http/https服务器安全：嗅探漏洞url路径

本是古典何须时尚 2022-11-29 05:46 146阅读 0赞

# 简介 #

这里记录一下我知道的一些经常被黑客嗅探的路径。

1、有些可能是正常路径，比如：GET /robots.txt

2、有些是需要加入安全策略的路径，比如：GET /phpMyAdmin/index.php

# 防御方式 #

这里有个英文说明，我们做IT的，英文是必备技能哦，哈哈~~~

They are trying every likely location of potentially vulnerable scripts and website admin interface.

If you don't want people to compromise your web server then you have several options.

1.  **Don't run a publicly facing website.** If you are not up to the task of administrating a website full-time and applying patches and updates and fixing breaches then you shouldn't be doing it.  
    Setting up a website is easy, keeping it up *and secure* is hard.
2.  **Always keep your software up to date**. Use the latest versions of software and related website tools.
3.  Use blacklisting tools for your website software to block most common sources of intrusion. Search for `blacklist <your web stack>` in Google or your favourite search engine.
4.  Your web logs should include the IP address of any requests. Look through your server documentation to find out how to block IP addresses.
5.  Set up your firewall to blacklist or block IP addresses.

Numbers 3 & 4 are, at best, temporary and transient fixes. "Hackers" can easily change IP address by using proxies, VPNs and other methods. They can reduce the effect (I.e. your not waste server resources) of attacks by simply ignoring them. It does not mean that you won't get traffic still, just that your server won't handle it.

Number 5 is just a variant on 3 & 4 that will prevent the website software from seeing the request at all. You will still get traffic and could be [DOS][]'ed off the internet by it.

Number 2 is one of the most important and under-appreciated ideas. Bugs are found in software all the time and get fixed most of the time, but people often refuse to update the software because it might break something or need them to do more work to repair some other dependencies.

**If you are not going to update your software then you might as well just put out a welcome mat and post your bank details for everyone to use**.

Take a backup. Perform the update. If something breaks then roll back the backup and try again.

***Do not just leave insecure software running on a public machine because it's "easier".***

You will *always* get these kinds of intrusion attempts and they are a fact of having public facing computers. The best you can do is defend against them.

If your computer doesn't need to be public, with servers that are accessible to other users, then don't make it public. Use intermediate services that connect you to your computer. Granted you just move the compromise point to *that* service, but it is another point that has to fail before yours does.

