黑客嗅探web系统漏洞实例

入门级的黑客攻击也实在太…了

下面是今天系统error日志里的全部内容,/html/是站点的根目录,黑客就机械的在这里面找他想要的文件,而且不只一个人,好几个ip都在这么干;看来这一招的应用很广泛;(这些ip之中或许有肉鸡有存在)。

前几天的日志也是一样,跟这个差不多。所以说,以后文件命名要变态一点,尤其是数据库文件。不过这里是php+mysql的,没有数据库文件。

当然最好的方式,是使用rewrite,不允许通过web访问重要目录。就像现在使用的老外的主机,默认加入了.htaccess,很专业、相当人性化。

[Sun May 09 05:37:09 2010] [error] [client 202.105.176.238] File does not exist: /html/pomimirserver.rar
[Sun May 09 05:37:09 2010] [error] [client 202.105.176.238] File does not exist: /html/mirserver.rar
[Sun May 09 05:37:10 2010] [error] [client 202.105.176.238] File does not exist: /html/mirserver.rar
[Sun May 09 05:37:10 2010] [error] [client 202.105.176.238] File does not exist: /html/phtbCmirserver.rar
[Sun May 09 05:37:11 2010] [error] [client 202.105.176.238] File does not exist: /html/Cmirserver.rar
[Sun May 09 05:37:11 2010] [error] [client 202.105.176.238] File does not exist: /html/Cmirserver.rar
[Sun May 09 05:37:12 2010] [error] [client 202.105.176.238] File does not exist: /html/kscgwolserver.rar
[Sun May 09 05:37:12 2010] [error] [client 202.105.176.238] File does not exist: /html/wolserver.rar
[Sun May 09 05:37:13 2010] [error] [client 202.105.176.238] File does not exist: /html/wolserver.rar
[Sun May 09 07:58:51 2010] [error] [client 219.142.121.211] File does not exist: /html/cert
[Sun May 09 10:01:43 2010] [error] [client 98.158.20.236] File does not exist: /html/feed
[Sun May 09 15:13:48 2010] [error] [client 125.109.60.246] File does not exist: /html/slujmirserver.rar
[Sun May 09 15:13:48 2010] [error] [client 125.109.60.246] File does not exist: /html/mirserver.rar
[Sun May 09 15:13:49 2010] [error] [client 125.109.60.246] File does not exist: /html/mirserver.rar
[Sun May 09 16:22:42 2010] [error] [client 123.6.107.41] File does not exist: /html/mjdzFCKeditor
[Sun May 09 16:22:43 2010] [error] [client 123.6.107.41] File does not exist: /html/FCKeditor
[Sun May 09 16:22:43 2010] [error] [client 123.6.107.41] File does not exist: /html/FCKeditor
[Sun May 09 17:10:32 2010] [error] [client 61.147.116.117] File does not exist: /html/nfdeUserReg.asp
[Sun May 09 17:10:32 2010] [error] [client 61.147.116.117] File does not exist: /html/UserReg.asp
[Sun May 09 17:10:32 2010] [error] [client 61.147.116.117] File does not exist: /html/UserReg.asp
[Sun May 09 17:10:33 2010] [error] [client 61.147.116.117] File does not exist: /html/rugqupfile_flash.asp
[Sun May 09 17:10:33 2010] [error] [client 61.147.116.117] File does not exist: /html/upfile_flash.asp
[Sun May 09 17:10:34 2010] [error] [client 61.147.116.117] File does not exist: /html/upfile_flash.asp
[Sun May 09 17:10:34 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:37 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:37 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:38 2010] [error] [client 61.147.116.117] File does not exist: /html/admins
[Sun May 09 17:10:40 2010] [error] [client 61.147.116.117] File does not exist: /html/admins
[Sun May 09 17:10:41 2010] [error] [client 61.147.116.117] File does not exist: /html/admins
[Sun May 09 17:10:41 2010] [error] [client 61.147.116.117] File does not exist: /html/include
[Sun May 09 17:10:44 2010] [error] [client 61.147.116.117] File does not exist: /html/include
[Sun May 09 17:10:44 2010] [error] [client 61.147.116.117] File does not exist: /html/include
[Sun May 09 17:10:45 2010] [error] [client 61.147.116.117] File does not exist: /html/lavery_Edit
[Sun May 09 17:10:45 2010] [error] [client 61.147.116.117] File does not exist: /html/lavery_Edit
[Sun May 09 17:10:45 2010] [error] [client 61.147.116.117] File does not exist: /html/lavery_Edit
[Sun May 09 17:10:46 2010] [error] [client 61.147.116.117] File does not exist: /html/CmsEditor
[Sun May 09 17:10:46 2010] [error] [client 61.147.116.117] File does not exist: /html/CmsEditor
[Sun May 09 17:10:47 2010] [error] [client 61.147.116.117] File does not exist: /html/CmsEditor
[Sun May 09 17:10:47 2010] [error] [client 61.147.116.117] File does not exist: /html/newsadmin
[Sun May 09 17:10:48 2010] [error] [client 61.147.116.117] File does not exist: /html/newsadmin
[Sun May 09 17:10:48 2010] [error] [client 61.147.116.117] File does not exist: /html/newsadmin
[Sun May 09 17:10:48 2010] [error] [client 61.147.116.117] File does not exist: /html/asp_bin
[Sun May 09 17:10:49 2010] [error] [client 61.147.116.117] File does not exist: /html/asp_bin
[Sun May 09 17:10:49 2010] [error] [client 61.147.116.117] File does not exist: /html/asp_bin
