ubuntuusers.de

vor ab ich betreibe den Server jetzt nicht lange der ist ca. 4 wochen online.

Könnt ihr mir helfen das zu analysieren, mir fehlt leider die Erfahrung dazu.

wenn es ein abtasten war, um vielleicht was zu machen, welche .conf kann ich verbessern bzw euch Posten um mir zusagen was vielleicht falsch eingestellt ist?

error.log
==============================
[Thu Aug 28 03:21:08 2014] [error] [client 89.23.227.196] Invalid method in request \x80w\x01\x03\x01
[Thu Aug 28 03:21:09 2014] [error] [client 89.23.227.196] File does not exist: /var/www/HNAP1, referer: http://MeineIP/
[Thu Aug 28 07:33:29 2014] [error] [client 93.115.92.169] File does not exist: /var/www/webalizer
[Thu Aug 28 07:33:29 2014] [error] [client 93.115.92.169] File does not exist: /var/www/admin
[Thu Aug 28 11:12:13 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:13 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:14 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:14 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:15 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:15 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:16 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:16 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:17 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:17 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:18 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:18 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:19 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-sys
[Thu Aug 28 11:12:20 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:20 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:21 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:21 2014] [error] [client 200.127.161.206] script '/var/www/info.php' not found or unable to stat
[Thu Aug 28 11:12:22 2014] [error] [client 200.127.161.206] script '/var/www/phpinfo.php' not found or unable to stat
[Thu Aug 28 11:12:22 2014] [error] [client 200.127.161.206] File does not exist: /var/www/cgi-bin
[Thu Aug 28 11:12:23 2014] [error] [client 200.127.161.206] File does not exist: /var/www/phpMyAdmin
[Thu Aug 28 11:39:23 2014] [error] [client 114.232.139.156] File does not exist: /var/www/render, referer: http://hotel.qunar.com/
[Thu Aug 28 15:50:36 2014] [error] [client 31.170.178.234] client denied by server configuration: /var/www/server-status
[Thu Aug 28 17:49:40 2014] [error] [client 67.23.26.108] File does not exist: /var/www/script
[Thu Aug 28 17:49:42 2014] [error] [client 67.23.26.108] File does not exist: /var/www/jenkins
[Thu Aug 28 17:49:43 2014] [error] [client 67.23.26.108] File does not exist: /var/www/hudson
[Thu Aug 28 17:49:44 2014] [error] [client 67.23.26.108] File does not exist: /var/www/login
[Thu Aug 28 17:49:45 2014] [error] [client 67.23.26.108] File does not exist: /var/www/jenkins
[Thu Aug 28 17:49:46 2014] [error] [client 67.23.26.108] File does not exist: /var/www/hudson
[Thu Aug 28 17:49:47 2014] [error] [client 67.23.26.108] File does not exist: /var/www/jmx-console
[Thu Aug 28 17:49:48 2014] [error] [client 67.23.26.108] File does not exist: /var/www/manager
[Thu Aug 28 17:49:49 2014] [error] [client 67.23.26.108] File does not exist: /var/www/msd
[Thu Aug 28 17:49:51 2014] [error] [client 67.23.26.108] File does not exist: /var/www/mySqlDumper
[Thu Aug 28 17:49:52 2014] [error] [client 67.23.26.108] File does not exist: /var/www/phpmyadmin
[Thu Aug 28 17:49:52 2014] [error] [client 67.23.26.108] File does not exist: /var/www/phpMyAdmin
[Thu Aug 28 17:49:54 2014] [error] [client 67.23.26.108] File does not exist: /var/www/mysql
[Thu Aug 28 17:49:55 2014] [error] [client 67.23.26.108] File does not exist: /var/www/sql
[Thu Aug 28 17:49:56 2014] [error] [client 67.23.26.108] File does not exist: /var/www/myadmin
[Thu Aug 28 17:49:57 2014] [error] [client 67.23.26.108] File does not exist: /var/www/phpMyAdmin-4.2.1-all-languages
[Thu Aug 28 17:49:57 2014] [error] [client 67.23.26.108] File does not exist: /var/www/phpMyAdmin-4.2.1-english
[Thu Aug 28 17:49:59 2014] [error] [client 67.23.26.108] File does not exist: /var/www/sqlite
[Thu Aug 28 17:50:00 2014] [error] [client 67.23.26.108] File does not exist: /var/www/SQLite
[Thu Aug 28 17:50:01 2014] [error] [client 67.23.26.108] File does not exist: /var/www/SQLiteManager-1.2.4
[Thu Aug 28 17:50:02 2014] [error] [client 67.23.26.108] File does not exist: /var/www/sqlitemanager
[Thu Aug 28 17:50:03 2014] [error] [client 67.23.26.108] File does not exist: /var/www/SQlite
[Thu Aug 28 17:50:04 2014] [error] [client 67.23.26.108] File does not exist: /var/www/SQLiteManager