# 漏洞url路径 #

这里只是提供参考，大家平时多多注意点吧。

request: "GET / HTTP/1.1",   
request: "GET /robots.txt HTTP/1.1",   
request: "POST /Admin16c882df/Login.php HTTP/1.1",   
request: "GET / HTTP/1.1",   
request: "GET /l.php HTTP/1.1",   
request: "GET /phpinfo.php HTTP/1.1",   
request: "GET /test.php HTTP/1.1",   
request: "POST /index.php HTTP/1.1",   
request: "POST /bbs.php HTTP/1.1",   
request: "POST /forum.php HTTP/1.1",   
request: "POST /forums.php HTTP/1.1",   
request: "POST /bbs/index.php HTTP/1.1",   
request: "POST /forum/index.php HTTP/1.1",   
request: "POST /forums/index.php HTTP/1.1",   
request: "GET /xiaoxia.php HTTP/1.1",   
request: "GET /yuyang.php HTTP/1.1",   
request: "GET /zz.php HTTP/1.1",   
request: "GET /coonig.php HTTP/1.1",   
request: "GET /ak.php HTTP/1.1",   
request: "GET /baidoubi.php HTTP/1.1",   
request: "GET /hhhhhh.php HTTP/1.1",   
request: "GET /meijianxue.php HTTP/1.1",   
request: "GET /no1.php HTTP/1.1",   
request: "GET /python.php HTTP/1.1",   
request: "GET /woshimengmei.php HTTP/1.1",   
request: "GET /indea.php HTTP/1.1",   
request: "GET /taisui.php HTTP/1.1",   
request: "GET /xiaxia.php HTTP/1.1",   
request: "GET /kk.php HTTP/1.1",   
request: "GET /xsser.php HTTP/1.1",   
request: "GET /zzz.php HTTP/1.1",   
request: "GET /99.php HTTP/1.1",   
request: "GET /dp.php HTTP/1.1",   
request: "GET /hs.php HTTP/1.1",   
request: "GET /1ts.php HTTP/1.1",   
request: "GET /haiyan.php HTTP/1.1",   
request: "GET /phpdm.php HTTP/1.1",   
request: "GET /root.php HTTP/1.1",   
request: "GET /5678.php HTTP/1.1",   
request: "GET /root11.php HTTP/1.1",   
request: "GET /xiu.php HTTP/1.1",   
request: "POST /wuwu11.php HTTP/1.1",   
request: "POST /xw.php HTTP/1.1",   
request: "POST /xw1.php HTTP/1.1",   
request: "POST /9678.php HTTP/1.1",   
request: "POST /wc.php HTTP/1.1",   
request: "POST /xx.php HTTP/1.1",   
request: "POST /xx.php HTTP/1.1",   
request: "POST /s.php HTTP/1.1",   
request: "POST /w.php HTTP/1.1",   
request: "POST /sheep.php HTTP/1.1",   
request: "POST /qaq.php HTTP/1.1",   
request: "POST /my.php HTTP/1.1",   
request: "POST /qq.php HTTP/1.1",   
request: "POST /aaa.php HTTP/1.1",   
request: "POST /hhh.php HTTP/1.1",   
request: "POST /jjj.php HTTP/1.1",   
request: "POST /vvv.php HTTP/1.1",   
request: "POST /www.php HTTP/1.1",   
request: "POST /ffr.php HTTP/1.1",   
request: "POST /411.php HTTP/1.1",   
request: "POST /415.php HTTP/1.1",   
request: "POST /421.php HTTP/1.1",   
request: "POST /444.php HTTP/1.1",   
request: "POST /a411.php HTTP/1.1",   
request: "POST /whoami.php HTTP/1.1",   
request: "POST /whoami.php.php HTTP/1.1",   
request: "POST /9.php HTTP/1.1",   
request: "POST /98k.php HTTP/1.1",   
request: "POST /981.php HTTP/1.1",   
request: "POST /887.php HTTP/1.1",   
request: "POST /888.php HTTP/1.1",   
request: "POST /aa.php HTTP/1.1",   
request: "POST /bb.php HTTP/1.1",   
request: "POST /pp.php HTTP/1.1",   
request: "POST /tt.php HTTP/1.1",   
request: "POST /bbq.php HTTP/1.1",   
request: "POST /jj1.php HTTP/1.1",   
request: "POST /jbb.php HTTP/1.1",   
request: "POST /7o.php HTTP/1.1",   
