[B! security][server] maRkã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

maRk id:maRk

securityã¨serverã«é–¢ã™ã‚‹maRkã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

å›½å†…ç´„200çµ„ç¹”ã¸è¡Œã‚ã‚ŒãŸã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã¨é–¢ä¿‚è€…ã®æ›¸é¡žé€æ¤œã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2021å¹´4æœˆ20æ—¥ã€å›½å†…ç´„200ã®çµ„ç¹”ã‚’ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã«ã—ãŸã‚µã‚¤ãƒãƒ¼æ”»æ’ƒãŒ2016å¹´ã«è¡Œã‚ã‚Œã¦ã„ãŸã¨ã—ã¦ã€æ”»æ’ƒã«é–¢é€£ã™ã‚‹ã‚µãƒ¼ãƒãƒ¼ã®å¥‘ç´„ã«ä¿‚ã£ãŸç”·ã‚’è¦è¦–åºå…¬å®‰éƒ¨ãŒæ›¸é¡žé€æ¤œã—ãŸã¨å ±ã˜ã‚‰ã‚Œã¾ã—ãŸã€‚æœæŸ»ã¯ç¾åœ¨ã‚‚è¡Œã‚ã‚Œã¦ãŠã‚Šä»–é–¢ä¿‚è€…ã®æƒ…å ±ã‚‚å ±ã˜ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ æ”»æ’ƒç™ºä¿¡å…ƒã‚µãƒ¼ãƒãƒ¼ã«ä¿‚ã£ãŸç”·ã‚’æ›¸é¡žé€æ¤œ æ›¸é¡žé€æ¤œã•ã‚ŒãŸã®ã¯ä¸å›½ å…±ç”£å…šå“¡ ä¸å›½ç±ã®ç”·ã§ã€æ—¢ã«ä¸å›½ã¸å¸°å›½ã€‚ä¸å›½ã®å¤§æ‰‹æƒ…å ±é€šä¿¡ä¼æ¥å‹¤å‹™ã§æ—¥æœ¬æ»žåœ¨ä¸ã‚‚ã‚·ã‚¹ãƒ†ãƒ ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®è·ã«å°±ã„ã¦ã„ãŸã€‚*1 å®¹ç–‘ã¯ç§é›»ç£è¨˜éŒ²ä¸æ£ä½œå‡ºãƒ»åŒä¾›ç”¨ã€‚2016å¹´9æœˆã‹ã‚‰17å¹´4æœˆã€5å›žã«ã‚ãŸã‚Šè™šå½ã®æ°åã€ä½æ‰€ã‚’ä½¿ã„å›½å†…ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼æ¥è€…ã¨å¥‘ç´„ã€‚ã‚µãƒ¼ãƒãƒ¼åˆ©ç”¨ã«å¿…è¦ãªã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ã‚’å–å¾—ã—ãŸç–‘ã„ã€‚ ç”·ã¯ä¸å›½å›½å†…ã‹ã‚‰å¥‘ç´„ã‚’è¡Œã„ã€è»¢å£²ã‚µã‚¤ãƒˆã§ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’è²©å£²ã€‚Tickã¨å‘¼ç§°ã•ã‚Œã‚‹ã‚°ãƒ«ãƒ¼ãƒ—ãŒãã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’å…¥æ‰‹ã—ä¸€é€£ã®æ”»æ’ƒã«æ‚ªç”¨ã•ã‚ŒãŸã¨ã•ã‚Œã‚‹ã€‚ æœæŸ»ã«ã‚
maRk 2021/04/22
security

