# Help server web

**URL:** <https://www.debian-fr.org/t/help-server-web/86281>\
**Category:** Support Debian\
**Tags:** application\
**Created:** [Mars 21, 2022, 11:36 UTC](https://www.debian-fr.org/t/help-server-web/86281 "2022-03-21T11:36:26Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![bobylapointe](https://www.debian-fr.org/letter_avatar_proxy/v4/letter/b/3be4f8/32.png) [@bobylapointe](https://www.debian-fr.org/u/bobylapointe)\
**Post date:** [Mars 21, 2022, 11:36 UTC](https://www.debian-fr.org/t/help-server-web/86281/1 "2022-03-21T11:36:27Z")

</div>

bjr,  
je n’arrête pas d’avoir des éléments comme ça  
pouvez vous me donner un coup de main?  
j’ai eu un doute ce matin car je n’avais plus de log avec apache.  
Merci d’avance

```nohighlight
103.41.207.11 - - [21/Mar/2022:12:31:51 +0100] "POST /admin/ HTTP/1.1" 404 5017 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.155.255 - - [21/Mar/2022:12:31:53 +0100] "POST /admin/ HTTP/1.1" 404 15309 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.79.84.13 - - [21/Mar/2022:12:31:59 +0100] "POST /admin/ HTTP/1.1" 404 15309 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
163.172.255.213 - - [21/Mar/2022:12:33:21 +0100] "POST /admin/ HTTP/1.1" 404 5017 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
213.63.224.44 - - [21/Mar/2022:12:33:21 +0100] "POST /admin/ HTTP/1.1" 404 15309 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
172.96.190.83 - - [21/Mar/2022:12:33:22 +0100] "POST /admin/ HTTP/1.1" 404 5017 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.122.5.242 - - [21/Mar/2022:12:33:23 +0100] "POST /admin/ HTTP/1.1" 404 15309 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.114.153.198 - - [21/Mar/2022:12:33:25 +0100] "POST /admin/ HTTP/1.1" 404 4983 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

```

---

<div class="post-metadata">

**Author:** ![bobylapointe](https://www.debian-fr.org/letter_avatar_proxy/v4/letter/b/3be4f8/32.png) [@bobylapointe](https://www.debian-fr.org/u/bobylapointe)\
**Post date:** [Mars 21, 2022, 5:26 UTC](https://www.debian-fr.org/t/help-server-web/86281/2 "2022-03-21T17:26:27Z")

</div>

impossible de trouver des informations …des avis?

---

<div class="post-metadata">

**Author:** ![anon70622873](https://www.debian-fr.org/letter_avatar_proxy/v4/letter/a/278dde/32.png) [@anon70622873](https://www.debian-fr.org/u/anon70622873)\
**Post date:** [Mars 21, 2022, 5:31 UTC](https://www.debian-fr.org/t/help-server-web/86281/3 "2022-03-21T17:31:38Z")

</div>

Bonjour,

Des bots qui font des tentatives en force brute sur une serveur web, rien de plus normal.  
De toute façon ton serveur renvoie une erreur 404 sur l’URL attaquée.

---

<div class="post-metadata">

**Author:** ![bobylapointe](https://www.debian-fr.org/letter_avatar_proxy/v4/letter/b/3be4f8/32.png) [@bobylapointe](https://www.debian-fr.org/u/bobylapointe)\
**Post date:** [Mars 21, 2022, 6:25 UTC](https://www.debian-fr.org/t/help-server-web/86281/4 "2022-03-21T18:25:17Z")

</div>

Ok mais pourquoi c’est en POST et pas en GET

---

<div class="post-metadata">

**Author:** ![anon70622873](https://www.debian-fr.org/letter_avatar_proxy/v4/letter/a/278dde/32.png) [@anon70622873](https://www.debian-fr.org/u/anon70622873)\
**Post date:** [Mars 21, 2022, 6:35 UTC](https://www.debian-fr.org/t/help-server-web/86281/5 "2022-03-21T18:35:28Z")

</div>

Parce que ces bots essaient des combinaisons utilisateur / mot de passe.

---

<div class="post-metadata">

**Author:** ![kmchen](https://www.debian-fr.org/letter_avatar_proxy/v4/letter/k/3d9bf3/32.png) [@kmchen](https://www.debian-fr.org/u/kmchen)\
**Post date:** [Mars 24, 2022, 4:54 UTC](https://www.debian-fr.org/t/help-server-web/86281/6 "2022-03-24T16:54:28Z")

</div>

Un bot peut faire des requêtes POST.

Tu as des jails apache de fail2ban pour limiter ce genre d’attaque et bannir les IP qui abusent.