立即注册  找回密码
 立即注册
CeraNetworksBGVM服务器主机交流会员请立即修改密码Sharktech防护
查看: 108|回复: 9

最近有没有人受到经常性的扫描爆破

[复制链接]

最近有没有人受到经常性的扫描爆破

[复制链接]

34

主题

184

回帖

576

积分

高级会员

积分
576
chingwp

34

主题

184

回帖

576

积分

高级会员

积分
576
2018-8-26 15:28:16 | 显示全部楼层 |阅读模式
本帖最后由 chingwp 于 2018-8-26 15:33 编辑


手上几个站都有类似案例,肉鸡全是国内的,IP真人概率60%左右

140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/laobiao.php HTTP/1.1" 403 1316 "https://www.hs2v.com/plus/laobiao.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=6022 HTTP/1.1" 502 568 "https://www.hs2v.com/plus/mytag_js.php?aid=6022" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=9527 HTTP/1.1" 502 568 "https://www.hs2v.com/plus/mytag_js.php?aid=9527" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=9191 HTTP/1.1" 502 568 "https://www.hs2v.com/plus/mytag_js.php?aid=9191" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/mytag_js.php?aid=9999 HTTP/1.1" 502 568 "https://www.hs2v.com/plus/mytag_js.php?aid=9999" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/ad_js.php?aid=8888 HTTP/1.1" 502 568 "https://www.hs2v.com/plus/ad_js.php?aid=8888" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /admin/cache.asp HTTP/1.1" 502 568 "https://www.hs2v.com/admin/cache.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /data/config.inc.php HTTP/1.1" 502 568 "https://www.hs2v.com/data/config.inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/backup.php HTTP/1.1" 502 568 "https://www.hs2v.com/plus/backup.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/myjs.php HTTP/1.1" 502 568 "https://www.hs2v.com/plus/myjs.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/bakup.php HTTP/1.1" 502 568 "https://www.hs2v.com/plus/bakup.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /admin/error.asp HTTP/1.1" 502 568 "https://www.hs2v.com/admin/error.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /images/cache.asp HTTP/1.1" 502 568 "https://www.hs2v.com/images/cache.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/mytag_j.php?aid=6022 HTTP/1.1" 502 568 "https://www.hs2v.com/plus/mytag_j.php?aid=6022" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /config.inc.php HTTP/1.1" 502 568 "https://www.hs2v.com/config.inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /Sql.asp HTTP/1.1" 502 568 "https://www.hs2v.com/Sql.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /Thumb.asp HTTP/1.1" 502 568 "https://www.hs2v.com/Thumb.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /sdfg.asp HTTP/1.1" 502 568 "https://www.hs2v.com/sdfg.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /test.asp HTTP/1.1" 502 568 "https://www.hs2v.com/test.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /niucai.asp HTTP/1.1" 502 568 "https://www.hs2v.com/niucai.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /public/router.php HTTP/1.1" 502 568 "https://www.hs2v.com/public/router.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/result.php HTTP/1.1" 502 568 "https://www.hs2v.com/plus/result.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /result.php HTTP/1.1" 502 568 "https://www.hs2v.com/result.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/read.php HTTP/1.1" 502 568 "https://www.hs2v.com/plus/read.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/ran.php HTTP/1.1" 502 568 "https://www.hs2v.com/plus/ran.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /images/inc.php HTTP/1.1" 502 568 "https://www.hs2v.com/images/inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /Thumbs.php HTTP/1.1" 502 568 "https://www.hs2v.com/Thumbs.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /flye.php HTTP/1.1" 502 568 "https://www.hs2v.com/flye.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /cache/asd.php HTTP/1.1" 502 568 "https://www.hs2v.com/cache/asd.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /mb.php HTTP/1.1" 502 568 "https://www.hs2v.com/mb.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /as.asp HTTP/1.1" 502 568 "https://www.hs2v.com/as.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /plus/date.php HTTP/1.1" 502 568 "https://www.hs2v.com/plus/date.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /plus/moon.php HTTP/1.1" 502 568 "https://www.hs2v.com/plus/moon.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /da.php HTTP/1.1" 502 568 "https://www.hs2v.com/da.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
回复

使用道具 举报

5

主题

37

回帖

161

积分

注册会员

积分
161
www.suhu.me

5

主题

37

回帖

161

积分

注册会员

积分
161
2018-8-26 15:28:56 | 显示全部楼层
站楼,自古一楼出人才
回复

使用道具 举报

34

主题

184

回帖

576

积分

高级会员

积分
576
chingwp 楼主

34

主题

184

回帖

576

积分

高级会员

积分
576
2018-8-26 15:29:44 | 显示全部楼层

www.suhu.me 发表于 2018-8-26 15:28

站楼,自古一楼出人才

自古一楼不看版规吗
回复

使用道具 举报

5

主题

37

回帖

161

积分

注册会员

积分
161
www.suhu.me

5

主题

37

回帖

161

积分

注册会员

积分
161
2018-8-26 15:28:00 | 显示全部楼层

chingwp 发表于 2018-8-26 15:29

自古一楼不看版规吗

尴尬,得去恶补一下了
回复

使用道具 举报

133

主题

1108

回帖

3912

积分

论坛元老

积分
3912
bob1987

133

主题

1108

回帖

3912

积分

论坛元老

积分
3912
2018-8-26 15:31:07 | 显示全部楼层
批量扫,你只要没被上大马,或者你的网址程序没有那种漏洞php文件,都不用怕
回复

使用道具 举报

34

主题

184

回帖

576

积分

高级会员

积分
576
chingwp 楼主

34

主题

184

回帖

576

积分

高级会员

积分
576
2018-8-26 15:29:00 | 显示全部楼层

bob1987 发表于 2018-8-26 15:32

批量扫,你只要没被上大马,或者你的网址程序没有那种漏洞php文件,都不用怕 ...

肉鸡多并发高啊,我都被扫描扫挂了哈哈哈
回复

使用道具 举报

108

主题

315

回帖

2090

积分

金牌会员

积分
2090
吃我咸鱼突刺

108

主题

315

回帖

2090

积分

金牌会员

积分
2090
2018-8-26 15:32:50 | 显示全部楼层


  难道小鸡不是无时无刻都在被扫吗
回复

使用道具 举报

34

主题

184

回帖

576

积分

高级会员

积分
576
chingwp 楼主

34

主题

184

回帖

576

积分

高级会员

积分
576
2018-8-26 15:33:40 | 显示全部楼层

吃我咸鱼突刺 发表于 2018-8-26 15:35

难道小鸡不是无时无刻都在被扫吗

小鸡是小鸡,站点是站点啊
回复

使用道具 举报

108

主题

315

回帖

2090

积分

金牌会员

积分
2090
吃我咸鱼突刺

108

主题

315

回帖

2090

积分

金牌会员

积分
2090
2018-8-26 15:32:00 | 显示全部楼层

chingwp 发表于 2018-8-26 15:36

小鸡是小鸡,站点是站点啊

都一样~ 无时无刻都在被扫~
回复

使用道具 举报

11

主题

405

回帖

1323

积分

金牌会员

积分
1323
已注销账号

11

主题

405

回帖

1323

积分

金牌会员

积分
1323
2018-8-26 15:35:04 | 显示全部楼层
开了秘钥随便爆


回复

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

Archiver|小黑屋|HS2V主机综合交流论坛

GMT+8, 2024-12-23 04:55 , Processed in 0.024920 second(s), 3 queries , Gzip On, Redis On.

Powered by Discuz! X3.5

© 2001-2024 Discuz! Team.

快速回复 返回顶部 返回列表