웹마스터 팁
page_full_width" class="col-xs-12" |cond="$__Context->page_full_width">
phpmyadmin 설치뒤 setup 스크립트는 삭제해야
2014.11.12 16:03
각각 경로를 대입하며 setup.php 스크립트를 찾는 경우가 있습니다.
이를 그냥 둘 경우 보안 취약점이 될 수 있으므로 삭제하시는 것이 좋습니다.
이하는 해당 침입 시도 로그입니다.(아이피는 변경처리함)
2014-09-27 15:09:31 <SERVERIP> GET /muieblackcat - 80 - <HACKERIP> - - 404 0 2 906 2014-09-27 15:09:31 <SERVERIP> GET /scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:09:32 <SERVERIP> GET /admin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:32 <SERVERIP> GET /admin/pma/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:33 <SERVERIP> GET /admin/phpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:33 <SERVERIP> GET /db/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:09:35 <SERVERIP> GET /dbadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:09:35 <SERVERIP> GET /myadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:09:36 <SERVERIP> GET /mysql/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:09:36 <SERVERIP> GET /mysqladmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:37 <SERVERIP> GET /typo3/phpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:09:37 <SERVERIP> GET /phpadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:39 <SERVERIP> GET /pma/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:09:39 <SERVERIP> GET /web/phpMyAdmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 359 2014-09-27 15:09:40 <SERVERIP> GET /xampp/phpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:40 <SERVERIP> GET /web/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:09:41 <SERVERIP> GET /php-my-admin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:46 <SERVERIP> GET /phpMyAdmin-2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 1359 2014-09-27 15:09:46 <SERVERIP> GET /_phpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:09:48 <SERVERIP> GET /administrator/components/com_joommyadmin/phpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:48 <SERVERIP> GET /apache-default/phpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:52 <SERVERIP> GET /cpanelphpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:52 <SERVERIP> GET /cpphpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:09:53 <SERVERIP> GET /forum/phpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:09:55 <SERVERIP> GET /php/phpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 1328 2014-09-27 15:09:55 <SERVERIP> GET /phpmyadmin/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:56 <SERVERIP> GET /phpMyAdmin-2.10.0.0/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:09:56 <SERVERIP> GET /phpMyAdmin-2.10.0.1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:57 <SERVERIP> GET /phpMyAdmin-2.10.0.2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:09:57 <SERVERIP> GET /phpMyAdmin-2.10.0/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:09:59 <SERVERIP> GET /phpMyAdmin-2.10.1.0/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:09:59 <SERVERIP> GET /phpMyAdmin-2.10.2.0/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:00 <SERVERIP> GET /phpMyAdmin-2.11.0.0/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:00 <SERVERIP> GET /phpMyAdmin-2.11.1-all-languages/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:01 <SERVERIP> GET /phpMyAdmin-2.11.1.0/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:01 <SERVERIP> GET /phpMyAdmin-2.11.1.1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:03 <SERVERIP> GET /phpMyAdmin-2.11.1.2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:10:03 <SERVERIP> GET /phpMyAdmin-2.6.1-pl2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:04 <SERVERIP> GET /phpMyAdmin-2.6.1-pl3/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:04 <SERVERIP> GET /phpMyAdmin-2.6.4-pl3/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 359 2014-09-27 15:10:07 <SERVERIP> GET /phpMyAdmin-2.6.4-pl4/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 1421 2014-09-27 15:10:07 <SERVERIP> GET /phpMyAdmin-2.6.4-rc1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 296 2014-09-27 15:10:08 <SERVERIP> GET /phpMyAdmin-2.6.5/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:08 <SERVERIP> GET /phpMyAdmin-2.6.6/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:09 <SERVERIP> GET /phpMyAdmin-2.6.9/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 281 2014-09-27 15:10:09 <SERVERIP> GET /phpMyAdmin-2.7.0-beta1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:10 <SERVERIP> GET /phpMyAdmin-2.7.0-pl1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:10 <SERVERIP> GET /phpMyAdmin-2.7.0-pl2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:12 <SERVERIP> GET /phpMyAdmin-2.7.0-rc1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:12 <SERVERIP> GET /phpMyAdmin-2.7.5/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:16 <SERVERIP> GET /phpMyAdmin-2.7.7/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:16 <SERVERIP> GET /phpMyAdmin-2.8.2.3/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:10:17 <SERVERIP> GET /phpMyAdmin-2.8.2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:10:17 <SERVERIP> GET /phpMyAdmin-2.8.3/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:19 <SERVERIP> GET /phpMyAdmin-2.8.4/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:19 <SERVERIP> GET /phpMyAdmin-2.8.5/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:23 <SERVERIP> GET /phpMyAdmin-2.8.7/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:10:23 <SERVERIP> GET /phpMyAdmin-2.8.8/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:24 <SERVERIP> GET /phpMyAdmin-2.8.9/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:10:24 <SERVERIP> GET /phpMyAdmin-2.9.0-rc1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:10:26 <SERVERIP> GET /phpMyAdmin-2.9.0.1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:26 <SERVERIP> GET /phpMyAdmin-2.9.0.2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:10:28 <SERVERIP> GET /phpMyAdmin-2.9.0/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:10:28 <SERVERIP> GET /phpMyAdmin-2.9.1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:29 <SERVERIP> GET /phpMyAdmin-2.9.2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:29 <SERVERIP> GET /phpMyAdmin-2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:31 <SERVERIP> GET /phpMyAdmin-3.0.0-rc1-english/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:34 <SERVERIP> GET /phpMyAdmin-3.0.1.0-english/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 296 2014-09-27 15:10:38 <SERVERIP> GET /phpMyAdmin-3.0.1.1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:38 <SERVERIP> GET /phpMyAdmin-3.1.0.0-english/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:39 <SERVERIP> GET /phpMyAdmin-3.1.0.0/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:39 <SERVERIP> GET /phpMyAdmin-3.1.1.0-all-languages/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:40 <SERVERIP> GET /phpMyAdmin-3.1.2.0-all-languages/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312 2014-09-27 15:10:40 <SERVERIP> GET /phpMyAdmin-3.1.2.0-english/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:42 <SERVERIP> GET /phpMyAdmin-3.1.2.0/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 328 2014-09-27 15:10:42 <SERVERIP> GET /phpMyAdmin-3.4.3.1/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 343 2014-09-27 15:10:43 <SERVERIP> GET /phpMyAdmin2/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 359 2014-09-27 15:10:43 <SERVERIP> GET /phpMyAdmin3/scripts/setup.php - 80 - <HACKERIP> - - 404 0 2 312
http://whoisidc.com/board/read.php?bid=1&pid=220&page=2&ord=
해결책으로
1. 업데이트
2. alias 변경
3. setup.php 삭제
이 세가지를 다 해야하는 건가봐요?