Ohter_vhosts_access.log
===========================================
MeineVAdresse.net:80 66.249.73.155 - - [28/Aug/2014:00:54:22 +0200] "GET / HTTP/1.1" 200 414 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
MeineVAdresse.net:80 89.23.227.196 - - [28/Aug/2014:03:21:08 +0200] "\x80w\x01\x03\x01" 501 217 "-" "-"
MeineVAdresse.net:80 89.23.227.196 - - [28/Aug/2014:03:21:09 +0200] "GET /HNAP1/ HTTP/1.1" 404 427 "http://MeineIP/" "Opera/9.0 (Windows NT 5.1; U; en)"
MeineVAdresse.net:80 66.249.73.155 - - [28/Aug/2014:03:48:27 +0200] "GET / HTTP/1.1" 200 414 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
MeineVAdresse.net:80 66.249.73.155 - - [28/Aug/2014:05:47:56 +0200] "GET / HTTP/1.1" 200 414 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
MeineVAdresse.net:80 93.115.92.169 - - [28/Aug/2014:07:33:29 +0200] "GET /webalizer/cp.php?m=login HTTP/1.1" 404 382 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0"
MeineVAdresse.net:80 93.115.92.169 - - [28/Aug/2014:07:33:29 +0200] "GET /admin/cp.php?m=login HTTP/1.1" 404 378 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0"
MeineVAdresse.net:80 218.248.64.75 - - [28/Aug/2014:09:14:09 +0200] "HEAD / HTTP/1.0" 200 261 "-" "-"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:13 +0200] "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:13 +0200] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:14 +0200] "POST /cgi-bin/php-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:14 +0200] "POST /cgi-bin/php.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:15 +0200] "POST /cgi-bin/php4?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:15 +0200] "POST /cgi-bin/php5-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 401 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:16 +0200] "POST /cgi-bin/php4-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 401 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:16 +0200] "POST /cgi-bin/php5.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 401 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:17 +0200] "POST /cgi-bin/php4.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 401 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:17 +0200] "POST /cgi-bin/php52.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:18 +0200] "POST /cgi-bin/php53.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:18 +0200] "POST /cgi-bin/?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 393 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:19 +0200] "POST /cgi-sys/php-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 400 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:19 +0200] "POST /?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 200 375 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:20 +0200] "POST /cgi-bin/php5.cgi-20120725_by_SAKUR?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 419 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:20 +0200] "POST /cgi-bin/info.php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 401 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:21 +0200] "POST /cgi-bin/php.fcgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 401 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:21 +0200] "POST /info.php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 393 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:22 +0200] "POST /phpinfo.php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:22 +0200] "POST /cgi-bin/phpinfo.php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 404 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 200.127.161.206 - - [28/Aug/2014:11:12:23 +0200] "POST /phpMyAdmin/config/config.inc.php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%22%79%65%73%22+%2D%64+%63%67%69%2E%66%69%78%5F%70%61%74%68%69%6E%66%6F%3D%31+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%6E HTTP/1.1" 404 417 "-" "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0"
