最烦那种所谓垃圾黑客

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

这是一个创建于 5081 天前的主题，其中的信息可能已经有所发展或是发生改变。

最近我的服务器访问日志里一直有大量的诸如以下的的访问记录:

估计是使用了什么黑客工具，而工具里有自带user-agent：zmEu @ WhiteHat Team - www.whitehat.ro

我直接通过user-agent 就封了，他还是不断的一直在试图探出诸如Php mysql admin这样的访问接口。。全不返回的403 还是一直再试。。。。。。。。。。。无语了

老在日志里看到这样的东西很不爽。。大家可以看看自己web服务器的访问记录里也有诸如: Made by ZmEu @ WhiteHat Team - www.whitehat.ro的？

IP:[ 88.34.113.33 ] - - "GET //mysqladmin/ HTTP/1.1" 403 169 "-" HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] 26/Dec/2010:19:51:32 +0800 ]

IP:[ 58.177.206.19 ] - - "GET //phpmyadmin/ HTTP/1.1" 403 169 REF:[ - ] HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] [ 28/Dec/2010:09:31:05 +0800 ]

IP:[ 58.177.206.19 ] - - "GET //PHPmyadmin HTTP/1.1" 403 169 REF:[ - ] HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] [ 28/Dec/2010:09:31:09 +0800 ]

IP:[ 58.177.206.19 ] - - "GET //admin/ HTTP/1.1" 403 169 REF:[ - ] HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] [ 28/Dec/2010:09:31:24 +0800 ]

IP:[ 58.177.206.19 ] - - "GET //mysql/ HTTP/1.1" 403 169 REF:[ - ] HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] [ 28/Dec/2010:09:31:24 +0800 ]

HTTP

whitehat

6 条回复 • 1970-01-01 08:00:00 +08:00