server
ãƒªãƒ³ã‚¯
è¨˜äº‹é–²è¦§ - [å…¨ã‚µãƒ¼ãƒãƒ¼] WordPressç‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãŠé¡˜ã„
ãŠä¸–è©±ã«ãªã£ã¦ãŠã‚Šã¾ã™ã€‚ WordPressã§ã®æ”¹ã–ã‚“ã«é–¢ã™ã‚‹ãŠå•ã„åˆã‚ã›ãŒå¢—ãˆã¦ãŠã‚Šã¾ã™ã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã€ã”ç¢ºèªã¨ã€å¯¾ç–ã®ã”æ¤œè¨Žã‚’ãŠé¡˜ã„ç”³ã—ä¸Šã’ã¾ã™ã€‚ 1)ãƒ¦ãƒ¼ã‚¶ãƒ¼æ§˜ã§ã€ä¸‹è¨˜ã®å¯¾ç–ã®ãŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ ãƒ»æœ€æ–°ç‰ˆã«ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã—ã¦ã„ãŸã ã ãƒ»ãƒ¦ãƒ¼ã‚¶ãƒ¼åã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’é¡žæŽ¨ã•ã‚Œã«ãã„è¤‡é›‘ãªæ–‡å—åˆ—ã«è¨å®šã„ãŸã ãï¼ˆadminç‰ã‚’é¿ã‘ã‚‹ï¼‰ ãƒ».htaccessã«ã¦ã€ãƒ™ãƒ¼ã‚·ãƒƒã‚¯èªè¨¼ã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶é™ã‚’è¡Œã£ã¦ã„ãŸã ã ãƒ»ä»–ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼æ§˜ã‹ã‚‰ã¯å‚ç…§å‡ºæ¥ã¾ã›ã‚“ãŒã€å„ãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒ‘ãƒ¼ãƒŸãƒƒã‚·ãƒ§ãƒ³ãŒé©åˆ‡ã‹å†åº¦ç‚¹æ¤œã„ãŸã ã 2)ã‚µãƒ¼ãƒãƒ¼å´ã§ã¯ã€ç¾åœ¨ã®ã¨ã“ã‚ã€ä¸‹è¨˜ã®å¯¾ç–ã‚’è¡Œã£ã¦ã„ã¾ã™ã€‚ ãƒ»wp-login.phpç‰ã€è‘—åãªCMSã®ãƒã‚°ã‚¤ãƒ³ã‚¹ã‚¯ãƒªãƒ—ãƒˆã¸ã€çŸæ™‚é–“ã§ã®ç•°å¸¸ãªæ•°ã®è¤‡æ•°ã‚¢ã‚¯ã‚»ã‚¹ã‚’è¡Œã£ãŸIPã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã€ ã‹ã¤ã€æ—¥æœ¬å›½å¤–ã¨æ€ã‚ã‚Œã‚‹é€†å¼•ããƒ›ã‚¹ãƒˆåã‚’æŒã¤IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®å ´åˆã€è‡ªå‹•çš„ã«ã€ã‚¢ã‚¯ã‚»ã‚¹ã‚’é®æ–ã—ã¾ã™ã€‚ ï¼ˆèª¤æ¤œçŸ¥ã¨æ€ã‚ã‚Œã‚‹ã‚¢
maRk 2013/08/31
ã‚µãƒ¼ãƒãƒ¼å´ã®å¯¾ç–ãŒç¤ºã•ã‚Œã¦ã„ã‚‹ / ã‚¿ã‚¤ãƒˆãƒ«å¤‰æ›´äº‹ç”±ï¼štitle ãŒã€Œè¨˜äº‹é–²è¦§ã€ã®ã¿ãªã‚µã‚¤ãƒˆã®ç‚º

