Support Forums - All Posts - XOOPS Web Application System

21

server got scaned looking for xoops !! ?? !!

2006/2/8 15:41
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

Below is my apache error.log entry.
Seams someone was scaning my domain looking for specific programs installed. The search for modules makes me think he/she was looking for a XOOPS installation.
Is there a server script which looks for errors like this and then bans the IP server wide on all domains?

Thanks

[Wed Feb 08 01:13:25 2006] [error] [client 80.171.105.97] File does not exist: /var/www/awstats
[Wed Feb 08 01:13:29 2006] [error] [client 80.171.105.97] script not found or unable to stat: /usr/lib$
[Wed Feb 08 01:13:31 2006] [error] [client 80.171.105.97] script not found or unable to stat: /usr/lib$
[Wed Feb 08 01:13:33 2006] [error] [client 80.171.105.97] script '/var/www/xmlrpc.php' not found or un$
[Wed Feb 08 01:13:35 2006] [error] [client 80.171.105.97] File does not exist: /var/www/modules
[Wed Feb 08 01:13:37 2006] [error] [client 80.171.105.97] File does not exist: /var/www/blog
[Wed Feb 08 01:13:38 2006] [error] [client 80.171.105.97] File does not exist: /var/www/blogs
[Wed Feb 08 01:13:40 2006] [error] [client 80.171.105.97] File does not exist: /var/www/drupal
[Wed Feb 08 01:13:42 2006] [error] [client 80.171.105.97] File does not exist: /var/www/phpgroupware
[Wed Feb 08 01:13:43 2006] [error] [client 80.171.105.97] File does not exist: /var/www/wordpress
[Wed Feb 08 01:13:44 2006] [error] [client 80.171.105.97] script '/var/www/xmlrpc.php' not found or un$
[Wed Feb 08 01:13:46 2006] [error] [client 80.171.105.97] File does not exist: /var/www/xmlrpc
[Wed Feb 08 01:13:48 2006] [error] [client 80.171.105.97] File does not exist: /var/www/xmlsrv

Grüssle
......

http://www.vmclinks.com

22

mod rewrite

2006/1/6 7:49
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

I am trying to clean this up, turn it in to English and make it work on some additional modules but I can't figure this out.
Can you take a moment and explain this to me?

Below is my code but in addresses visit.php (singlelink.php is called visit.php in the addresses module) just does not work and it should be allmost the same as in mylinks.

The most I am confused about is the endings as in:


([0-9]*)"'",

([0-9]*)''",

or

"'",

/"'",

When do you use what and why?


Options +FollowSymlinks

RewriteEngine On



RewriteRule ^index.html$    index.php    [L]



#Main Menu

RewriteRule ^news.html$                  modules/news                                    [L]

RewriteRule ^headlines.html$             modules/xoopsheadline                           [L]

RewriteRule ^forum.html$                 modules/newbb                                   [L]

RewriteRule ^downloads.html$             modules/mydownloads                             [L]

RewriteRule ^polls.html$                 modules/xoopspoll                               [L]

#RewriteRule ^mylinks.html$               modules/mylinks                                 [L]

RewriteRule ^faq.html$                   modules/xoopsfaq                                [L]

RewriteRule ^partners.html$              modules/xoopspartners                           [L]

RewriteRule ^members.html$               modules/xoopsmembers                            [L]

RewriteRule ^contact.html$               modules/contact                                 [L]

RewriteRule ^gallery.html$               modules/xoopsgallery                            [L]

RewriteRule ^links.html$                 modules/addresses                               [L]

RewriteRule ^articles.html$              modules/wfsection                               [L]

RewriteRule ^calendar.html$              modules/piCal                                   [L]

RewriteRule ^classifieds.html$           modules/myAds                                   [L]

RewriteRule ^donations.html$             modules/xdonations                              [L]

RewriteRule ^weather.html$               modules/vlweather                               [L]

RewriteRule ^chat.html$                  modules/flashchat                               [L]

     

#Articles

RewriteRule ^modules/news/article-([0-9]+).html$                    modules/news/article.php?storyid=$1             [L]

RewriteRule ^modules/news/article-cat-([0-9]+)-start-([0-9]+).html$     modules/news/index.php?storytopic=$1&start=$2   [L]

