最烦那种所谓垃圾黑客

[undefined]

最近我的服务器访问日志里一直有大量的诸如以下的的访问记录:

估计是使用了什么黑客工具，而工具里有自带user-agent：zmEu @ WhiteHat Team - www.whitehat.ro


我直接通过user-agent 就封了， 他还是不断的一直在试图探出诸如Php mysql admin这样的访问接口。。全不返回的403 还是一直再试。。。。。。。。。。。无语了

老在日志里看到这样的东西很不爽。。 大家可以看看自己web服务器的访问记录里也有诸如: Made by ZmEu @ WhiteHat Team - www.whitehat.ro的？

IP:[ 88.34.113.33 ] - - "GET //mysqladmin/ HTTP/1.1" 403 169 "-" HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] 26/Dec/2010:19:51:32 +0800 ]

IP:[ 58.177.206.19 ] - - "GET //phpmyadmin/ HTTP/1.1" 403 169 REF:[ - ] HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] [ 28/Dec/2010:09:31:05 +0800 ]

IP:[ 58.177.206.19 ] - - "GET //PHPmyadmin HTTP/1.1" 403 169 REF:[ - ] HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] [ 28/Dec/2010:09:31:09 +0800 ]

IP:[ 58.177.206.19 ] - - "GET //admin/ HTTP/1.1" 403 169 REF:[ - ] HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] [ 28/Dec/2010:09:31:24 +0800 ]

IP:[ 58.177.206.19 ] - - "GET //mysql/ HTTP/1.1" 403 169 REF:[ - ] HTTP_USER_AGENT:[ Made by ZmEu @ WhiteHat Team - www.whitehat.ro ] [ 28/Dec/2010:09:31:24 +0800 ]

[chone]

秀才碰到兵有理说不清啊，哈哈。这是不是最近最流行的恶心式攻击？

[huacnlee]

最近我也是被攻击...

[est]

直接封ip不就搞定了么

[undefined]

@est 我都懒得封了 这估计也就是用别人工具进行的所谓的攻击。。ip偶尔在变，我都懒得一个个ip封了。。nginx直接过滤了user-agent 返回403

[undefined]

@huacnlee 所谓互联网 水还真深。。。

[undefined]

@chone 呵呵。。。挺搞笑的