首頁猿問在服務(wù)器上發(fā)現(xiàn)了木馬，也記錄到了入...

在服務(wù)器上發(fā)現(xiàn)了木馬，也記錄到了入侵者的IP，如何請(qǐng)他喝茶？

JavaScript

四季花海 2019-04-16 20:27:07

在服務(wù)器上發(fā)現(xiàn)了木馬，也記錄到了入侵者的IP，如何請(qǐng)他喝茶？入侵者訪問記錄12-3111:01:45POST/.m/static/img/static.aspx-80-113.76.193.74Baiduspider2000648258612-3111:01:45POST/.m/static/img/static.aspx-80-113.76.193.74Baiduspider2000645187012-3111:01:45POST/.m/static/img/static.aspx-80-113.76.193.74Baiduspider20000978112-3112:03:29POST/.m/static/img/static.aspx-80-113.76.193.74Baiduspider200006212-3112:03:30POST/.m/static/img/static.aspx-80-113.76.193.74Baiduspider200006212-3112:03:32POST/.m/static/img/static.aspx-80-113.76.193.74Baiduspider200006212-3114:07:05POST/.m/static/img/static.aspx-80-219.135.67.177Baiduspider200007812-3114:07:08POST/.m/static/img/static.aspx-80-219.135.67.177Baiduspider200004612-3123:02:36POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider20000191812-3123:03:01POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider200009312-3123:03:05POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider200006212-3123:03:07POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider200007812-3123:03:10POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider2000010912-3123:08:06POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider2000010912-3123:08:08POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider200006212-3123:08:11POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider200007812-3123:08:13POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider200007812-3123:08:15POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider200009312-3123:25:14POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider200007812-3123:25:17POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider200007812-3123:25:19POST/.m/static/img/static.aspx-80-14.125.36.190Baiduspider2000046801-0200:47:59POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider2000645885801-0200:48:00POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider200001800201-0201:05:11POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider200006201-0201:05:14POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider200006201-0201:05:17POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider200006201-0201:05:24POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider20000510101-0201:05:27POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider200006201-0201:05:29POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider200006201-0201:05:34POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider200007801-0201:05:44POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider200006201-0203:12:41POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider20000321301-0203:12:32POST/.m/static/img/static.aspx-80-113.76.129.248Baiduspider2000021801-0223:57:35POST/aspnet_client/system_web/client/env.aspx-80-14.123.240.85Baiduspider2000071701-0223:56:16POST/.m/static/img/static.aspx-80-14.123.240.85Baiduspider4040642344601-0300:03:01POST/aspnet_client/system_web/client/env.aspx-80-14.123.240.85Baiduspider20000642701-0300:03:26POST/aspnet_client/system_web/client/env.aspx-80-14.123.240.85Baiduspider20000285401-0300:38:42POST/aspnet_client/system_web/client/env.aspx-80-14.123.240.85Baiduspider20000129401-0300:38:44POST/aspnet_client/system_web/client/env.aspx-80-14.123.240.85Baiduspider2000020201-0300:38:46POST/aspnet_client/system_web/client/env.aspx-80-14.123.240.85Baiduspider20000

查看完整描述

2 回答

繁花如伊

TA貢獻(xiàn)2012條經(jīng)驗(yàn) 獲得超12個(gè)贊

如果還時(shí)不時(shí)會(huì)來，可以用蜜罐，成功率看你蜜罐的水平了。即使蜜罐套住了，對(duì)方如果只是放普通webhook或者開端口當(dāng)肉雞或者脫你的褲子之類也沒啥用如果他不再來了，那只能反過來打?qū)Ψ降腎P，即使能打進(jìn)去很可能也就是肉雞不過以掛馬還會(huì)留httplog的水平，可能對(duì)方也就半桶水而已，即使能打到對(duì)方也說明不了什么首先還是學(xué)學(xué)怎么防住半桶水的攻擊吧，看看對(duì)方的入侵路徑，該打補(bǔ)丁打補(bǔ)丁，該收緊權(quán)限的收緊權(quán)限，該封端口的封端口

反對(duì) 回復(fù) 2019-04-16