这是阿里云的内鬼么? - V2EX
V2EX = way to explore
V2EX 是一个关于分享和探索的地方
Sign Up Now
For Existing Member  Sign In
thuai

这是阿里云的内鬼么?

  •  
  •   thuai Aug 9, 2018 4945 views
    This topic created in 2821 days ago, the information mentioned may be changed or developed.

    今天查 nginx 日志,突然发现有人 post 后门到我的服务器 地址查了下,居然是阿里云的服务器

    问题我的网站都还不对外开放的

    阿里云这是你们内部的鬼么?

    大神们帮忙给看下,这是什么情况

    反正已经提交工单了。阿里的服务器都是实名的。你们就作吧

    图片

    9 replies    2018-11-03 11:15:21 +08:00
    altchen
        1
    altchen  
       Aug 9, 2018
    个人猜测
    这种一般是全网段扫描的(如针对阿里服务器 IP 段)
    扫描和上传的服务器一般是肉鸡,不会是背后的人的
    不过你提工单倒时可以提醒机主已中标就是
    Athrob
        2
    Athrob  
       Aug 9, 2018 via iPhone
    是什么安全盾之类的,时不时扫一通,好像能关。
    thuai
        3
    thuai  
    OP
       Aug 9, 2018
    @altchen 肉鸡的可能性比较大
    xiaoz
        4
    xiaoz  
       Aug 9, 2018
    估计对方的机子被利用为肉鸡,以前我也遇到过,发工单阿里云会提醒用户检查。
    Phariel
        5
    Phariel  
       Aug 9, 2018 via iPhone
    肉鸡而已 你是第一天搞网络吗?
    leafiy
        6
    leafiy  
       Aug 9, 2018
    看地址不像是盾啊
    Athrob
        7
    Athrob  
       Aug 9, 2018
    @leafiy #6 也有可能被扫了
    liuxu
        8
    liuxu  
       Aug 23, 2018
    被扫了小兄弟,我的日本 vps 里的 nginx 日志也有
    thuai
        9
    thuai  
    OP
       Nov 3, 2018
    @Phariel 第一天挂域名,哈哈
    About     Help     Advertise     Blog     API     FAQ     Solana     2637 Online   Highest 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 38ms UTC 12:42 PVG 20:42 LAX 05:42 JFK 08:42
    Do have faith in what you're doing.
    (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-11940834-2', 'v2ex.com'); ga('send', 'pageview'); ga('send', 'event', 'Node', 'topic', 'server'); ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86