security

server

ã‚µãƒãƒ¼ãƒˆ
ãƒªãƒ³ã‚¯
SSHç·å½“ã‚Šæ”»æ’ƒ(Brute Force Attack)ã®å‚¾å‘ã‹ã‚‰åˆ©ç”¨ã‚’é¿ã‘ãŸã„ãƒ¦ãƒ¼ã‚¶å - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
æŸæ‰€ã§é‹ç”¨ã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒã®è©±ãªã‚“ã§ã™ãŒã€å‰²ã¨"SSH Brute Force Attack"ãŒãƒ’ãƒ‰ãã€å¯¾ç–ã‚’è¡Œã‚ãªã„ã¨ã„ã‘ãªã„ã‚“ã§ã™ãŒã€ãã®å‰ã«ã›ã£ã‹ããªã®ã§ã€æ”»æ’ƒè€…ãŒã©ã‚“ãªãƒ¦ãƒ¼ã‚¶åã§ãƒã‚°ã‚¤ãƒ³ã‚’è©¦ã¿ã¦ã„ã‚‹ã‹ã®çµ±è¨ˆã‚’å–ã£ã¦ã¿ã¾ã—ãŸã€‚ ã¨ã„ã†ã‚ã‘ã§ã€ãƒã‚°ã‚¤ãƒ³ã«å¤±æ•—ã—ãŸå›žæ•°ã€ä¸Šä½10ãƒ¦ãƒ¼ã‚¶åã®ä¸€è¦§ã‚’å–å¾—ã™ã‚‹ãƒ¯ãƒ³ãƒ©ã‚¤ãƒŠãƒ¼ã€‚ # cat /var/log/secure* | grep 'Invalid' | awk '{print $8}' | sort | uniq -c | sort -nr | head -n 10çµæžœã¯ã€ã ã„ãŸã„äºˆæƒ³é€šã‚Šã§ã™ãŒã€â†“ã®ã‚ˆã†ãªæ„Ÿã˜ã§ã™ã€‚ 1474 admin 1399 test 1059 123456 751 oracle 703 user 570 guest 416 web 380 www 370 info 359 backupã¨ã„ã†ã‚ã‘ã§ã€"admin"ã¨ã‹"
maRk 2009/02/02
security

SSH

server
ãƒªãƒ³ã‚¯
IIS ã® X-Powered-By ã ã‘éš ã™è©± | æ°´ç„¡æœˆã°ã‘ã‚‰ã®ãˆã³æ—¥è¨˜
maRk 2008/11/13
server

security
ãƒªãƒ³ã‚¯
ç„¡æ–™ãƒ¦ãƒ¼ã‚¶ãƒ¼å‘ã‘åºƒå‘Šé…ä¿¡ã‚µãƒ¼ãƒãƒ¼ã®ä¸å…·åˆã«ã¤ã„ã¦ - XREA&CORE SUPPORT BOARD
ãŠä¸–è©±ã«ãªã£ã¦ãŠã‚Šã¾ã™ã€‚ ä¸‹è¨˜å†…å®¹ã§ã€åºƒå‘Šé…ä¿¡ç”¨ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒãƒ¼ã§ä¸æ£ãªãƒ•ã‚¡ã‚¤ãƒ«ãŒè¨ç½®ã•ã‚Œã¦ã„ã‚‹ä¸å…·åˆãŒç™ºç”Ÿã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ â—‹å†…å®¹ãƒ»å¯¾å¿œï¼š 5å°ã‚’åºƒå‘Šé…ä¿¡ç”¨åˆ†æ•£ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒãƒ¼ã¨ã—ã¦é‹ç”¨ã—ã¦ã„ã¾ã™ãŒã€ãã®ä¸ã®1å°ã«ãŠã„ã¦ã€ 6æœˆ9æ—¥é ƒã‹ã‚‰ä¸æ£ãªãƒšãƒ¼ã‚¸ï¼ˆã‚¦ã‚£ãƒ«ã‚¹é…å¸ƒãƒšãƒ¼ã‚¸ã¸ã®è‡ªå‹•ãƒªãƒ³ã‚¯ã•ã‚Œã‚‹ãƒšãƒ¼ã‚¸ï¼‰ãŒè¨ç½®ã•ã‚Œã¦ãŠã‚Šã¾ã—ãŸã€‚ ã“ã®ãŸã‚ã€ç„¡æ–™ãƒ¦ãƒ¼ã‚¶ãƒ¼æ§˜ã®ãƒšãƒ¼ã‚¸å†…ã«è‡ªå‹•æŒ¿å…¥ã•ã‚Œã‚‹åºƒå‘Šã‚’è¡¨ç¤ºã—ãŸéš›ã§ã€ã‹ã¤ã€ ä¸»è¦åºƒå‘Šä»¥å¤–ã®åºƒå‘ŠãŒè¡¨ç¤ºã•ã‚ŒãŸå ´åˆã«ã€æ£å¸¸ã«åºƒå‘ŠãŒè¡¨ç¤ºã•ã‚Œãšã€ã‚¦ã‚£ãƒ«ã‚¹ã‚’é…å¸ƒã™ã‚‹ å¤–éƒ¨ã®ã‚µãƒ¼ãƒãƒ¼ã¸è‡ªå‹•èª˜å°Žã•ã‚Œã‚‹çŠ¶æ…‹ã«ãªã£ã¦ãŠã‚Šã¾ã—ãŸã€‚ 17æ—¥18æ™‚ã®æ™‚ç‚¹ã§ã€ã‚µãƒ¼ãƒãƒ¼ã‚’åˆæœŸçŠ¶æ…‹ã«æˆ»ã—å¾©æ—§ã—ã¦ãŠã‚Šã¾ã™ã€‚ é…å¸ƒã•ã‚Œã¦ã„ã‚‹ã‚¦ã‚£ãƒ«ã‚¹ã«ã¤ã„ã¦ã§ã™ãŒã€ç‰¹å®šã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚²ãƒ¼ãƒ ã®IDæƒ…å ±ã‚’ç›—ã‚€å‹•ä½œã‚’ã™ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ â—‹åŽŸå› ï¼š åºƒå‘Šé…ä¿¡ã‚„ç”»åƒèªã¿è¾¼ã¿ç”¨ã¨ã—ã¦
maRk 2008/06/29
webmasteræ°æ›°ã€ç„¡æ–™ã‚µãƒ¼ãƒãƒ¼éƒ¨é–€ã¯èµ¤å—ã¨ã®ã“ã¨