request: "POST /qwq.php HTTP/1.1",   
request: "POST /nb.php HTTP/1.1",   
request: "POST /kpl.php HTTP/1.1",   
request: "POST /hgx.php HTTP/1.1",   
request: "POST /ppl.php HTTP/1.1",   
request: "POST /tty.php HTTP/1.1",   
request: "POST /ooi.php HTTP/1.1",   
request: "POST /aap.php HTTP/1.1",   
request: "POST /app.php HTTP/1.1",   
request: "POST /bbr.php HTTP/1.1",   
request: "POST /ioi.php HTTP/1.1",   
request: "POST /uuu.php HTTP/1.1",   
request: "POST /yyy.php HTTP/1.1",   
request: "POST /ack.php HTTP/1.1",   
request: "POST /shh.php HTTP/1.1",   
request: "POST /ddd.php HTTP/1.1",   
request: "POST /nnn.php HTTP/1.1",   
request: "POST /rrr.php HTTP/1.1",   
request: "POST /ttt.php HTTP/1.1",   
request: "POST /bbqq.php HTTP/1.1",   
request: "POST /tyrant.php HTTP/1.1",   
request: "POST /qiqi.php HTTP/1.1",   
request: "POST /qiqi1.php HTTP/1.1",   
request: "POST /zhk.php HTTP/1.1",   
request: "POST /bbv.php HTTP/1.1",   
request: "POST /605.php HTTP/1.1",   
request: "POST /admin1.php HTTP/1.1",   
request: "POST /xi.php HTTP/1.1",   
request: "POST /999.php HTTP/1.1",   
request: "POST /jsc.php HTTP/1.1",   
request: "POST /jsc.php.php HTTP/1.1",   
request: "POST /jsc.php HTTP/1.1",   
request: "POST /11a.php HTTP/1.1",   
request: "POST /kkl.php HTTP/1.1",   
request: "POST /jkl.php HTTP/1.1",   
request: "POST /lmn.php HTTP/1.1",   
request: "POST /bx.php HTTP/1.1",   
request: "POST /Moxin.PHP HTTP/1.1",   
request: "POST /g.php HTTP/1.1",   
request: "POST /CCC.PHP HTTP/1.1",   
request: "POST /CCCC.PHP HTTP/1.1",   
request: "POST /mobai.PHP HTTP/1.1",   
request: "POST /avast.php HTTP/1.1",   
request: "POST /abc.php HTTP/1.1",   
request: "POST /Pings.php HTTP/1.1",   
request: "POST /123.php HTTP/1.1",   
request: "POST /log.php HTTP/1.1",   
request: "POST /log.php HTTP/1.1",   
request: "POST /log1.php HTTP/1.1",   
request: "POST /alipay.php HTTP/1.1",   
request: "POST /vf.php HTTP/1.1",   
request: "POST /tianqi.php HTTP/1.1",   
request: "POST /can.php HTTP/1.1",   
request: "POST /can.php HTTP/1.1",   
request: "POST /dns.php HTTP/1.1",   
request: "POST /dns.php HTTP/1.1",   
request: "POST /cmd.php HTTP/1.1",   
request: "POST /juji.php HTTP/1.1",   
request: "POST /n24.php HTTP/1.1",   
request: "POST /temp.php HTTP/1.1",   
request: "POST /jiaochi.php HTTP/1.1",   
request: "POST /ganzhuolang.php HTTP/1.1",   
request: "POST /987.php HTTP/1.1",   
request: "POST /h156.php HTTP/1.1",   
request: "POST /666666.php HTTP/1.1",   
request: "POST /xh.php HTTP/1.1",   
request: "POST /key.php HTTP/1.1",   
request: "POST /jb.php HTTP/1.1",   
request: "POST /duke.php HTTP/1.1",   
request: "POST /llld.php HTTP/1.1",   
request: "POST /404.php HTTP/1.1",   
request: "POST /jy.php HTTP/1.1",   
request: "POST /123.php HTTP/1.1",   
request: "POST /v.php HTTP/1.1",   
request: "POST /luoke.php HTTP/1.1",   
request: "POST /nidage.php HTTP/1.1",   
request: "POST /sanan.php HTTP/1.1",   
request: "POST /02.php HTTP/1.1",   
request: "POST /ddd.php HTTP/1.1",   
request: "POST /mo.php HTTP/1.1",   
request: "POST /sbkc.php HTTP/1.1",   
