我想知道单独对一个IP设置htaccess有必要嘛..但是真的看的日志心烦..

2012-04-01 18:39:01 +08:00
 soulteary
IP:220.181.158.105
留的邮箱:hacker@hacker.org

截取几个蛋疼的记录...我真的很无语.
无语原因呢,看了一下,还在用工具继续爬..小小的wordpress表示鸭梨很大.各种dede等路径..
各种test路径,各种asp......

220.181.158.105 - - [01/Apr/2012:17:23:32 +0800] "PUT /jsky_web_scanner_test_file.txt HTTP/1.1" 404 223915 "http://promiseforever.com:80" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)"

220.181.158.105 - - [01/Apr/2012:17:24:22 +0800] "GET /dede/login.php?gotopage=%22%3E%3Cscript%3Eeval(String.fromCharCode(80,101,114,115,105,115,116,101,110,99,101,95,100,97,116,97,61,39,34,62,60,115,99,114,105,112,116,62,97,108,101,114,116,40,47,120,115,115,32,114,111,111,116,107,105,116,33,47,41,60,47,115,99,114,105,112,116,62,60,120,61,34,39,59,32,13,10,118,97,114,32,100,97,116,101,61,110,101,119,32,68,97,116,101,40,41,59,13,10,118,97,114,32,101,120,112,105,114,101,68,97,121,115,61,51,54,53,59,32,13,10,100,97,116,101,46,115,101,116,84,105,109,101,40,100,97,116,101,46,103,101,116,84,105,109,101,40,41,43,101,120,112,105,114,101,68,97,121,115,42,50,52,42,51,54,48,48,42,49,48,48,48,41,59,13,10,100,111,99,117,109,101,110,116,46,99,111,111,107,105,101,61,39,103,111,116,111,112,97,103,101,61,39,43,80,101,114,115,105,115,116,101,110,99,101,95,100,97,116,97,43,39,59,101,120,112,105,114,101,115,61,39,43,100,97,116,101,46,116,111,71,77,84,83,116,114,105,110,103,40,41,59,13,10,97,108,101,114,116,40,39,88,115,115,32,82,111,111,116,107,105,116,32,73,110,115,116,97,108,108,32,83,117,99,99,101,115,115,102,117,108,32,33,33,33,33,39,41,59))%3C/script%3E%3Cx=%22 HTTP/1.0" 404 223892 "http://promiseforever.com:80" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)"

220.181.158.105 - - [01/Apr/2012:17:23:32 +0800] "GET /index.html.d?s=%E9%8E%BC%E6%BB%85%E5%82%A8...%3Cscript%3Ealert(42873)%3C/script%3E HTTP/1.1" 404 223915 "http://promiseforever.com:80/index.html.d?s=%E9%8E%BC%E6%BB%85%E5%82%A8...<script>alert(42873)</script>" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)"


220.181.158.105 - - [01/Apr/2012:18:21:29 +0800] "GET /topics/about/celive/js/include.php?departmentid=webscan'&cmseasylive=1 HTTP/1.0" 404 223892

220.181.158.105 - - [01/Apr/2012:18:21:34 +0800] "GET /topics/about/CompVisualizeBig.asp?id=-1%20union%20select%201,username%2bpassword,3,4,5%20from%20admin HTTP/1.0" 404 223892 "http://promiseforever.com:80/topics/about" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)"
4145 次点击
所在节点    问与答
5 条回复
soulteary
2012-04-01 18:49:28 +08:00
btw, 麒麟厍人 or snmr_com 如果也在V2EX的话, 不妨mail me.
sobigfish
2012-04-01 19:43:52 +08:00
ban他吧,神经病菜鸟么,真要黑有这么玩的么
soulteary
2012-04-01 22:04:56 +08:00
@sobigfish 搭车问下..不能arp的情况下..是不是就得不到远程mac地址了..
soulteary
2012-04-01 22:10:15 +08:00
@sobigfish ftp也不能=.=
TONYHEAD
2012-04-03 00:10:26 +08:00
@soulteary 厄?看到个老妖怪的名字。

这是一个专为移动设备优化的页面(即为了让你能够在 Google 搜索结果里秒开这个页面),如果你希望参与 V2EX 社区的讨论,你可以继续到 V2EX 上打开本讨论主题的完整版本。

https://www.v2ex.com/t/31143

V2EX 是创意工作者们的社区,是一个分享自己正在做的有趣事物、交流想法,可以遇见新朋友甚至新机会的地方。

V2EX is a community of developers, designers and creative people.

© 2021 V2EX