xrea

security

server
ãƒªãƒ³ã‚¯
avast!ã§ãƒžãƒ«ã‚¦ã‚§ã‚¢è¦å‘Š - XREA&CORE SUPPORT BOARD
ä¸€æ˜¨æ—¥ã‹ã‚‰ã€ã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€avast!ãŒãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’æ¤œå‡ºã—è¦å‘Šã‚’å‡ºã™ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ ãƒãƒ¼ã‚«ãƒ«ç’°å¢ƒã¯æœ€æ–°ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã§ã‚¦ã‚£ãƒ«ã‚¹ã‚¹ã‚ãƒ£ãƒ³æ¸ˆã§å•é¡Œç„¡ã—ã€ ã‚µã‚¤ãƒˆã‚‚ã„ãã¤ã‹ã®ã‚µãƒ¼ãƒã«htmlã‚’è¨ç½®ã—ã¦ã„ã¾ã™ãŒXreaã‚µãƒ¼ãƒã®ãƒšãƒ¼ã‚¸ã®ã¿è¦å‘ŠãŒå‡ºã¾ã™ã€‚ ã‚½ãƒ¼ã‚¹ã‚’è¦‹ã¾ã—ãŸãŒã€ä¸æ£ã«æ›¸ãåŠ ãˆã‚‰ã‚ŒãŸã‚³ãƒ¼ãƒ‰ãªã©ã¯ç„¡ã„ã‚ˆã†ã§ã™ã€‚ åˆ¥ã®ã‚µãƒ¼ãƒã«è¨ç½®ã—ãŸhtmlã«ã€Xreaã®åºƒå‘Šã‚¿ã‚°ã‚’åŸ‹ã‚è¾¼ã‚“ã ãƒšãƒ¼ã‚¸ã§ã‚‚è¦å‘ŠãŒå‡ºãŸãŸã‚ åŽŸå› ã¯åºƒå‘Šã«ã‚ã‚‹ã®ã§ã¯ã¨æ€ã„ã¾ã™ã€‚ ä»¥ä¸‹ã€è¡¨ç¤ºã•ã‚ŒãŸè¦å‘Šç”»é¢ã§ã™ã€‚ ã€Œi115[1].swfã€ ã¨ã„ã†ãƒ•ã‚¡ã‚¤ãƒ«ãŒãƒžãƒ«ã‚¦ã‚§ã‚¢ã¨èªè˜ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ ç”»åƒã¯s18ã‚µãƒ¼ãƒã€s82ã§ã‚‚æ¤œå‡ºã®å ±å‘Šã‚’å—ã‘ã¦ã„ã¾ã™ã€‚ ã‚µã‚¤ãƒˆã®ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ã‹ã‚‰ã„ããªã‚Šãƒžãƒ«ã‚¦ã‚§ã‚¢è¦å ±ã ãªã‚“ã¦ã€ãŠå®¢ã•ã‚“ã«æ€–ãŒã‚‰ã‚Œã¦ã—ã¾ã„ã¾ã™ãƒ»ãƒ»ã€ã”å¯¾å¿œãŠé¡˜ã„è‡´ã—ã¾ã™ã€‚
maRk 2008/06/14
security

