Watchdog

Events happening in the community are now at Drupal community events on www.drupal.org.
uaparac's picture

Olá colegas Drupaleiros venho a solicitar ajuda para o seguinte problema.

O meu Hosting informou-me do seguinte

Bom dia,

Vimos por este meio informar que se encontra a ser detectado milhares de pedidos ao alojamento "clinicainfantesagres.com" o que se encontra a causar problemas no servidor em questão.

Estes pedidos encontram-se a ser efectuados por diversos servidores na tentativa de explorar vulnerabilidades anteriormente detectadas:

62.122.72.79 - - [05/Dec/2013:11:05:47 +0000] "GET /?q=node/1437965&%boundary%%0D%0AContent-Disposition:+form-data;+name=%22title%22%0D%0A%0D%0AChoosing+Effective+Solutions+Of+appliance+repair+boca+raton%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22teaser_include%22%0D%0A%0D%0A1%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22body%22%0D%0A%0D%0AExpert+Appliance+Repair+Help%0D%0A%0D%0A%3Cimg+width=400+height=300+src=%22http://airexpressappliancerepair.com/images/appliances.jpg%22+/%3E%0D%0A%0D%0ADishwashers+are+one+of+the+delights+of+your+modern+kitchen.+They+help+keep+sinks+totally+free+of+dirty+dishes+waiting+to+become+washed,+and+counters+totally+free+of+the+clutter+of+dish+drying+racks.++If+you+have+any+kind+of+questions+relating+to+where+and+how+to+use+appliance+repair+boca+raton+-+%3Ca+href=%22http://kjerstin.me/Quick_Systems_In_appliance_repair_boca_raton%22%3Ekjerstin.Me%3C/a%3E,,+you+could+contact+us+at+the+web+site.+However,+a+dishwasher+is+simply+a+boon+when+it's+working+correctly.+If+the+machine+is+malfunctioning,+a+dishwasher+will+often+become+more+of+your+nuisance+than+a+benefit.+One+of+the+most+common+issues+that+arises+is+a+concern+with+a+dishwasher's+heating+unit.+Learn+what+some+of+the+symptoms+of+heating+element+malfunctions+are,+and+find+out+if+you+want+to+work+to+diagnose+the+situation+DIY-style+or+with+the+aid+of+professional+appliance+installers+and+repair+specialists.%0D%0A%0D%0A%0D%0A%0D%0A1.+Chemical+action.+The+detergent+or+soap+solution+dissolves+and+loosens+the+soil+inside+the+fabric.%0D%0A2.+Mechanical+action.+Flexing+the+clothes+and+forcing+the+detergent+or+soap+through+removes+the+soil.+The+functioning+in+the+washer+is+aided+by+the+heat+and+softness+from+the+water,+which+raises+the+chemical+action+in+the+detergent+or+soap+used.%0D%0A%0D%0AIf+you+decide+to+carry+out+appliance+repair,+the+first+thing+you+need+to+do+is+always+to+diagnose+the+situation.+Unless+you+know+what+the+situation+is,+you+can+not+hope+to+fix+it.+The+appliances+feature+user+manuals+and+when+you+still+have+yours,+you+are+able+to+trouble+shoot+the+appliance+effortlessly.+You+can+get+information+that+could+allow+you+to+pull+the+appliance+apart,+repair+it+and+put+it+together+again.%0D%0A%0D%0AIf+you're+looking+for+a+method+to+save+on+repairs,+then+doing+the+work+yourself+is+a+practical+idea.+Appliance+repair+manuals+have+details+on+what+to+complete.+However,+you+will+need+to+remember+that+you+will+find+only+a+small+selection+of+of+repair+procedures+that+you+can+do.+It+is+still+far+better+to+consult+an+experienced+if+the+dilemma+is+on+a+different+scale.+Otherwise,+a+repair+manual+should+suffice.%0D%0A%0D%0AYour+local+handyman+services+professionals+will+also+improve+the+inside+of+your+new+home+to+restore+beautiful,+safe,+and+livable.+Say+goodbye+to+the+cracked+tiles,+damaged+hard+wood+floors,+and+terrifyingly+dated+bathrooms+Great-Aunt+Violet+willed+for+your+requirements,+and+trust+the+flooring+contractors+and+bathroom+remodelers+ahead+in+and+save+your+day.