MeineVAdresse.net:80 114.232.139.156 - - [28/Aug/2014:11:39:23 +0200] "GET http://hotel.qunar.com/render/hoteldiv.jsp?&__jscallback=XQScript_4 HTTP/1.1" 404 379 "http://hotel.qunar.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.114 Safari/537.36"
MeineVAdresse.net:80 198.11.235.59 - - [28/Aug/2014:13:27:38 +0200] "HEAD / HTTP/1.0" 200 261 "-" "-"
MeineVAdresse.net:80 31.170.178.234 - - [28/Aug/2014:15:50:36 +0200] "HEAD /server-status/ HTTP/1.0" 403 166 "-" "-"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:39 +0200] "GET / HTTP/1.1" 200 375 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:40 +0200] "GET /script HTTP/1.1" 404 391 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:42 +0200] "GET /jenkins/script HTTP/1.1" 404 399 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:43 +0200] "GET /hudson/script HTTP/1.1" 404 398 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:44 +0200] "GET /login HTTP/1.1" 404 390 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:45 +0200] "GET /jenkins/login HTTP/1.1" 404 398 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:46 +0200] "GET /hudson/login HTTP/1.1" 404 397 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:47 +0200] "GET /jmx-console HTTP/1.1" 404 396 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:48 +0200] "GET /manager/html HTTP/1.1" 404 397 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:49 +0200] "GET /msd HTTP/1.1" 404 388 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:51 +0200] "GET /mySqlDumper HTTP/1.1" 404 396 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:52 +0200] "GET /phpmyadmin HTTP/1.1" 404 395 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:52 +0200] "GET /phpMyAdmin HTTP/1.1" 404 395 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:54 +0200] "GET /mysql HTTP/1.1" 404 390 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:55 +0200] "GET /sql HTTP/1.1" 404 388 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:56 +0200] "GET /myadmin HTTP/1.1" 404 392 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:57 +0200] "GET /phpMyAdmin-4.2.1-all-languages HTTP/1.1" 404 415 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:57 +0200] "GET /phpMyAdmin-4.2.1-english HTTP/1.1" 404 409 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:58 +0200] "GET / HTTP/1.1" 200 375 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:49:59 +0200] "GET /sqlite/main.php HTTP/1.1" 404 400 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:50:00 +0200] "GET /SQLite/SQLiteManager-1.2.4/main.php HTTP/1.1" 404 420 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:50:01 +0200] "GET /SQLiteManager-1.2.4/main.php HTTP/1.1" 404 413 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:50:02 +0200] "GET /sqlitemanager/main.php HTTP/1.1" 404 407 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:50:03 +0200] "GET /SQlite/main.php HTTP/1.1" 404 400 "-" "Python-urllib/2.6"
MeineVAdresse.net:80 67.23.26.108 - - [28/Aug/2014:17:50:04 +0200] "GET /SQLiteManager/main.php HTTP/1.1" 404 407 "-" "Python-urllib/2.6"