request: "POST /sbkcb.php HTTP/1.1",   
request: "POST /cnm.php HTTP/1.1",   
request: "POST /tests.php HTTP/1.1",   
request: "POST /luoran.php HTTP/1.1",   
request: "POST /luoran6.php HTTP/1.1",   
request: "POST /asen.php HTTP/1.1",   
request: "POST /fx.php HTTP/1.1",   
request: "POST /hl.php HTTP/1.1",   
request: "POST /1556189185.php HTTP/1.1",   
request: "POST /que.php HTTP/1.1",   
request: "POST /shanzhi.php HTTP/1.1",   
request: "POST /yc.php HTTP/1.1",   
request: "POST /ycc.php HTTP/1.1",   
request: "POST /yccc.php HTTP/1.1",   
request: "POST /lr.php HTTP/1.1",   
request: "POST /lr.php HTTP/1.1",   
request: "POST /2.php HTTP/1.1",   
request: "POST /xixi.php HTTP/1.1",   
request: "POST /qiqi.php HTTP/1.1",   
request: "POST /qiqi11.php HTTP/1.1",   
request: "POST /ruii.php HTTP/1.1",   
request: "POST /ci.php HTTP/1.1",   
request: "POST /mutuba.php HTTP/1.1",   
request: "POST /taocishun.php HTTP/1.1",   
request: "POST /gg.php HTTP/1.1",   
request: "POST /xiong.php HTTP/1.1",   
request: "POST /jing.php HTTP/1.1",   
request: "POST /ganshiqiang.php HTTP/1.1",   
request: "POST /n23.php HTTP/1.1",   
request: "POST /infos.php HTTP/1.1",   
request: "POST /api.php HTTP/1.1",   
request: "POST /zxc.php HTTP/1.1",   
request: "POST /sqlk.php HTTP/1.1",   
request: "POST /xx33.php HTTP/1.1",   
request: "POST /aotian.php HTTP/1.1",   
request: "POST /buluya.php HTTP/1.1",   
request: "POST /oumi.php HTTP/1.1",   
request: "POST /qiangkezhi.php HTTP/1.1",   
request: "POST /ce.PHP HTTP/1.1",   
request: "POST /cs.php HTTP/1.1",   
request: "POST /ww.php HTTP/1.1",   
request: "POST /zyc.php HTTP/1.1",   
request: "POST /inde.php HTTP/1.1",   
request: "POST /1.php HTTP/1.1",   
request: "POST /info8.php HTTP/1.1",   
request: "POST /qqq.php HTTP/1.1",   
request: "POST /lequ.php HTTP/1.1",   
request: "POST /anyi.php HTTP/1.1",   
request: "POST /user.php HTTP/1.1",   
request: "POST /xiao.php HTTP/1.1",   
request: "POST /wanmei.php HTTP/1.1",   
request: "POST /wuwu.php HTTP/1.1",   
request: "POST /bf.php HTTP/1.1",   
request: "POST /mybestloves.php HTTP/1.1",   
request: "POST /xiaoxi.php HTTP/1.1",   
request: "POST /xiaoxi.php HTTP/1.1",   
request: "POST /ww.php HTTP/1.1",   
request: "POST /pop.php HTTP/1.1",   
request: "POST /ok.php HTTP/1.1",   
request: "POST /test.php HTTP/1.1",   
request: "POST /conf.php HTTP/1.1",   
request: "POST /dashu.php HTTP/1.1",   
request: "POST /shell.php HTTP/1.1",   
request: "POST /queqiao.php HTTP/1.1",   
request: "POST /12345.php HTTP/1.1",   
request: "POST /qqq.php HTTP/1.1",   
request: "POST /15.php HTTP/1.1",   
request: "POST /slider.php HTTP/1.1",   
request: "POST /qunhuang.php HTTP/1.1",   
request: "POST /hannan.php HTTP/1.1",   
request: "POST /confie.php HTTP/1.1",   
request: "POST /igo.php HTTP/1.1",   
request: "POST /code.php HTTP/1.1",   
request: "POST /ss.php HTTP/1.1",   
request: "POST /php.php HTTP/1.1",   
request: "POST /about.php HTTP/1.1",   
request: "POST /incs.php HTTP/1.1",   
request: "POST /159.php HTTP/1.1",   
request: "POST /test.php HTTP/1.1",   
request: "POST /test1.php HTTP/1.1",   
