有个华东理工的 IP:202.120.96.102,疯狂的破解我的 SSH 尝试登录,啥情况 - V2EX
pfitseng

有个华东理工的 IP:202.120.96.102,疯狂的破解我的 SSH 尝试登录,啥情况

  •  
  •   pfitseng Jan 26, 2015 4732 views
    This topic created in 4139 days ago, the information mentioned may be changed or developed.

    放狗查了一下,是华东理工的,从这个页面http://lib.ecust.edu.cn/243.html

    貌似是他们图书馆的,这是他们被黑了还是咋地?已送这个ip进黑名单。

    10 replies    2015-01-26 13:39:11 +08:00
    strikehht
        1
    strikehht  
       Jan 26, 2015 via iPhone
    很正常啊
    owlsec
        2
    owlsec  
       Jan 26, 2015 via iPhone
    (_)这么简单的问题一是被黑了,二是学生有服务器权限,前者可能性更大
    typcn
        3
    typcn  
       Jan 26, 2015
    不就个 ssh 破解,还要水个帖子
    wy315700
        4
    wy315700  
       Jan 26, 2015
    也有可能是伪造的来源。
    zhangsec
        5
    zhangsec  
       Jan 26, 2015
    被黑了 ,批量扫描爆破
    aeshfawre
        6
    aeshfawre  
       Jan 26, 2015
    必须换端口
    twl007
        7
    twl007  
       Jan 26, 2015
    给学校的网络中心打电话 = = 一会儿网络中心就给封了
    Dreista
        8
    Dreista  
       Jan 26, 2015
    换端口,禁止密码登录
    话说我们学校直接禁止了外网SSH
    O21
        9
    O21  
       Jan 26, 2015 via iPhone
    学霸的试炼
    ell3n
        10
    ell3n  
       Jan 26, 2015
    @pfitseng
    目测tomcat弱口令进入.查看日志得到.我擦,怎么插入图片.还能不能愉快的装B了.
    更多日志正在整理中.目测,那货于2014-11-07 11:59:45得到服务器system权限. 黑盒审计得到,该cms至少还存在2处以上漏洞(直接system).以下是部分tomcat_log日志信息.
    2014-11-07 11:59:45 StandardContext[/manager]HTMLManager: install: Installing web application from 'jar:file:/D:/Program Files/metadata/proone/Server/Tomcat/webapps/****.war!/
    服务器上发现很多黑客软件,有点怕怕的.
    About     Help     Advertise     Blog     API     FAQ     Solana     1330 Online   Highest 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 55ms UTC 17:19 PVG 01:19 LAX 10:19 JFK 13:19
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86