PeTePeter schrieb:

vor ab ich betreibe den Server jetzt nicht lange der ist ca. 4 wochen online. Könnt ihr mir helfen das zu analysieren, mir fehlt leider die Erfahrung dazu.

Schon irgendwie ziemlich verantwortungslos einen Server ins Netz zu stellen, wenn man keinen Plan von Administration hat - Klasse!

hoerianer schrieb:

PeTePeter schrieb:

vor ab ich betreibe den Server jetzt nicht lange der ist ca. 4 wochen online. Könnt ihr mir helfen das zu analysieren, mir fehlt leider die Erfahrung dazu.

Schon irgendwie ziemlich verantwortungslos einen Server ins Netz zu stellen, wenn man keinen Plan von Administration hat - Klasse!

Sorry Bro! aber du hilfst hier keinem weiter mit deinem Wirklich unnötigen Kommentaren. lass es doch einfach wenn du keinen bock hast zu helfen wirklich dann bist du hier falsch im Forum. Du bist ja bestimmt als GottVater der Server admins auf die Welt gekommen, ich leider nicht.

#

Ja den Server selbst habe ich seit 6 Monate und habe alles mögliche gelesen Hier und abgesichert. mit den 4 Wochen meinte ich das ich online bin mit dem Server, also jeder kommt da drauf über google und co.

wegen den logs wollte ich ich nur wissen wie ich mich verhalten sollte und was ich an Konfigurationen überprüfen sollte.

Jetzt weiß ich auch das es ein PHP injection versuch bei mir war. Wo kann man nachgucken ob er Erfolg hatte?

Es tut mir leid an die hier die das Thema hier nervt, aber jeder hat mal kleine angefangen. Wenn ihr nicht helfen wollte ignoriert es einfach. aber ich sehe sonst kein Sinn in ein Forum. Wenn man da nicht nach bisschen Hilfe suchen kann.

Schau dir die Return-Codes in den Logs an. Da ist ne ganze Menge 404 (File not found) und 403 (forbidden) dabei. Das ist immer ein Zeichen, dass die Anfrage nicht verarbeitet werden konnte oder durfte. Sollte das also ein potentiell gefährlicher Angriff gewesen sein, hat er auf jeden Fall nicht funktioniert. Entweder weil die Gegebenheiten dafür nicht passend waren (da sind z.B. Angriffe auf eine alte Version von phpMyAdmin dabei), oder weil die Operation (aus Sicherheitsgründen) verboten war.

Allerdings sind auch ein paar mit 200 (OK) dabei, da kann man gerne mal schauen was die genau machen und dann entscheiden ob das gefährlich ist, oder nicht.

Wenn du einen Server am Netz betreibst, wirst du halt schlecht verhindern können, dass auch mal jemand die gängigen Lücken abklappert. Solange du die gängigen Lücken aber auch zu machst, kommt er nicht weit.

Grundsätzlich muss ich hoerianer aber schon recht geben. Wer einen Server ans große weite Internet lässt, sollte auch wissen was er tut.

Danke für deine Hilfe Lookbehind

Zu 1: Okay das ich schon mal gut. habe auch nach meiner pMA Version geguckt ist eine ganz andere. sonst hätte ich einen Trojaner vermutet

Zu 2: Welche meinst du im log mit 200 OK. Wie kann man jetzt nachgucken was da ausgeführt worden ist.

Zu 3: ja habe das Wiki hier rauf und runter gelesen und habe mir echt zeit gelassen alles sicher zu machen 😀 aber ein Perfekt sicheres System gibt es nicht, wen Sony, Vodafone Co gehackt werden

Zu 4: Ja klar ist ja auch okay aber habe mich sogar mit der Störerhaftung auseinandergesetzt und alle Nachteile vorgehalten bevor ich den Server gekauft habe. Aber mit Hacken kenne ich mich Nicht aus, leider. Da muss ich leider mit meinen aufgaben wachsen, und muss hoffen das ihr mir was beibringt. Und mir Tipps gibt um die Kiste sauber zu halten.

ich frage mal so: was würdet ihr tun wenn das in eurem log stehen würde.

Edit zu 2: okay habe was gefunden

//cgi-bin/php?-d allow_url_include=on -d safe_mode=off -d suhosin.simulation=on -d disable_functions="" -d open_basedir=none -d auto_prepend_file=php://input -d cgi.force_redirect=0 -d cgi.redirect_status_env=0 -d auto_prepend_file=php://input -n

PeTePeter schrieb:

Du bist ja bestimmt als GottVater der Server admins auf die Welt gekommen, ich leider nicht.

Nicht umsonst ist Systemadministrator ein Beruf mit entsprechenden fachlichen Voraussetzungen. Auto fährt man auch erst nach Erwerb des Führerscheins. Bitte nimm wenigstens das aktuelle Ereignis als Ansporn, dich umfassend mit Serverkonfiguration und Sicherheit zu befassen. ❗