最近有没有人受到经常性的扫描爆破

chingwp · 发表于 2018-8-26 15:28:16

本帖最后由 chingwp 于 2018-8-26 15:33 编辑

手上几个站都有类似案例，肉鸡全是国内的，IP真人概率60%左右

140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/laobiao.php HTTP/1.1" 403 1316 "https://www.loc.010206.xyz/plus/laobiao.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=6022 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_js.php?aid=6022" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=9527 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_js.php?aid=9527" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=9191 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_js.php?aid=9191" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/mytag_js.php?aid=9999 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_js.php?aid=9999" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/ad_js.php?aid=8888 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/ad_js.php?aid=8888" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /admin/cache.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/admin/cache.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /data/config.inc.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/data/config.inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/backup.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/backup.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/myjs.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/myjs.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/bakup.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/bakup.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /admin/error.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/admin/error.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /images/cache.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/images/cache.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/mytag_j.php?aid=6022 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_j.php?aid=6022" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /config.inc.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/config.inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /Sql.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/Sql.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /Thumb.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/Thumb.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /sdfg.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/sdfg.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /test.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/test.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /niucai.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/niucai.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /public/router.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/public/router.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/result.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/result.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /result.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/result.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/read.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/read.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/ran.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/ran.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /images/inc.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/images/inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /Thumbs.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/Thumbs.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /flye.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/flye.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /cache/asd.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/cache/asd.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /mb.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/mb.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /as.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/as.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /plus/date.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/date.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /plus/moon.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/moon.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /da.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/da.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"

www.suhu.me · 发表于 2018-8-26 15:28:56

站楼，自古一楼出人才

已注销账号 · 发表于 2018-8-26 17:13:30

开了秘钥随便爆

吃我咸鱼突刺 · 发表于 2018-8-26 15:39:03

chingwp 发表于 2018-8-26 15:36
小鸡是小鸡，站点是站点啊

都一样~ 无时无刻都在被扫~

chingwp · 发表于 2018-8-26 15:36:16

吃我咸鱼突刺发表于 2018-8-26 15:35
难道小鸡不是无时无刻都在被扫吗

小鸡是小鸡，站点是站点啊

吃我咸鱼突刺 · 发表于 2018-8-26 15:35:04

难道小鸡不是无时无刻都在被扫吗

chingwp · 发表于 2018-8-26 15:33:40

bob1987 发表于 2018-8-26 15:32
批量扫，你只要没被上大马，或者你的网址程序没有那种漏洞php文件，都不用怕 ...

肉鸡多并发高啊，我都被扫描扫挂了哈哈哈

bob1987 · 发表于 2018-8-26 15:32:50

提示: 作者被禁止或删除内容自动屏蔽

www.suhu.me · 发表于 2018-8-26 15:31:07

chingwp 发表于 2018-8-26 15:29
自古一楼不看版规吗

尴尬，得去恶补一下了

chingwp · 发表于 2018-8-26 15:29:44

www.suhu.me 发表于 2018-8-26 15:28
站楼，自古一楼出人才

自古一楼不看版规吗

		自动登录	找回密码
密码			注册

bob1987 bob1987 当前离线积分 5371	5^# 发表于 2018-8-26 15:32:50 \| 只看该作者提示: 作者被禁止或删除内容自动屏蔽
bob1987 bob1987 当前离线积分 5371
	回复支持反对举报

最近有没有人受到经常性的扫描爆破

浏览过的版块