Security :: Robots For Phpmyadmin - Create Multiple Wrong Page Requests?
Nov 19, 2010
In my logs for Apache I have lots and lots of failed attempts for incorrect incarnations of [URL]. None of them are anywhere near my alias for the index.php but yet phpmyadmin is broken. Is there away I can mess up robots like this. Send IP's that create multiple wrong page requests on my server back to their own IP address maybe? I would then just set thresholds to decide how strict to be. I did try fail-to-ban before but it is cryptic. I don't have it on this particular server.
View 2 Replies
ADVERTISEMENT
Apr 13, 2011
Below is the print out of requests, with the website address "#.com". The requests are listed in the order in which they appear on the stats page. What does it mean?:
Code:
#.com/
#.com/?Mode=debug
[code]....
View 7 Replies
View Related
Apr 12, 2011
I have suspicious requests in my haproxy logs from multiple sources to the same target. I could deny them in /etc/hosts.deny, but there are too many to keep track of. Is there a way to deny all requests to a specific target either in haproxy or through iptables?
Here's an example of the request: Apr 12 15:11:37 127.0.0.1 haproxy[28672]: 41.105.42.150:27072 [12/Apr/2011:15:11:37.315] web_servers frontend_farm/######## 3/0/1/1/169 404 1073 - - --NI 3/3/2/1/0 0/0 "GET /images/comment_icon.gif HTTP/1.1"
I've commented out my amazon instance id for security purposes. The request is for comment_icon.gif which does not exist. All requests go to that. The source IPs are from different countries as well. Blocking a certain country won't work either. Basically, if there was a way to send all requests for comment_icon.gif to /dev/null or something it would work.
View 2 Replies
View Related
Oct 11, 2010
I'm using the lego RCX2 to create robots for a class, and I can't figure out how to get the tower to work with Ubuntu
View 4 Replies
View Related
Nov 18, 2009
I have installed phpMyAdmin on Fedora 11 using YUM, along with MySQL, PHP and Apache. The web and database servers are operating fine. However, when loading the web page [URL]... a box appears asking for a username and password. I have tried many combination's including the root with no success. What value does it want, or what setting is wrong. In studying the file httpd.conf in somehow loads the file phpMyAdmin.conf
[code]...
View 4 Replies
View Related
Mar 16, 2010
I encountered a problem when I am trying to access my phpmyadmin the error came up: Wrong permissions on configuration file, should not be world writable!
View 6 Replies
View Related
Aug 8, 2011
Just got a message about critical security holes for phpmyadmin (see e.g. [URL]) and wondering, when I'd get an update for my ubuntu server Lucid Lynx 10.04.3?
Currently installed version is 4:3.3.2-1, published on 2010-04-16.
View 7 Replies
View Related
Oct 17, 2010
I run a small home server (Debian 4), which acts as my gateway to the internet (ie, firewall) and runs a web server, dhcp, dns, and acts as a file server to the rest of the machines on my home network. Now I know it's never a smart idea to have all those services running on the same machine that is acting as a firewall, but I don't fancy running multiple servers just for home use, as it's mainly allowing me to learn system administration.
I noticed a few days ago that my internet had become unbearably slow, to the point where I could sometimes not load web pages. I spent a while searching through log files on my gateway, to try and find out what was eating up all of my bandwidth. When I came to apache's access.log file, I was confronted with this:
Code:
204.45.41.82 - - [17/Oct/2010:06:25:10 +0100] "GET http://vewice6.nightmail.ru/marriott-grand-cayma.html HTTP/1.1" 200 36921 "-" "Mozilla/4.0 (compatible; M$
204.45.41.82 - - [17/Oct/2010:06:25:11 +0100] "GET http://malaysiapodcaster.blogspot.com/2006/05/blog-post_11.html HTTP/1.1" 200 58681 "-" "Mozilla/4.0 (com$
[code]........
