【事例】有名ではないサイトへの攻撃

最終更新日: 2017/03/14 11:39am

カテゴリー： ITサポート, お知らせ, クラウド, ホームページ

こんにちは。経理の小高です。

先日のブログ「Webサイトへの攻撃」をアップしたところ、「有名なサイトだからじゃないの？」と社長から言われました。

そんなことは全然なくて、攻撃者はプログラムで手あたり次第に攻撃してきます。ホームページは必ずどこかのホームページからリンクが張られていますので、それをたどってやってくるという仕組みになっています。

ちょうどうちの会社に攻撃に来たので、ログにアップしてみます。IPアドレスも公開してしまいますが、中国からのようです。

わたしどもの会社はWordPressというCMSでホームページを制作するのが得意です。SEO的にもベストなチョイスと言われています。

WordPressのサイトのバックエンドには、一般的にLAMP（Linux、Apache、MySQL、PHP）というサーバーソフトウェアの組み合わせになっています。

よく問題になる「改ざん」とか「SQLインジェクション」とかはこれらのサーバーソフトウェアや、Wordpressの本体もしくはプラグインの脆弱性を狙います。

この攻撃者はLAMP構成のサーバーに一般的にインストールされている「phpmyadmin（ピーエイチピー・マイ・アドミン）」という管理ツールにログインできないか、URLをいろいろと変えて（それっぽい名前にして）アクセスしています。

以下のログを見ていただくと、全部、はねつけていますので、うちのホームページがこの攻撃者になにかされた可能性は低いです。

とはいえ、うちのホームページというのは相当にマイナーな存在のはずですが、こういうことが始終起こっているのが現実です。

[text]

[Sun Mar 12 06:54:36 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysql
[Sun Mar 12 06:54:37 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysql
[Sun Mar 12 06:54:37 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysql
[Sun Mar 12 06:54:37 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpmyadmin
[Sun Mar 12 06:54:37 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpMyadmin
[Sun Mar 12 06:54:37 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpmyAdmin
[Sun Mar 12 06:54:37 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpmyadmin2
[Sun Mar 12 06:54:38 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpmyadmin3
[Sun Mar 12 06:54:38 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpmyadmin4
[Sun Mar 12 06:54:38 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/2phpmyadmin
[Sun Mar 12 06:54:38 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpmy
[Sun Mar 12 06:54:38 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phppma
[Sun Mar 12 06:54:38 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/myadmin
[Sun Mar 12 06:54:38 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/shopdb
[Sun Mar 12 06:54:39 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/MyAdmin
[Sun Mar 12 06:54:39 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/program
[Sun Mar 12 06:54:39 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/PMA
[Sun Mar 12 06:54:39 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/dbadmin
[Sun Mar 12 06:54:39 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/pma
[Sun Mar 12 06:54:39 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:39 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/admin
[Sun Mar 12 06:54:40 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysql
[Sun Mar 12 06:54:40 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/database
[Sun Mar 12 06:54:40 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:40 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:40 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sqlmanager
[Sun Mar 12 06:54:41 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysqlmanager
[Sun Mar 12 06:54:41 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/php-myadmin
[Sun Mar 12 06:54:41 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpmy-admin
[Sun Mar 12 06:54:41 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysqladmin
[Sun Mar 12 06:54:41 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysql-admin
[Sun Mar 12 06:54:41 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/admin
[Sun Mar 12 06:54:41 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/admin
[Sun Mar 12 06:54:42 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/admin
[Sun Mar 12 06:54:42 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/admin
[Sun Mar 12 06:54:42 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/admin
[Sun Mar 12 06:54:42 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/admin
[Sun Mar 12 06:54:42 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/admin
[Sun Mar 12 06:54:42 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysql
[Sun Mar 12 06:54:42 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysql
[Sun Mar 12 06:54:43 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysql
[Sun Mar 12 06:54:43 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/mysql
[Sun Mar 12 06:54:43 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:43 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:43 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:43 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:43 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:44 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:44 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:44 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:44 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:44 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:44 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:44 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:45 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:45 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/sql
[Sun Mar 12 06:54:45 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:45 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:45 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:45 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:45 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:46 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:46 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:46 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:46 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:46 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/db
[Sun Mar 12 06:54:46 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/administrator
[Sun Mar 12 06:54:46 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/administrator
[Sun Mar 12 06:54:47 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/administrator
[Sun Mar 12 06:54:47 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/administrator
[Sun Mar 12 06:54:47 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/administrator
[Sun Mar 12 06:54:47 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/administrator
[Sun Mar 12 06:54:47 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/administrator
[Sun Mar 12 06:54:47 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpMyAdmin2
[Sun Mar 12 06:54:47 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpMyAdmin3
[Sun Mar 12 06:54:48 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpMyAdmin4
[Sun Mar 12 06:54:48 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpMyAdmin-3
[Sun Mar 12 06:54:48 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/php-my-admin
[Sun Mar 12 06:54:48 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/PMA2012
[Sun Mar 12 06:54:48 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/pma2012
[Sun Mar 12 06:54:48 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/PMA2011
[Sun Mar 12 06:54:48 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/pma2011
[Sun Mar 12 06:54:49 2017] [error] [client 106.0.7.60] File does not exist: /var/www/html/phpmanager
[Sun Mar 12 08:27:21 2017] [error] [client 191.96.249.97] File does not exist: /var/www/html/phpmyadmin

[text]

←「【事例】ウェブサイトへの攻撃」前の記事へ　　次の記事へ「【Webサーバーへの攻撃】Struts2の脆弱性を狙った攻撃情報」→