---
title: "Faille de securité phpmyadminxxxx via des scans"
url: https://www.cyber-neurones.org/2021/10/faille-de-securite-phpmyadminxxxx-via-des-scans/
date: 2021-10-13
modified: 2021-10-13
author: "Frederic"
description: "Voici un petit exemple de scan : 27.120.170.139 - - [13/Oct/2021:11:49:46 +0200] \"GET /phpmyadmin2016/index.php?lang=en HTTP/1.1\" 302 403 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36\"..."
categories:
  - "Sécurité"
tags:
  - "iptables"
word_count: 56
---

# Faille de securité phpmyadminxxxx via des scans

Voici un petit exemple de scan :
27.120.170.139 - - [13/Oct/2021:11:49:46 +0200] "GET /phpmyadmin2016/index.php?lang=en HTTP/1.1" 302 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36"

Il faut lire l'article : [https://isc.sans.edu/forums/diary/Increase+of+phpMyAdmin+scans/22688/ .](https://isc.sans.edu/forums/diary/Increase+of+phpMyAdmin+scans/22688/)

J'ai donc bloqué l'IP :
# iptables -A INPUT -s 27.120.170.139 -j DROP
# /usr/sbin/iptables-save > /etc/iptables/rules.v4

A suivre.