%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22changed%22%0D%0A%0D%0A%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22form_build_id%22%0D%0A%0D%0Aform-3be806a87de9c6b86e79d558bd90eb53%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22form_id%22%0D%0A%0D%0Awebform_node_form%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22op%22%0D%0A%0D%0AGuardar%0D%0A%boundary%--%0D%0A&%boundary%%0D%0AContent-Disposition:+form-data;+name=%22title%22%0D%0A%0D%0AChoosing+Effective+Solutions+Of+appliance+repair+boca+raton%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22teaser_include%22%0D%0A%0D%0A1%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22body%22%0D%0A%0D%0AExpert+Appliance+Repair+Help%0D%0A%0D%0A%3Cimg+width=400+height=300+src=%22http://airexpressappliancerepair.com/images/appliances.jpg%22+/%3E%0D%0A%0D%0ADishwashers+are+one+of+the+delights+of+your+modern+kitchen.+They+help+keep+sinks+totally+free+of+dirty+dishes+waiting+to+become+washed,+and+counters+totally+free+of+the+clutter+of+dish+drying+racks.++If+you+have+any+kind+of+questions+relating+to+where+and+how+to+use+appliance+repair+boca+raton+-+%3Ca+href=%22http://kjerstin.me/Quick_Systems_In_appliance_repair_boca_raton%22%3Ekjerstin.Me%3C/a%3E,,+you+could+contact+us+at+the+web+site.+However,+a+dishwasher+is+simply+a+boon+when+it's+working+correctly.+If+the+machine+is+malfunctioning,+a+dishwasher+will+often+become+more+of+your+nuisance+than+a+benefit.+One+of+the+most+common+issues+that+arises+is+a+concern+with+a+dishwasher's+heating+unit.+Learn+what+some+of+the+symptoms+of+heating+element+malfunctions+are,+and+find+out+if+you+want+to+work+to+diagnose+the+situation+DIY-style+or+with+the+aid+of+professional+appliance+installers+and+repair+specialists.%0D%0A%0D%0A%0D%0A%0D%0A1.+Chemical+action.+The+detergent+or+soap+solution+dissolves+and+loosens+the+soil+inside+the+fabric.%0D%0A2.+Mechanical+action.+Flexing+the+clothes+and+forcing+the+detergent+or+soap+through+removes+the+soil.+The+functioning+in+the+washer+is+aided+by+the+heat+and+softness+from+the+water,+which+raises+the+chemical+action+in+the+detergent+or+soap+used.%0D%0A%0D%0AIf+you+decide+to+carry+out+appliance+repair,+the+first+thing+you+need+to+do+is+always+to+diagnose+the+situation.+Unless+you+know+what+the+situation+is,+you+can+not+hope+to+fix+it.+The+appliances+feature+user+manuals+and+when+you+still+have+yours,+you+are+able+to+trouble+shoot+the+appliance+effortlessly.+You+can+get+information+that+could+allow+you+to+pull+the+appliance+apart,+repair+it+and+put+it+together+again.%0D%0A%0D%0AIf+you're+looking+for+a+method+to+save+on+repairs,+then+doing+the+work+yourself+is+a+practical+idea.+Appliance+repair+manuals+have+details+on+what+to+complete.+However,+you+will+need+to+remember+that+you+will+find+only+a+small+selection+of+of+repair+procedures+that+you+can+do.+It+is+still+far+better+to+consult+an+experienced+if+the+dilemma+is+on+a+different+scale.+Otherwise,+a+repair+manual+should+suffice.%0D%0A%0D%0AYour+local+handyman+services+professionals+will+also+improve+the+inside+of+your+new+home+to+restore+beautiful,+safe,+and+livable.+Say+goodbye+to+the+cracked+tiles,+damaged+hard+wood+floors,+and+terrifyingly+dated+bathrooms+Great-Aunt+Violet+willed+for+your+requirements,+and+trust+the+flooring+contractors+and+bathroom+remodelers+ahead+in+and+save+your+day.%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22changed%22%0D%0A%0D%0A%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22form_build_id%22%0D%0A%0D%0Aform-3be806a87de9c6b86e79d558bd90eb53%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22form_id%22%0D%0A%0D%0Awebform_node_form%0D%0A%boundary%%0D%0AContent-Disposition:+form-data;+name=%22op%22%0D%0A%0D%0AGuardar%0D%0A%boundary%--%0D%0A HTTP/1.0" 404 7979 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