RewriteRule ^modules/news/article-([0-9]+)-page-([0-9]+).html$      modules/news/article.php?storyid=$1&page=$2     [L]

RewriteRule ^modules/news/article-cat-([0-9]+).html$                modules/news/index.php?storytopic=$1            [L]

RewriteRule ^modules/news/article-print-([0-9]+).html$              modules/news/print.php?storyid=$1               [L]

RewriteRule ^modules/news/archive.html$                             modules/news/archive.php                        [L]

RewriteRule ^modules/news/archive-([0-9]+)-([0-9]+).html$           modules/news/archive.php?year=$1&month=$2       [L]



#mylinks

#RewriteRule ^modules/mylinks/links-cat-([0-9]+).html$        modules/mylinks/viewcat.php?cid=$1                      [L]

#RewriteRule ^modules/mylinks/link-([0-9]+)-([0-9]+).html$         modules/mylinks/singlelink.php?cid=$1&lid=$2         [L]

#addresses

RewriteRule ^modules/addresses/links-cat-([0-9]+).html$        modules/addresses/viewcat.php?cid=$1                      [L]

RewriteRule ^modules/addresses/visit-([0-9]+)-([0-9]+).html$     modules/addresses/visit.php?cid=$1&lid=$2         [L]


function replace_for_mod_rewrite(&$s) {    

  $urlin = array(

     "'(?<!//)modules/news/"'",

     "'(?<!//)modules/xoopsheadline/"'",

     "'(?<!//)modules/newbb/"'",

     "'(?<!//)modules/mydownloads/"'",

     "'(?<!//)modules/xoopspoll/"'",

     "'(?<!//)modules/mylinks/"'",

     "'(?<!//)modules/xoopsfaq/"'",

     "'(?<!//)modules/xoopspartners/"'",

     "'(?<!//)modules/xoopsmembers/"'",

     "'(?<!//)modules/contact/"'",

     "'(?<!//)modules/xoopsgallery/"'",

     "'(?<!//)modules/addresses/"'",

     "'(?<!//)modules/wfsection/"'",

     "'(?<!//)modules/piCal/"'",

     "'(?<!//)modules/myAds/"'",

     "'(?<!//)modules/xdonations/"'",

     "'(?<!//)modules/vlweather/"'",

     "'(?<!//)modules/flashchat/"'",



    "'(?<!//)article.php?storyid=([0-9]*)"'",

    "'(?<!//)article.php?storyid=([0-9]*)''",    

    "'(?<!//)modules/news/article.php?storyid=([0-9]*)&amp;page=([0-9]*)'",

    "'(?<!//)index.php?storytopic=([0-9]*)&amp;start=([0-9]*)'",

    "'(?<!//)index.php?storytopic=([0-9]*)'",

    "'(?<!//)print.php?storyid=([0-9]*)'",

    "'(?<!//)modules/news/archive.php"'",

    "'(?<!//)archive.php?year=([0-9]*)&amp;month=([0-9]*)'",



    "'(?<!//)modules/mydownloads/viewcat.php?cid=([0-9]*)'",

    "'(?<!//)modules/mydownloads/singlefile.php?cid=([0-9]*)&amp;lid=([0-9]*)'",



    "'(?<!//)modules/xoopsgallery/"'",



    "'(?<!//)modules/xoopspoll/"'",



//    "'(?<!//)modules/mylinks/viewcat.php?cid=([0-9]*)'",

//    "'(?<!//)modules/mylinks/singlelink.php?cid=([0-9]*)&amp;lid=([0-9]*)'",

    "'(?<!//)modules/addresses/viewcat.php?cid=([0-9]*)'",

    "'(?<!//)modules/addresses/visit.php?cid=([0-9]*)&amp;lid=([0-9]*)"'",

    "'(?<!//)modules/addresses/visit.php?cid=([0-9]*)&amp;lid=([0-9]*)''",



    "'(?<!//)modules/xoopsmembers/"'",

    "'(?<!//)modules/contact/"'",

    );

