela correspon ?
Merci et bonne journée
On dirait une attaque des petits chinois.
L’IP viendrait de Pékin et elle n’a pas une bonne réputation sur internet.
Bonjour,
penses à faire une recherche sur le forum 
et surtout essayes de ne pas mettre tes sujets dans une catégories au hasard … !!!
https://community.jeedom.com/t/log-http-erreur/4964
Effectivement c’est que des ordinateurs tentent d’accèder à ton jeedom … solution dans le lien ci-dessus
Ah oui dans petites annonces ! Pas mal du tout …
@totoff974
Merci de ta réponse. Mea culpa pour le manque de recherche sur le forum. Quant au choix de la catégorie ce n’est pas toujours évident. Je ne sais pas déplacer un sujet, si un modo habilité veut bien le faire, merci.
Je regarde de suite le lien dans le topic de @Wolas
Peut-on être sûr que le site qui tente d’accéder à mon jeedom n’y soit pas parvenu ?
Merci
J’ai également toutes ces lignes dans mes logs. Cela ne me rassure pas car je ne maîtrise pas cela.
Pensez-vous vous que mon système pourrait être corrompu ?
script '/var/www/html/hh.php' not found or unable to stat
[Mon Oct 28 00:01:28.776012 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/ak.php' not found or unable to stat
[Mon Oct 28 00:01:29.077325 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/ip.php' not found or unable to stat
[Mon Oct 28 00:01:29.379344 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/infoo.php' not found or unable to stat
[Mon Oct 28 00:01:29.684702 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/qwe.php' not found or unable to stat
[Mon Oct 28 00:01:29.983734 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/1213.php' not found or unable to stat
[Mon Oct 28 00:01:30.285590 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/post.php' not found or unable to stat
[Mon Oct 28 00:01:30.594051 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/aaaa.php' not found or unable to stat
[Mon Oct 28 00:01:30.893515 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/h1.php' not found or unable to stat
[Mon Oct 28 00:01:31.193110 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/test.php' not found or unable to stat
[Mon Oct 28 00:01:31.493931 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/3.php' not found or unable to stat
[Mon Oct 28 00:01:31.795706 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/4.php' not found or unable to stat
[Mon Oct 28 00:01:32.096743 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/phpinfi.php' not found or unable to stat
[Mon Oct 28 00:01:32.398646 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/9510.php' not found or unable to stat
[Mon Oct 28 00:01:32.699920 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/python.php' not found or unable to stat
[Mon Oct 28 00:01:33.000579 2019] [:error] [pid 23870] [client 106.12.40.185:62283] script '/var/www/html/default.php' not found or unable to stat
.
.
.
[Mon Oct 28 00:03:36.835676 2019] [access_compat:error] [pid 1339] [client 106.12.40.185:37443] AH01797: client denied by server configuration: /var/www/html/vendor/phpunit
[Mon Oct 28 00:03:41.061017 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/dong.php' not found or unable to stat
[Mon Oct 28 00:03:41.361200 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/xun.php' not found or unable to stat
[Mon Oct 28 00:03:43.479436 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/datas.php' not found or unable to stat
[Mon Oct 28 00:03:43.782392 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/aojiao.php' not found or unable to stat
[Mon Oct 28 00:03:44.084721 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/guipu.php' not found or unable to stat
[Mon Oct 28 00:03:44.387559 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/zhui.php' not found or unable to stat
[Mon Oct 28 00:03:45.592895 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/ji.php' not found or unable to stat
[Mon Oct 28 00:03:45.895299 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/xing.php' not found or unable to stat
[Mon Oct 28 00:03:47.104977 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/c.php' not found or unable to stat
[Mon Oct 28 00:03:47.407095 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/c.php' not found or unable to stat
[Mon Oct 28 00:03:47.709489 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/test.php' not found or unable to stat
[Mon Oct 28 00:03:48.012389 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/laobiao.php' not found or unable to stat
[Mon Oct 28 00:03:48.315309 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/sample.php' not found or unable to stat
[Mon Oct 28 00:03:51.336437 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/shell.php' not found or unable to stat
[Mon Oct 28 00:03:51.638354 2019] [access_compat:error] [pid 1339] [client 106.12.40.185:37443] AH01797: client denied by server configuration: /var/www/html/data/admin
[Mon Oct 28 00:03:51.940553 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/12.php' not found or unable to stat
[Mon Oct 28 00:03:52.243107 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/ecmsmod.php' not found or unable to stat
[Mon Oct 28 00:03:54.052380 2019] [:error] [pid 1339] [client 106.12.40.185:37443] script '/var/www/html/user.php' not found or unable to stat, referer: 554fcae493e564ee0dc75bdf2ebf94caads|a:3:{s:2:"id";s:3:"'/*";s:3:"num";s:141:"*/ union select 1,0x272F2A,3,4,5,6,7,8,0x7b247b24524345275d3b6469652f2a2a2f286d6435284449524543544f52595f534550415241544f5229293b2f2f7d7d,0--";s:4:"name";s:3:"ads";}554fcae493e564ee0dc75bdf2ebf94ca
[Mon Oct 28 06:25:18.521407 2019] [mpm_prefork:notice] [pid 814] AH00171: Graceful restart requested, doing restart
[Mon Oct 28 06:25:18.730682 2019] [alias:warn] [pid 814] AH00671: The Alias directive in /etc/apache2/conf-enabled/letsencrypt.sh.conf at line 18 will probably never match because it overlaps an earlier Alias.
AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1. Set the 'ServerName' directive globally to suppress this message
[Mon Oct 28 06:25:18.888992 2019] [mpm_prefork:notice] [pid 814] AH00163: Apache/2.4.25 (Raspbian) OpenSSL/1.0.2t configured -- resuming normal operations
[Mon Oct 28 06:25:18.889073 2019] [core:notice] [pid 814] AH00094: Command line: '/usr/sbin/apache2'
[Mon Oct 28 11:31:58.915697 2019] [:error] [pid 24241] [client 194.199.7.28:10521] script '/var/www/html/core/ajax/connection.ajax.php' not found or unable to stat, referer: http://monsite.ovh/core/php/getResource.php?file=core/js/security.class.js&md5=5884f09f79b503b905942399ed56fcea&lang=fr_FR
[Mon Oct 28 11:39:30.471859 2019] [autoindex:error] [pid 29490] [client 194.199.7.28:10542] AH01276: Cannot serve directory /var/www/html/core/themes/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: http://monsite.ovh/core/php/getResource.php?file=desktop/js/utils.js&md5=c99af58fc3edee7212393be9aad58110&lang=fr_FR
[Mon Oct 28 15:23:08.461510 2019] [access_compat:error] [pid 12819] [client 194.199.7.28:10504] AH01797: client denied by server configuration: /var/www/html/vendor/jquery.ui.widget, referer: http://monsite.ovh/3rdparty/jquery.fileupload/jquery.fileupload.js?md5=621acae28fe70d4976263a8ea7f8dd12
[Mon Oct 28 17:15:15.756714 2019] [:error] [pid 28724] [client 62.210.185.4:35664] script '/var/www/html/wp-login.php' not found or unable to stat, referer: http://monsite.ovh/wp-login.php
[Mon Oct 28 18:29:41.681780 2019] [:error] [pid 7225] [client 194.199.7.28:10901] script '/var/www/html/core/ajax/connection.ajax.php' not found or unable to stat, referer: https://monsite.ovh/core/php/getResource.php?file=core/js/security.class.js&md5=5884f09f79b503b905942399ed56fcea&lang=fr_FR
[Mon Oct 28 18:38:05.272285 2019] [autoindex:error] [pid 16881] [client 194.199.7.28:10724] AH01276: Cannot serve directory /var/www/html/core/themes/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.monsite.ovh/core/php/getResource.php?file=desktop/js/utils.js&md5=c99af58fc3edee7212393be9aad58110&lang=fr_FR
[Mon Oct 28 18:45:00.643310 2019] [access_compat:error] [pid 16577] [client 194.199.7.28:10938] AH01797: client denied by server configuration: /var/www/html/vendor/jquery.ui.widget, referer: https://www.monsite.ovh/3rdparty/jquery.fileupload/jquery.fileupload.js?md5=621acae28fe70d4976263a8ea7f8dd12
[Mon Oct 28 20:57:02.091929 2019] [:error] [pid 11318] [client 111.230.245.235:59164] script '/var/www/html/elrekt.php' not found or unable to stat
[Tue Oct 29 06:25:21.203173 2019] [mpm_prefork:notice] [pid 814] AH00171: Graceful restart requested, doing restart
[Tue Oct 29 06:25:21.418803 2019] [alias:warn] [pid 814] AH00671: The Alias directive in /etc/apache2/conf-enabled/letsencrypt.sh.conf at line 18 will probably never match because it overlaps an earlier Alias.
AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1. Set the 'ServerName' directive globally to suppress this message
[Tue Oct 29 06:25:21.565254 2019] [mpm_prefork:notice] [pid 814] AH00163: Apache/2.4.25 (Raspbian) OpenSSL/1.0.2t configured -- resuming normal operations
[Tue Oct 29 06:25:21.565313 2019] [core:notice] [pid 814] AH00094: Command line: '/usr/sbin/apache2'
[Tue Oct 29 06:59:45.595952 2019] [:error] [pid 25050] [client 132.232.93.135:37958] script '/var/www/html/elrekt.php' not found or unable to stat
[Tue Oct 29 07:11:14.077858 2019] [access_compat:error] [pid 25048] [client 185.142.236.35:49842] AH01797: client denied by server configuration: /var/www/html/sitemap.xml
Bonsoir
@anon53349806
Mais non, mais non, dans Discussions Générales sauf erreur de ma part.
@totoff974
Bon, j’ai installé fail2ban et pris le temps de chercher des tutos et de lire la quasi totalité des infos dans les fichier de config.
Comment dire, ba j’ai pas tout compris !!! Si je dois faire en sorte que l’adresse 94.191.28.13 soit bloquée, faut-il que je l’indique quelque part ou bien les configs de base sufisent-elles ?
Merci de vos réponses
Bonjour,
De nouveau j’ai eu dans mon log http.error (ci après, un extrait) :
Salut,
Oui très probablement le fait de prnedre un nom de domaine facilite ce genre « d’attaque » …
pour le tutoriel celui-ci est simple :
https://byfeel.info/proteger-votre-serveur-contre-les-tentatives-dintrusion/