[Sun May 09 17:10:50 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:50 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:51 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:51 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:10:51 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:10:52 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:10:52 2010] [error] [client 61.147.116.117] File does not exist: /html/webeditor
[Sun May 09 17:10:53 2010] [error] [client 61.147.116.117] File does not exist: /html/webeditor
[Sun May 09 17:10:53 2010] [error] [client 61.147.116.117] File does not exist: /html/webeditor
[Sun May 09 17:10:54 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:54 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:54 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:55 2010] [error] [client 61.147.116.117] File does not exist: /html/ewindoweditor
[Sun May 09 17:10:55 2010] [error] [client 61.147.116.117] File does not exist: /html/ewindoweditor
[Sun May 09 17:10:56 2010] [error] [client 61.147.116.117] File does not exist: /html/ewindoweditor
[Sun May 09 17:10:56 2010] [error] [client 61.147.116.117] File does not exist: /html/eWebEditor
[Sun May 09 17:10:57 2010] [error] [client 61.147.116.117] File does not exist: /html/eWebEditor
[Sun May 09 17:10:57 2010] [error] [client 61.147.116.117] File does not exist: /html/eWebEditor
[Sun May 09 17:10:57 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:58 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:58 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:10:59 2010] [error] [client 61.147.116.117] File does not exist: /html/WebEdit
[Sun May 09 17:10:59 2010] [error] [client 61.147.116.117] File does not exist: /html/WebEdit
[Sun May 09 17:11:00 2010] [error] [client 61.147.116.117] File does not exist: /html/WebEdit
[Sun May 09 17:11:00 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:00 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:01 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:01 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:11:02 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:11:02 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:11:03 2010] [error] [client 61.147.116.117] File does not exist: /html/edit
[Sun May 09 17:11:03 2010] [error] [client 61.147.116.117] File does not exist: /html/edit
[Sun May 09 17:11:03 2010] [error] [client 61.147.116.117] File does not exist: /html/edit
[Sun May 09 17:11:04 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:04 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:05 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:05 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:11:06 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:11:06 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:11:06 2010] [error] [client 61.147.116.117] File does not exist: /html/editor
[Sun May 09 17:11:07 2010] [error] [client 61.147.116.117] File does not exist: /html/editor
[Sun May 09 17:11:07 2010] [error] [client 61.147.116.117] File does not exist: /html/editor
[Sun May 09 17:11:08 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:08 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:09 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:09 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:11:10 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:11:10 2010] [error] [client 61.147.116.117] File does not exist: /html/manage
[Sun May 09 17:11:10 2010] [error] [client 61.147.116.117] File does not exist: /html/eWeb
[Sun May 09 17:11:11 2010] [error] [client 61.147.116.117] File does not exist: /html/eWeb
[Sun May 09 17:11:11 2010] [error] [client 61.147.116.117] File does not exist: /html/eWeb
[Sun May 09 17:11:12 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:12 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:13 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:13 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:13 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:14 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:14 2010] [error] [client 61.147.116.117] File does not exist: /html/htmledit
[Sun May 09 17:11:15 2010] [error] [client 61.147.116.117] File does not exist: /html/htmledit
[Sun May 09 17:11:15 2010] [error] [client 61.147.116.117] File does not exist: /html/htmledit