    $urlout = array(

     "news.html"",

     "headlines.html"",

     "forum.html"",

     "downloads.html"",

     "polls.html"",

     "links.html"",

     "faq.html"",

     "partners.html"",

     "members.html"",

     "contact.html"",

     "gallery.html"",

     "links.html"",

     "articles.html"",

     "calendar.html"",

     "classifieds.html"",

     "donations.html"",

     "weather.html"",

     "chat.html"",

    "article-\1.html"",

    "article-\1.html'",    

    "modules/news/article-\1-page-\2.html",

    "article-cat-\1-start-\2.html",

    "article-cat-\1.html",

    "article-print-\1.html",

    "modules/news/archive.html"",

    "archive-\1-\2.html",



    "modules/mydownloads/downloads-cat-\1.html",

    "modules/mydownloads/downloads-\1-\2.html",



    "gallery.html"",



    "polls.html"",



//    "modules/mylinks/links-cat-\1.html",

//    "modules/mylinks/link-\1-\2.html",

    "modules/addresses/links-cat-\1.html",

    "modules/addresses/visit-\1-\2.html"",

    "modules/addresses/visit-\1-\2.html'",



    "members.html"",

    "contact.html"",



    );







    $s = preg_replace($urlin, $urlout, $s);



    return $s;

}

Grüssle
......

http://www.vmclinks.com

23

Re: 911 - Blank page even in debug mode

2005/12/28 7:57
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

Found it - that was it -> Bad Ip list - fixed it

Thank you all

Grüssle
......

http://www.vmclinks.com

24

Re: 911 - Blank page even in debug mode

2005/12/28 7:55
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

Does someone know what the MySQL table for banned IP address is?

Grüssle
......

http://www.vmclinks.com

25

Re: 911 - Blank page even in debug mode

2005/12/28 7:49
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

I was just going to say this must have something to do with the protector module.

What now?

Grüssle
......

http://www.vmclinks.com

26

Re: 911 - Blank page even in debug mode

2005/12/28 7:35
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

Ha ha - I guess now I have to believe it, don't I

Gotta see whats wrong here on my site

Thank you

Grüssle
......

http://www.vmclinks.com

27

Re: 911 - Blank page even in debug mode

2005/12/28 7:33
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

Am I the only one who is getting a blank page?
Please check and let me know here is the link again
http://www.vmclinks.com

Grüssle
......

http://www.vmclinks.com

28

Re: Please Explain .. Am I Stupid?

2005/12/28 7:31
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

Let us know

Grüssle
......

http://www.vmclinks.com

29

Re: Error msg when debug mode

2005/12/28 7:22
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

Those are no big deal they are just Notices. Don't worry we all get them. They happen because of unclean programming of modules.

just turn of debug mode and enjoy.

Grüssle
......

http://www.vmclinks.com

30

Re: 911 - Blank page even in debug mode

2005/12/28 7:13
gruessle
Friend of XOOPS
Posts: 348
Since: 2003/9/20

http://www.vmclinks.com looks good on your machine?
I just cleared all my browser cache and still have a blank page.
Then I opened Internet explorer which I never use and I get a blank page there too.

How is that possible?

Grüssle
......

http://www.vmclinks.com

Stats
Goal:	$100.00
Due Date:	Apr 30
Gross Amount:	$0.00
Net Balance:	$0.00
Left to go:	$100.00

Forum Index

server got scaned looking for xoops !! ?? !!

mod rewrite

Re: 911 - Blank page even in debug mode

Re: 911 - Blank page even in debug mode

Re: 911 - Blank page even in debug mode

Re: 911 - Blank page even in debug mode

Re: 911 - Blank page even in debug mode

Re: Please Explain .. Am I Stupid?

Re: Error msg when debug mode

Re: 911 - Blank page even in debug mode

Login

Search

Recent Posts

Re: Rebuilding and Updating a 20 years old Xoops Website from 2.0.18? to 2.5.11

Rebuilding and Updating a 20 years old Xoops Website from 2.0.18? to 2.5.11

Re: NewBB v 5.1.0 b 6

Re: NewBB v 5.1.0 b 6

NewBB v 5.1.0 b 6

Re: XOOPS 2.5.11 search user is not working

Re: oledrion

Re: oledrion

Re: oledrion

Re: oledrion

Who's Online

Donat-O-Meter

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}