server

xrea
ãƒªãƒ³ã‚¯
ã€Œè©æ¬ºçš„DNSã‚µãƒ¼ãƒã€ãŒå¢—åŠ ä¸ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
æœ¬å®¶/.ã®è¨˜äº‹ã‚ˆã‚Šã€‚æ‚ªæ„ã‚ã‚‹ã‚¯ãƒ©ãƒƒã‚«ãƒ¼ã«ã‚ˆã‚Šè¨ç½®ã•ã‚Œã€å•ã„åˆã‚ã› ã«å¯¾ã—æ£å½“ãªIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¿”ã•ãªã„ã€Œè©æ¬ºçš„DNSã‚µãƒ¼ãƒã€ (Rogue DNS Servers)ãŒå¢—åŠ ã—ã¦ã„ã‚‹ãã†ã (AP é€šä¿¡ã®è¨˜äº‹)ã€‚ã‚¸ãƒ§ãƒ¼ã‚¸ã‚¢å·¥ç§‘å¤§å¦ã¨GoogleãŒå…±åŒã§è¡Œã£ãŸèª¿æŸ»ã«ã‚ˆ ã‚‹ã¨ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã«ã¯ç´„68,000ã‚‚ã®è©æ¬ºçš„DNSã‚µãƒ¼ãƒãŒå˜åœ¨ã™ã‚‹ã€‚ ãƒžãƒ«ã‚¦ã‚§ã‚¢ç‰ã«ã‚ˆã‚Šã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã®è¨å®šãŒæ±šæŸ“ã•ã‚ŒãŸDNS ã‚µãƒ¼ãƒã‚’å‚ç…§ã™ã‚‹ã‚ˆã†ã«æ”¹å¤‰ã•ã‚Œã¦ã—ã¾ã£ãŸå ´åˆã€ã‚¯ãƒ©ãƒƒã‚«ãƒ¼ã¯ã„ã‹ãªã‚‹ å½ã‚µã‚¤ãƒˆã«ã‚‚ãƒ¦ãƒ¼ã‚¶ã‚’èª˜å°Žã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚å®Ÿéš›ã«èª˜å°Žã•ã‚Œã‚‹å…ˆã¯ã„ã‹ ã«ã‚‚ã‚¤ãƒ³ãƒã‚ãã•ã„ã‚‚ã®ã‹ã‚‰ã»ã¼å®Œç’§ãªã‚³ãƒ”ãƒ¼ã‚µã‚¤ãƒˆã¾ã§æ§˜ã€…ã®ã‚ˆã†ã ãŒã€ æ·±åˆ»ãªè„…å¨ã§ã‚ã‚‹ã“ã¨ã«é•ã„ã¯ãªã„ã€‚ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ã‚½ãƒ•ãƒˆã§ã¯æ‰‹ã®æ–½ã— ã‚ˆã†ãŒãªã„å ´åˆãŒå¤šã„ã®ãŒã€ã“ã®æ‰‹æ³•ã®æ™®åŠã«ä¸€å½¹è²·ã£ã¦ã„ã‚‹ã‚ˆã†ã ã€‚
maRk 2008/02/18
security

server
ãƒªãƒ³ã‚¯
1