Multiple requests to my server, for totally random websites. I didn't even know it was possible to make those types of queries to a webserver. The only thing that is on the web server is a browser based torrent client. I have only shown a small snippet of the log file, but there are around 90k lines to different web addresses, from many different IPs. What I want to know, is what is happening? :S Why is someone querying MY web server, for web sites totally unrelated to it? And most of all, how can I stop it. My initial was to try and use iptables to block multiple requests from the same ip within a certain time frame, which I think would work as the server shouldn't really get many queries from external networks.
View 9 Replies
View Related
May 28, 2011
I've lately been getting some strange nfs mount requests for non existant users' home directories on a F14 machine to my file server (CentOS).The message log on the file server shows the following
May 23 03:10:53 data mountd[4835]: can't stat exported dir /export/home/httpd: No such file or directory
May 24 03:21:13 data mountd[4835]: can't stat exported dir /export/home/httpd: No such file or directory
May 25 03:26:53 data mountd[4835]: can't stat exported dir /export/home/httpd: No such file or directory
[code]....
View 2 Replies
View Related
Nov 23, 2010
I not a total noob to linux only a noob to apache.I am Running A lamp server on A VPS with myhosting.com. but try as i might i cant apache2 to load the right page. I have set document root to /slk/redretriever/ but when i load the page it still loads /var/www/vhosts/default/htdocs/.I cant figure out why please help.
View 5 Replies
View Related
Jul 11, 2010
I use Ubuntu 10.04 and I want to be able to move around the system without having to frequently enter my password. For example, when waking up the system from a power save state or when accessing Synaptic Package Manager I do not want to be asked to enter my password. There is nothing on my system that matters if its security is breached. Is there a way to turn off these requests for a password?
View 9 Replies
View Related
Mar 1, 2011
Ok i think Tor has some way of making the dns queries anonymous by default. I did the DNS nameserver spoofablity test here at [URL] and the results i got showed about 30 different dns servers. Normally when i carry out this test on my standard isp connection or the vpn i use i just get one dns servers settings consistently.
View 1 Replies
View Related
Apr 11, 2010
I logged in phpmyadmin as root (with password that I just created in terminal), old databases are there but I have no privileges to create a new one.
View 1 Replies
View Related
May 13, 2010
I have installed on a remote server phpmyadmin 3.3.1 and mysql 5.1.46 on a centos 5.4 OS.
Any newly created user with phamyadmin is unable to login both from mysql command line (from localhost) and phpmyadmin (localhost and remotely).
No prob when the user is created with mysql command line (from localhost). All of the users created with phpmyadmin, are not "visible" recognized from the show user command via the mysql command line. The setting I used when I create any user was the same as the ones with the mysql command line creation.
The error message I get when accessing from mysql command line (from localhost) is the following: "Access denied for user ... @localhost (using password: yes)"
View 2 Replies
View Related
Apr 10, 2010
I have been searching for an answer to this, and have come up dry.
I have an HP OfficeJet Pro 8500 a909a. It was working fine until recently. Now when I go to print duplex, the second page is mirrored vertically and rotated wrong.
I suspect that a recent update to HPLIP has caused this, but there may be something else in play with the GS utilities also. The problem is that I have no idea about how to fix this. I was hoping an update would show up and a simple "yum -y update) would fix things. That still has not happened.
I am a student and would like to save paper, at least with my draft copies, but this makes duplex printing impossible.
uname -a output:
rpm -qa hplip:
rpm -qa ghostscript:
View 7 Replies
View Related
Apr 30, 2010
i've tried blocking ping requests with iptables.. and it didnt work Quote: iptables -A INPUT -p icmp --icmp-type echo-request -j DROP
also tried editing sysctl.conf.. which worked perfectly but after i restarted the system i was able to ping my ubuntu machine from my lappy here is what i added to sysctl.conf and then executed it with sysctl -p
Quote: net.ipv4.icmp_echo_ignore_all = 1 here is another atempt to block.. this one worked too... but again after the restart i was able to ping my machine.. Quote: echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all
View 8 Replies
View Related
Jul 12, 2010
I've been trying to configure ufw to drop ping requests for a couple days now, and I can't figure it out. I've tried a couple different methods in some different guides, still nothing. Anyone know how to do this?
