文档建议反馈控制台
首页
学习
活动
专区
圈层
工具
MCP广场
文章/答案/技术大牛
发布
社区首页 >问答首页 >我是通过PHPMyAdmin被黑的吗？

问我是通过PHPMyAdmin被黑的吗？
EN

Stack Overflow用户
提问于 2018-06-28 12:20:44
回答 1查看 1.8K关注 0票数 2

在我的访问日志中注意到了这一点，在阅读了一些文章后发现phpmyadmin中可能存在漏洞，我如何知道它们在攻击中是否成功？

下面是这组特定指令的访问日志。

代码语言：javascript
复制
103.101.177.22 - - [28/Jun/2018:11:52:05 +0000] "GET /webdav/ HTTP/1.1" 302 543 "-" "-"
103.101.177.22 - - [28/Jun/2018:11:52:05 +0000] "POST /wuwu11.php HTTP/1.1" 302 543 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:07 +0000] "POST /xw.php HTTP/1.1" 302 543 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:07 +0000] "POST /xx.php HTTP/1.1" 302 543 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:08 +0000] "POST /s.php HTTP/1.1" 302 543 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:08 +0000] "POST /w.php HTTP/1.1" 302 543 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:09 +0000] "POST /db.init.php HTTP/1.1" 302 543 "-" "Mozilla/5.0"
::1 - - [28/Jun/2018:11:52:09 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.18 (Ubuntu) OpenSSL/1.0.2g (internal dummy connection)"
103.101.177.22 - - [28/Jun/2018:11:52:10 +0000] "POST /db_session.init.php HTTP/1.1" 302 543 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:10 +0000] "POST /sheep.php HTTP/1.1" 302 543 "-" "Mozilla/5.0"
::1 - - [28/Jun/2018:11:52:10 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.18 (Ubuntu) OpenSSL/1.0.2g (internal dummy connection)"
::1 - - [28/Jun/2018:11:52:11 +0000] "OPTIONS * HTTP/1.0" 200 126 "-" "Apache/2.4.18 (Ubuntu) OpenSSL/1.0.2g (internal dummy connection)"
103.101.177.22 - - [28/Jun/2018:11:52:12 +0000] "GET /index.php HTTP/1.1" 200 15959 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:13 +0000] "GET /phpmyadmin/index.php HTTP/1.1" 401 729 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:14 +0000] "GET /phpMyAdmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:14 +0000] "GET /pmd/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:14 +0000] "GET /pma/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:14 +0000] "GET /PMA/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:15 +0000] "GET /PMA2/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:15 +0000] "GET /pmamy/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:15 +0000] "GET /pmamy2/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:15 +0000] "GET /mysql/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:16 +0000] "GET /admin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:16 +0000] "GET /db/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:17 +0000] "GET /dbadmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:17 +0000] "GET /web/phpMyAdmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:17 +0000] "GET /admin/pma/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:17 +0000] "GET /admin/PMA/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:18 +0000] "GET /admin/mysql/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:18 +0000] "GET /admin/mysql2/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:18 +0000] "GET /admin/phpmyadmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:19 +0000] "GET /admin/phpMyAdmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:19 +0000] "GET /admin/phpmyadmin2/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:19 +0000] "GET /mysqladmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:19 +0000] "GET /mysql-admin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:20 +0000] "GET /phpadmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:20 +0000] "GET /phpmyadmin0/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:21 +0000] "GET /phpmyadmin1/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:21 +0000] "GET /phpmyadmin2/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:21 +0000] "GET /myadmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:21 +0000] "GET /myadmin2/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:22 +0000] "GET /xampp/phpmyadmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:22 +0000] "GET /phpMyadmin_bak/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:22 +0000] "GET /www/phpMyAdmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:22 +0000] "GET /tools/phpMyAdmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:23 +0000] "GET /phpmyadmin-old/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:23 +0000] "GET /phpMyAdminold/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:23 +0000] "GET /phpMyAdmin.old/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:24 +0000] "GET /pma-old/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:24 +0000] "GET /claroline/phpMyAdmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:25 +0000] "GET /typo3/phpmyadmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:25 +0000] "GET /phpma/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:26 +0000] "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1" 401 729 "-" "Mozilla/5.0"
103.101.177.22 - - [28/Jun/2018:11:52:26 +0000] "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1" 302 579 "-" "Mozilla/5.0"
phpmyadmin
EN

回答 1

Stack Overflow用户

回答已采纳

发布于 2018-07-03 09:36:13

这不是被黑的证据。

这看起来像是有人试图访问phpmyadmin的安装。由于phpmyadmin可以以不同的方式包含，从而导致不同的url路径，所以他尝试所有已知的路径，希望得到有效的响应。

在默认路径之间，您可以找到一些用于安装phpmyadmin作为CMS子模块的路径。我知道TYPO3和phpmyadmin模块将位于/typo3conf/ext/phpmyadmin/，/typo3/正常化只是一个指向TYPO3源的符号链接，在那里没有像phpmyadmin那样的外部模块。

票数 1
EN
页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：

https://stackoverflow.com/questions/51082785

复制
相关文章

相似问题

领券

腾讯云开发者

扫码关注腾讯云开发者

扫码关注腾讯云开发者

领取腾讯云代金券

热门产品

热门推荐

更多推荐

Copyright © 2013 - 2026 Tencent Cloud. All Rights Reserved. 腾讯云 版权所有 

深圳市腾讯计算机系统有限公司 ICP备案/许可证号：粤B2-20090059 粤公网安备44030502008569号

腾讯云计算（北京）有限责任公司 京ICP证150476号 |  京ICP备11018762号

问题归档专栏文章快讯文章归档关键词归档开发者手册归档开发者手册 Section 归档