最近有没有人受到经常性的扫描爆破

chingwp

本帖最后由 chingwp 于 2018-8-26 15:33 编辑

​
手上几个站都有类似案例，肉鸡全是国内的，IP真人概率60%左右

140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/laobiao.php HTTP/1.1" 403 1316 "https://www.hostloc.com/plus/laobiao.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=6022 HTTP/1.1" 502 568 "https://www.hostloc.com/plus/mytag_js.php?aid=6022" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=9527 HTTP/1.1" 502 568 "https://www.hostloc.com/plus/mytag_js.php?aid=9527" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:17 +0800] "POST /plus/mytag_js.php?aid=9191 HTTP/1.1" 502 568 "https://www.hostloc.com/plus/mytag_js.php?aid=9191" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/mytag_js.php?aid=9999 HTTP/1.1" 502 568 "https://www.hostloc.com/plus/mytag_js.php?aid=9999" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/ad_js.php?aid=8888 HTTP/1.1" 502 568 "https://www.hostloc.com/plus/ad_js.php?aid=8888" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /admin/cache.asp HTTP/1.1" 502 568 "https://www.hostloc.com/admin/cache.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /data/config.inc.php HTTP/1.1" 502 568 "https://www.hostloc.com/data/config.inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/backup.php HTTP/1.1" 502 568 "https://www.hostloc.com/plus/backup.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/myjs.php HTTP/1.1" 502 568 "https://www.hostloc.com/plus/myjs.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/bakup.php HTTP/1.1" 502 568 "https://www.hostloc.com/plus/bakup.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /admin/error.asp HTTP/1.1" 502 568 "https://www.hostloc.com/admin/error.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /images/cache.asp HTTP/1.1" 502 568 "https://www.hostloc.com/images/cache.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/mytag_j.php?aid=6022 HTTP/1.1" 502 568 "https://www.hostloc.com/plus/mytag_j.php?aid=6022" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /config.inc.php HTTP/1.1" 502 568 "https://www.hostloc.com/config.inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /Sql.asp HTTP/1.1" 502 568 "https://www.hostloc.com/Sql.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /Thumb.asp HTTP/1.1" 502 568 "https://www.hostloc.com/Thumb.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /sdfg.asp HTTP/1.1" 502 568 "https://www.hostloc.com/sdfg.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /test.asp HTTP/1.1" 502 568 "https://www.hostloc.com/test.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /niucai.asp HTTP/1.1" 502 568 "https://www.hostloc.com/niucai.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /public/router.php HTTP/1.1" 502 568 "https://www.hostloc.com/public/router.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/result.php HTTP/1.1" 502 568 "https://www.hostloc.com/plus/result.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /result.php HTTP/1.1" 502 568 "https://www.hostloc.com/result.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/read.php HTTP/1.1" 502 568 "https://www.hostloc.com/plus/read.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:18 +0800] "POST /plus/ran.php HTTP/1.1" 502 568 "https://www.hostloc.com/plus/ran.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /images/inc.php HTTP/1.1" 502 568 "https://www.hostloc.com/images/inc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /Thumbs.php HTTP/1.1" 502 568 "https://www.hostloc.com/Thumbs.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /flye.php HTTP/1.1" 502 568 "https://www.hostloc.com/flye.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /cache/asd.php HTTP/1.1" 502 568 "https://www.hostloc.com/cache/asd.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /mb.php HTTP/1.1" 502 568 "https://www.hostloc.com/mb.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /as.asp HTTP/1.1" 502 568 "https://www.hostloc.com/as.asp" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /plus/date.php HTTP/1.1" 502 568 "https://www.hostloc.com/plus/date.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /plus/moon.php HTTP/1.1" 502 568 "https://www.hostloc.com/plus/moon.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"
140.143.150.46 - - [26/Aug/2018:15:03:19 +0800] "POST /da.php HTTP/1.1" 502 568 "https://www.hostloc.com/da.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"

www.suhu.me

站楼，自古一楼出人才

chingwp

www.suhu.me 发表于 2018-8-26 15:28

站楼，自古一楼出人才
自古一楼不看版规吗

www.suhu.me

chingwp 发表于 2018-8-26 15:29

自古一楼不看版规吗
尴尬，得去恶补一下了

bob1987

bob1987 发表于 2018-8-26 15:32

批量扫，你只要没被上大马，或者你的网址程序没有那种漏洞php文件，都不用怕 ...
肉鸡多并发高啊，我都被扫描扫挂了哈哈哈

chingwp

  难道小鸡不是无时无刻都在被扫吗

吃我咸鱼突刺

吃我咸鱼突刺 发表于 2018-8-26 15:35

难道小鸡不是无时无刻都在被扫吗
小鸡是小鸡，站点是站点啊

chingwp

chingwp 发表于 2018-8-26 15:36

小鸡是小鸡，站点是站点啊
都一样~ 无时无刻都在被扫~

吃我咸鱼突刺

开了秘钥随便爆