View 4 Replies
View Related
Oct 26, 2010
I'm trying to connect one computer to two others in an ad-hoc infrastructure.
[computer 1] ---- [computer 2] ---- [computer 3]
computer 2 is running Linux and has a single NIC wlan0. I want to it to connect to both computer 1 and computer 3 so each computer can talk to the other. No switch is available so it needs to be an ad-hoc setup.
[Code]...
View 1 Replies
View Related
Nov 8, 2009
I've searched and searched for a solution to this and cannot find one. I've installed phpMyAdmin on Fedora 11 using YUM. I've also got MySQL 5 latest and PHP 5 latest installed using YUM. My Apache server document root is var/www/html/ and I can go to [URL] to view my php files. MySQL has root user configured (as far as I can tell) and I have set the password for the root user. After installing phpMyAdmin, I did restart httpd service and I have mysqld enabled and running. However, after installing phpMyAdmin, it does not create a folder in var/www/html/ and so, of course, I get told that phpMyAdmin cannot find navigation.php when I go to [URL].
I've edited /etc/phpMyAdmin/config.inc.php, but this has not helped. I've even DL'd phpMyAdmin from their site and copied the files over to /var/www/html/phpMyAdmin/ and chmod'd the files and folders to 777 permissions, but this has not worked, either. I still get the same "unable to find navigation.php" error.
View 3 Replies
View Related
Jul 27, 2011
I have an interesting issue with simple scan. When I scan a single page document, the exposure is not very good because there are dark and light areas scattered over the entire document. Of course, one cannot adjust these settings in simple scan as one can with xsane. However, I noticed if I scanned a multiple page document, all pages after the first seemed to be more consistent and the exposure was fairly good (exposure here referring to all the aspects accessable in xsane such as brightness, contrast, gamma, etc.)
So I tried a little experiment. I scanned a single page document as if it were a multiple page document by scanning the document multiple times in the same session.The same thing occurs as if one were scanning a multiple document: the first page is mottled, but all pages after are much better scans. What is happening here?
View 1 Replies
View Related
Feb 28, 2011
Obviously Nagios will page out once for each host and service goes down. But, is there a way to configure it to page out once, kind of like "Hey, LOTS of stuff just went down." Rather than 200+ individual pages?
View 1 Replies
View Related
Jun 18, 2011
I have a page which is going to be internationalized, and available in more languages. It contains PHP scripts to load, let's say, current user's data from database and the internationalized content itself, like "Welcome user" message. The problem for me is the fact, that internationalized content is not continual, and it's all over the page mixed with php scripts.
I don't want to use eval(). I've got 2 , they are, however, not good enough. 1. One file per language version, with scripts included - there will be many languages, so there would have to be many files with redundant data. Also if I wanted to change structure of script, I would have to change it in all pages. 2. Load international data from db, while scripts are on the page - not sure about good database structure I mean, how would I get the right content from database? (content would be split into rows, columns, or something?)
View 8 Replies
View Related
Jan 12, 2010
im running vps with debian lenny, with apache2 webserver, memcached, postgres and django-framework using mod-wsgi. Some of the pages served by django take long to generate (aprox 15 s), but there is also the memcached, compensating this.
My problem is that, when a robot visits the site, it starts traversing the site visiting all the pages and also the nongenerated, thus slowing it down to point where it is not responding.
What Im looking for is a solution to identify that the request comes from a robot (user-agent, ips, etc) and limit the resources, so that f.e. only one thread serves the robot etc...
View 2 Replies
View Related
Jul 7, 2010
I need to stop the viewing of robots.txt on my website. I get the contents of the file displayed in my browser when I issue the command: [URL] stop this as it displays all the directories I don't want them to go to.