[Sun May 09 17:11:16 2010] [error] [client 61.147.116.117] File does not exist: /html/htmleditor
[Sun May 09 17:11:18 2010] [error] [client 61.147.116.117] File does not exist: /html/htmleditor
[Sun May 09 17:11:18 2010] [error] [client 61.147.116.117] File does not exist: /html/htmleditor
[Sun May 09 17:11:19 2010] [error] [client 61.147.116.117] File does not exist: /html/data
[Sun May 09 17:11:21 2010] [error] [client 61.147.116.117] File does not exist: /html/data
[Sun May 09 17:11:21 2010] [error] [client 61.147.116.117] File does not exist: /html/data
[Sun May 09 17:11:22 2010] [error] [client 61.147.116.117] File does not exist: /html/admin888
[Sun May 09 17:11:22 2010] [error] [client 61.147.116.117] File does not exist: /html/admin888
[Sun May 09 17:11:23 2010] [error] [client 61.147.116.117] File does not exist: /html/admin888
[Sun May 09 17:11:23 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:24 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:24 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:24 2010] [error] [client 61.147.116.117] File does not exist: /html/webadmin
[Sun May 09 17:11:25 2010] [error] [client 61.147.116.117] File does not exist: /html/webadmin
[Sun May 09 17:11:25 2010] [error] [client 61.147.116.117] File does not exist: /html/webadmin
[Sun May 09 17:11:26 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:26 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:26 2010] [error] [client 61.147.116.117] File does not exist: /html/admin
[Sun May 09 17:11:27 2010] [error] [client 61.147.116.117] File does not exist: /html/FCKeditor
[Sun May 09 17:11:27 2010] [error] [client 61.147.116.117] File does not exist: /html/FCKeditor
[Sun May 09 17:11:28 2010] [error] [client 61.147.116.117] File does not exist: /html/FCKeditor
[Mon May 10 03:30:04 2010] [error] [client 58.62.173.140] File does not exist: /html/cert
[Mon May 10 09:41:06 2010] [error] [client 222.89.103.94] File does not exist: /html/jhpcmirserver.rar
[Mon May 10 09:41:07 2010] [error] [client 222.89.103.94] File does not exist: /html/mirserver.rar
[Mon May 10 09:41:07 2010] [error] [client 222.89.103.94] File does not exist: /html/mirserver.rar
[Mon May 10 09:41:08 2010] [error] [client 222.89.103.94] File does not exist: /html/xyyzmsmir_net.mdb
[Mon May 10 09:41:09 2010] [error] [client 222.89.103.94] File does not exist: /html/msmir_net.mdb
[Mon May 10 09:41:09 2010] [error] [client 222.89.103.94] File does not exist: /html/msmir_net.mdb
[Mon May 10 10:07:44 2010] [error] [client 98.158.20.229] File does not exist: /html/feed
[Mon May 10 14:57:07 2010] [error] [client 121.14.151.105] File does not exist: /html/zdzosave.asp
[Mon May 10 14:57:07 2010] [error] [client 121.14.151.105] File does not exist: /html/save.asp
[Mon May 10 14:57:08 2010] [error] [client 121.14.151.105] File does not exist: /html/save.asp
[Mon May 10 14:57:08 2010] [error] [client 121.14.151.105] File does not exist: /html/uonvSave.Asp
[Mon May 10 14:57:09 2010] [error] [client 121.14.151.105] File does not exist: /html/Save.Asp
[Mon May 10 14:57:09 2010] [error] [client 121.14.151.105] File does not exist: /html/Save.Asp
[Tue May 11 00:05:00 2010] [error] [client 122.224.52.187] File does not exist: /html/fxtvsave.asp
[Tue May 11 00:05:00 2010] [error] [client 122.224.52.187] File does not exist: /html/save.asp
[Tue May 11 00:05:01 2010] [error] [client 122.224.52.187] File does not exist: /html/save.asp
[Tue May 11 00:05:01 2010] [error] [client 122.224.52.187] File does not exist: /html/gcnhSave.Asp
[Tue May 11 00:05:02 2010] [error] [client 122.224.52.187] File does not exist: /html/Save.Asp
[Tue May 11 00:05:02 2010] [error] [client 122.224.52.187] File does not exist: /html/Save.Asp
[Tue May 11 01:51:25 2010] [error] [client 125.109.224.138] File does not exist: /html/zrpvmirserver.rar
[Tue May 11 01:51:25 2010] [error] [client 125.109.224.138] File does not exist: /html/mirserver.rar
[Tue May 11 01:51:26 2010] [error] [client 125.109.224.138] File does not exist: /html/mirserver.rar




coded by nessus
发表评论?

2 条评论。

  1. MySQL是有数据库文件的。。

    feng 回复:

    我的主机上没有数据库文件的,数据库与web分别在不同服务器上的,而且数据库服务器并不提供web或ftp等方式访问的。

    文中所说“不过这里是php+mysql的,没有数据库文件”,这里主要相对使用access数据库的站点而言,access数据库一般就直接在web目录里,所以很多人猜测它的路径与文件名,就像文中所显示web日志中的这样一行“[Mon May 10 09:41:08 2010] [error] [client 222.89.103.94] File does not exist: /html/xyyzmsmir_net.mdb”

发表评论