23.19.153.22 - - [05/Dec/2013:11:05:48 +0000] "GET /?q=node/1527411 HTTP/1.0" 404 7973 "http://clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1"
50.31.114.193 - - [05/Dec/2013:11:05:49 +0000] "GET /?q=node/1017699 HTTP/1.0" 404 7973 "http://clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
62.122.72.79 - - [05/Dec/2013:11:05:50 +0000] "GET /?q=node/add HTTP/1.0" 403 4709 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
23.19.153.22 - - [05/Dec/2013:11:05:50 +0000] "GET /?q=node/add HTTP/1.0" 403 4709 "http://clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1"
62.122.72.79 - - [05/Dec/2013:11:05:51 +0000] "GET /?q=user/register HTTP/1.0" 403 9635 "http://www.clinicainfantesagres.com/?q=node/add" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
89.72.83.1 - - [05/Dec/2013:11:05:52 +0000] "GET /?q=node/67351 HTTP/1.1" 404 7975 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
23.19.153.22 - - [05/Dec/2013:11:05:52 +0000] "GET /?q=user/register HTTP/1.0" 403 9631 "http://clinicainfantesagres.com/?q=node/add" "Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1"
89.72.83.1 - - [05/Dec/2013:11:05:54 +0000] "GET /?q=node/add HTTP/1.1" 403 4709 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
89.72.83.1 - - [05/Dec/2013:11:05:55 +0000] "GET /?q=user/register HTTP/1.1" 403 9633 "http://www.clinicainfantesagres.com/?q=node/add" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
89.72.83.1 - - [05/Dec/2013:11:05:57 +0000] "GET /?q=node/67351 HTTP/1.1" 404 7975 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
199.30.49.87 - - [05/Dec/2013:11:05:58 +0000] "GET /?q=node/1541090 HTTP/1.0" 404 7977 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
89.72.83.1 - - [05/Dec/2013:11:05:58 +0000] "GET /?q=user/register HTTP/1.1" 403 9633 "http://www.clinicainfantesagres.com/?q=node/67351" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
95.154.194.118 - - [05/Dec/2013:11:06:00 +0000] "GET /?q=node/287106 HTTP/1.1" 404 7977 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
91.188.117.247 - - [05/Dec/2013:11:06:00 +0000] "GET /?q=node/1557739 HTTP/1.1" 404 7979 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
199.30.49.87 - - [05/Dec/2013:11:06:01 +0000] "GET /?q=user HTTP/1.0" 200 10724 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
95.154.194.118 - - [05/Dec/2013:11:06:02 +0000] "GET /?q=node/add HTTP/1.1" 403 4709 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
91.188.117.247 - - [05/Dec/2013:11:06:02 +0000] "GET /?q=node/add HTTP/1.1" 403 4709 "http://www.clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
50.31.114.193 - - [05/Dec/2013:11:06:02 +0000] "GET /?q=user HTTP/1.0" 200 10720 "http://clinicainfantesagres.com/" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"
91.188.117.247 - - [05/Dec/2013:11:06:03 +0000] "GET /?q=user/register HTTP/1.1" 403 9633 "http://www.clinicainfantesagres.com/?q=node/add" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.72 Safari/537.36"

O Drupal instalado encontra-se a efectuar o log de todas estas tentativas de acesso na tabela "watchdog".

A minha questão é se é possivel desligar ou restringir o que o Watchdig regista na BD para evitar estes problemas.

Grato pela atenção
Abc

Comments

Viva, Solução rápida: -

ricardoamaro's picture

Viva,

Solução rápida:
- Desliga o módulo Database logging (Logs and records system events to the database.)

Solução eficaz mantendo logs:
- Desliga o módulo Database logging (Logs and records system events to the database.)
- Liga o módulo Syslog (Logs and records system events to syslog.)
desta segunda forma os registos vão para o ficheiro /var/log/syslog

Abraço,

Ricardo

Portugal

Group categories

Classificação

Group notifications

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: