大约四年前,我在做一个项目时,发现未知的命令就在我眼前执行。更多详情请点击此处
这次我启动了一个网站,并在网络服务器日志中看到以下错误:
Error: ENOENT: no such file or directory, stat 'C:\website\site\robots.txt'
Error: ENOENT: no such file or directory, stat 'C:\website\site\l.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\phpinfo.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\test.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\help.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\java.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\_query.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\test.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\db_cts.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\db_pma.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\logon.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\help-e.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\license.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\log.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\hell.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\pmd_online.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\x.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\shell.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\htdocs.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\b.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\sane.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\desktop.ini.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\z.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\lala.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\lala-dpr.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\wpc.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\wpo.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\t6nv.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\muhstik.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\text.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\wp-config.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\muhstik.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\muhstik2.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\muhstiks.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\muhstik-dpr.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\lol.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\uploader.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\cmd.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\cmv.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\cmdd.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\knal.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\cmd.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\shell.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\appserv.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\scripts\setup.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\phpmyadmin\scripts\setup.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\phpMyAdmin\scripts\setup.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\scripts\db___.init.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\phpmyadmin\scripts\db___.init.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\phpMyAdmin\scripts\db___.init.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\pma\scripts\setup.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\PMA\scripts\setup.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\myadmin\scripts\setup.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\MyAdmin\scripts\setup.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\pma\scripts\db___.init.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\PMA\scripts\db___.init.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\myadmin\scripts\db___.init.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\MyAdmin\scripts\db___.init.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\plugins\weathermap\editor.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\cacti\plugins\weathermap\editor.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\weathermap\editor.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\index.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\elrekt.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\index.php\module\action\param1\${@die(md5(HelloThinkPHP))}'
Error: ENOENT: no such file or directory, stat 'C:\website\site\index.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\d7.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\rxr.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\1x.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\home.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\undx.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\spider.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\payload.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\composers.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\izom.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\composer.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\hue2.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\Drupal.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\lang.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\izom.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\payload.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\new_license.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\images\!.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\images\vuln.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\hd.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\images\up.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\images\attari.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\images\jsspwneed.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\images\stories\cmd.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\images\stories\filemga.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\up.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\laravel.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\huoshan.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\yu.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\floaw.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\ftmabc.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\doudou.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\mjx.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\xiaoxia.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\yuyang.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\zz.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\coonig.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\ak.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\baidoubi.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\hhhhhh.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\meijianxue.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\no1.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\python.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\woshimengmei.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\indea.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\taisui.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\xiaxia.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\kk.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\xsser.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\zzz.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\99.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\dp.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\hs.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\1ts.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\haiyan.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\phpdm.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\root.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\5678.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\root11.php'
Error: ENOENT: no such file or directory, stat 'C:\website\site\xiu.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\secure\ContactAdministrators!default.jspa'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\weaver\bsh.servlet.BshServlet'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmyadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\pmd\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\pma\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\PMA\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\PMA2\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\pmamy\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\pmamy2\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\mysql\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\admin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\db\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\dbadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\web\phpMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\admin\pma\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\admin\PMA\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\admin\mysql\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\admin\mysql2\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\admin\phpmyadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\admin\phpMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\admin\phpmyadmin2\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\mysqladmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\mysql-admin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\mysql_admin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmyadmin0\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmyadmin1\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmyadmin2\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin-4.4.0\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin4.8.0\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin4.8.1\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin4.8.2\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin4.8.3\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin4.8.4\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin4.8.5\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\myadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\myadmin2\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\xampp\phpmyadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyadmin_bak\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\www\phpMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\tools\phpMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmyadmin-old\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdminold\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin.old\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\pma-old\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\claroline\phpMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\typo3\phpmyadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpma\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmyadmin\phpmyadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin\phpMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAbmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin__\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin+++---\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\v\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmyadm1n\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdm1n\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\shaAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyadmi\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmion\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\s\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\MyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin1\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin123\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\pwd\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmina\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMydmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmins\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin._\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin._2\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmyadmin2222\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin333\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmyadmin3333\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\php2MyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpiMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpNyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\1\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\download\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin_111\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\321\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\123131\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdminn\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdminhf\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\sbb\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\WWW\phpMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmln\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpMyAdmin_ai\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\__phpMyAdmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\program\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\shopdb\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phppma\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\phpmy\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\mysql\admin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\mysql\dbadmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\mysql\sqlmanager\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\mysql\mysqlmanager\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\wp-content\plugins\portable-phpmyadmin\wp-pma-mod\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\sqladmin\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\sql\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\SQL\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\websql\index.php'
Error: ENOENT: no such file or directory, stat 'C:\splitter.ai\site\MySQLAdmin\index.php'
那么这是怎么回事呢?最重要的是,我该如何保护我的网站?
服务器信息:NodeJS,带有 Helmet 的 Express 无 PHP 无 SSH Windows 10
答案1
他们正在尝试每个可能存在潜在漏洞的脚本和网站管理界面的位置。
如果您不想有人危害您的网络服务器,那么您有几种选择。
- 不要运营面向公众的网站。如果你不能胜任全职管理网站、应用补丁和更新以及修复漏洞的任务,那么你就不应该做这件事。
建立一个网站很容易,维护它并确保很难。 - 始终保持软件为最新版本. 使用最新版本的软件和相关网站工具。
blacklist <your web stack>
使用网站软件的黑名单工具来阻止最常见的入侵源。在 Google 或您最喜欢的搜索引擎中搜索。- 您的网络日志应包含所有请求的 IP 地址。查看服务器文档以了解如何阻止 IP 地址。
- 设置防火墙以将 IP 地址列入黑名单或阻止其。
3 和 4 最多只是暂时的修复。“黑客”可以使用代理、VPN 和其他方法轻松更改 IP 地址。他们可以通过简单地忽略攻击来降低攻击的影响(即不浪费服务器资源)。这并不意味着您不会再收到流量,只是您的服务器无法处理它。
第 5 项只是第 3 项和第 4 项的变体,它将完全阻止网站软件看到请求。您仍将获得流量,并且可能会操作系统'因此被互联网淘汰。
第二个想法是最重要的,但被低估了。软件中总会有 bug,而且大多数情况下都会被修复,但人们往往拒绝更新软件,因为这可能会破坏某些功能,或者需要他们做更多的工作来修复其他依赖项。
如果你不打算更新你的软件,那么你不妨放一张欢迎垫,并发布你的银行详细信息供所有人使用。
进行备份。执行更新。如果出现问题,请回滚备份并重试。
不要仅仅因为“更简单”而让不安全的软件在公共机器上运行。
你会总是遇到此类入侵企图,这是面向公众的计算机面临的事实。你能做的最好的事情就是防御它们。
如果你的计算机不需要公开,不需要其他用户可以访问的服务器,那么就不要公开。使用将你连接到计算机的中间服务。当然,你只需将妥协点移动到那服务,但这是在您的服务失败之前必须失败的另一个点。