The main problem is that I can look at any directory on my site and get a file listing and then right-click on that file name and then save it to my client hard-drive all from my browser. ex: [URL] I think I can change this behavior in the apache config but don't know enough.
View 3 Replies
View Related
Jul 7, 2010
I need to stop the viewing of robots.txt on my website. I get the contents of the file displayed in my browser when I issue the command: [URL] stop this as it displays all the directories I don't want them to go to. I am right at the level of Linux knowledge to be dangerous, capable but still dangerous.
View 5 Replies
View Related
Oct 25, 2009
I don't know what bugzilla wants to know. I tried to create a new report, but I failed at the first page/question. THe page ask me to enter a classification. But I don't know want that could be. I check multible times but I got always just a big red EM. What's to enter at 'named tag' and at 'to bugs'?
View 4 Replies
View Related
Feb 14, 2010
I am using apache web server for my website. I have the main page up and I want to create another page. For example, I want to have "thisiswhatiwant" being the page I want to add
View 1 Replies
View Related
May 24, 2010
I want to set up an installation server for CentOS 5.5, using PXE for boot, kickstart for package selection (one for server), and NFS for share all files needed.I've succesfully completed a fresh installation of CentOS5 from the DVD for one of my servers (virgil), and I've copied the anaconda-ks.cfg generated by the installer to my install server (beatrix).
Next, I've properly configured the /etc/dhcpd.conf , the /tftpboot/pxelinux.cfg/<IP_CODED> and the /etc/exports for NFS sharing on beatrix.Then, I've copied all the first DVD of CentOS5 content in this folder on beatrix: /opt/CentOS_install I've tried to start virgil from ethernet, and all has gone ok, with the kickstart and so on! But I've decided to apply the updates (new kernel, sudo, xorg, ...), so I've deleted the old rpms from /opt/CentOS_install/CentOS and copied the new ones (downloaded from http://mirror.centos.org/centos-5/5/updates/x86_64/RPMS/). So, I've launched the following commands to recreate the repodata:
root@beatrix:/opt/CentOS_install/ # mv repodata/comps.xml CentOS/
root@beatrix:/opt/CentOS_install/ # rm -fr repodata
root@beatrix:/opt/CentOS_install/ # createrepo -p -o /opt/CentOS_install/ -g comps.xml /opt/CentOS_install/CentOS
But when I try to reinstall virgil, an error message appears, telling me that a package (perl-DBI-...) isn't present in the media.After some debugging, I've noticed that in the /opt/CentOS_install/repodata/primary.xml.gz there isn't the correct path for the rpms. If you look at the original primary.xml, the "path" is like:path="CentOS/abcxyz.rpm" while in the generated file (with createrepo) the path is:
path="abcxyz.rpm".How can I recreate the repodata with the correct path information?
View 6 Replies
View Related
Dec 30, 2010
I have a server that host's several sites, recently I had to create a new server because the old one isn't good enough for me. Ive installed apache2 on the new server and moved all the files from one server to the other. I'm making tests in my local lan so I've edited my computer's hosts file to point to the name of each site to the local ip of the new server:
192.168.1.85 www.mypage.com
192.168.1.85 svn.mypage.com
192.168.1.85 trac.mypage.com
I have all the site definition files in /etc/apache2/sites-available I also have the used a2ensite to enable each page.
Whenever o use my browser to try and access each of the sites I always get the svn.mypage.com page and none of the others.
here is some debug info:
Code:
sudo apache2ctl -S
VirtualHost configuration:
wildcard NameVirtualHosts and _default_ servers:
[Code]....
View 1 Replies
View Related
Nov 28, 2010
I am using Xfce as the desktop enviroment and Mozilla Firefox as the webrowser. Within the webrowser window, I do File>Save Page As. I save it, and the result is almost always foo.html and directory foo_files. But I think under KDE I could choose the format, one of them being something like "Single page" (only one file; the colecction of .png, etc is embedded into that file). And this is the format I want Xfce (or Firefox) to use when downloading to hdd.
View 1 Replies
View Related
