全球主机交流论坛

 找回密码
 注册

QQ登录

只需一步,快速开始

CeraNetworks网络延迟测速工具IP归属甄别会员请立即修改密码
查看: 1314|回复: 9
打印 上一主题 下一主题

最近有没有人受到经常性的扫描爆破

[复制链接]
跳转到指定楼层
1#
发表于 2018-8-26 15:28:16 | 只看该作者 回帖奖励 |倒序浏览 |阅读模式
本帖最后由 chingwp 于 2018-8-26 15:33 编辑


手上几个站都有类似案例,肉鸡全是国内的,IP真人概率60%左右

140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/laobiao.php HTTP/1.1" 403 1316 "https://www.loc.010206.xyz/plus/laobiao.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=6022 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_js.php?aid=6022" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=9527 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_js.php?aid=9527" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=9191 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_js.php?aid=9191" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/mytag_js.php?aid=9999 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_js.php?aid=9999" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/ad_js.php?aid=8888 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/ad_js.php?aid=8888" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /admin/cache.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/admin/cache.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /data/config.inc.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/data/config.inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/backup.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/backup.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/myjs.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/myjs.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/bakup.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/bakup.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /admin/error.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/admin/error.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /images/cache.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/images/cache.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/mytag_j.php?aid=6022 HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/mytag_j.php?aid=6022" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /config.inc.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/config.inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /Sql.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/Sql.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /Thumb.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/Thumb.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /sdfg.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/sdfg.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /test.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/test.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /niucai.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/niucai.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /public/router.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/public/router.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/result.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/result.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /result.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/result.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/read.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/read.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/ran.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/ran.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /images/inc.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/images/inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /Thumbs.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/Thumbs.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /flye.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/flye.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /cache/asd.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/cache/asd.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /mb.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/mb.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /as.asp HTTP/1.1" 502 568 "https://www.loc.010206.xyz/as.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /plus/date.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/date.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /plus/moon.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/plus/moon.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /da.php HTTP/1.1" 502 568 "https://www.loc.010206.xyz/da.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
推荐
发表于 2018-8-26 15:28:56 来自手机 | 只看该作者
站楼,自古一楼出人才
3#
 楼主| 发表于 2018-8-26 15:29:44 | 只看该作者
www.suhu.me 发表于 2018-8-26 15:28
站楼,自古一楼出人才

自古一楼不看版规吗
4#
发表于 2018-8-26 15:31:07 | 只看该作者
chingwp 发表于 2018-8-26 15:29
自古一楼不看版规吗

尴尬,得去恶补一下了
5#
发表于 2018-8-26 15:32:50 | 只看该作者
提示: 作者被禁止或删除 内容自动屏蔽
6#
 楼主| 发表于 2018-8-26 15:33:40 | 只看该作者
bob1987 发表于 2018-8-26 15:32
批量扫,你只要没被上大马,或者你的网址程序没有那种漏洞php文件,都不用怕 ...

肉鸡多并发高啊,我都被扫描扫挂了哈哈哈
7#
发表于 2018-8-26 15:35:04 | 只看该作者
  难道小鸡不是无时无刻都在被扫吗
8#
 楼主| 发表于 2018-8-26 15:36:16 | 只看该作者
吃我咸鱼突刺 发表于 2018-8-26 15:35
难道小鸡不是无时无刻都在被扫吗

小鸡是小鸡,站点是站点啊
9#
发表于 2018-8-26 15:39:03 | 只看该作者
chingwp 发表于 2018-8-26 15:36
小鸡是小鸡,站点是站点啊

都一样~ 无时无刻都在被扫~
10#
发表于 2018-8-26 17:13:30 | 只看该作者
开了秘钥随便爆
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Archiver|手机版|小黑屋|全球主机交流论坛

GMT+8, 2026-1-16 06:01 , Processed in 0.798004 second(s), 11 queries , Gzip On, MemCache On.

Powered by Discuz! X3.4

© 2001-2023 Discuz! Team.

快速回复 返回顶部 返回列表