request: "POST /images/1.php HTTP/1.1",   
request: "POST /images/asp.php HTTP/1.1",   
request: "POST /images/entyy.php HTTP/1.1",   
request: "POST /images/1ndex.php HTTP/1.1",   
request: "POST /images/defau1t.php HTTP/1.1",   
request: "POST /webconfig.txt.php HTTP/1.1",   
request: "POST /administrator/webconfig.txt.php HTTP/1.1",   
request: "POST /api.php HTTP/1.1",   
request: "POST /luso.php HTTP/1.1",   
request: "POST /1ndex.php HTTP/1.1",   
request: "POST /indexbak.php HTTP/1.1",   
request: "POST /4o4.php HTTP/1.1",   
request: "POST /xmlrpc.php HTTP/1.1",   
request: "POST /blog/xmlrpc.php HTTP/1.1",   
request: "POST /errors/processor.php HTTP/1.1",   
request: "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /phpunit/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /wp-content/plugins/dzs-videogallery/class\_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /new/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1",   
request: "POST /plus/90sec.php HTTP/1.1",   
request: "POST /plus/read.php HTTP/1.1",   
request: "POST /plus/moon.php HTTP/1.1",   
request: "POST /plus/laobiao.php HTTP/1.1",   
request: "POST /plus/laobiaoaien.php HTTP/1.1",   
request: "POST /plus/e7xue.php HTTP/1.1",   
request: "POST /plus/mybak.php HTTP/1.1",   
request: "POST /plus/service.php HTTP/1.1",   
request: "POST /plus/xsvip.php HTTP/1.1",   
request: "POST /plus/bakup.php HTTP/1.1",   
request: "POST /include/tags.php HTTP/1.1",   
request: "POST /include/data/tags.php HTTP/1.1",   
request: "POST /images/swfupload/tags.php HTTP/1.1",   
request: "POST /dong.php HTTP/1.1",   
request: "POST /xun.php HTTP/1.1",   
request: "POST /plus/gu.php HTTP/1.1",   
request: "POST /plus/tou.php HTTP/1.1",   
request: "POST /plus/ma.php HTTP/1.1",   
request: "POST /plus/mytag.php HTTP/1.1",   
request: "POST /plus/dajihi.php HTTP/1.1",   
request: "POST /plus/shaoyong.php HTTP/1.1",   
request: "POST /datas.php HTTP/1.1",   
request: "POST /aojiao.php HTTP/1.1",   
request: "POST /guipu.php HTTP/1.1",   
request: "POST /zhui.php HTTP/1.1",   
request: "POST /plus/lucas.php HTTP/1.1",   
request: "POST /plus/canshi.php HTTP/1.1",   
request: "POST /plus/yunjitan.php HTTP/1.1",   
request: "POST /ji.php HTTP/1.1",   
request: "POST /xing.php HTTP/1.1",   
request: "POST /%75%73%65%72%2e%70%68%70 HTTP/1.1",   
request: "GET /index.php HTTP/1.1",   
**request: "GET /phpmyadmin/index.php HTTP/1.1",   
request: "GET /phpMyAdmin/index.php HTTP/1.1", **  
request: "GET /pmd/index.php HTTP/1.1",   
request: "GET /pma/index.php HTTP/1.1",   
request: "GET /PMA/index.php HTTP/1.1",   
request: "GET /PMA2/index.php HTTP/1.1",   
request: "GET /pmamy/index.php HTTP/1.1",   
request: "GET /pmamy2/index.php HTTP/1.1",   
request: "GET /mysql/index.php HTTP/1.1",   
request: "GET /admin/index.php HTTP/1.1",   
request: "GET /db/index.php HTTP/1.1",   
request: "GET /dbadmin/index.php HTTP/1.1",   
request: "GET /web/phpMyAdmin/index.php HTTP/1.1",   
request: "GET /admin/pma/index.php HTTP/1.1",   
request: "GET /admin/PMA/index.php HTTP/1.1",   
request: "GET /admin/mysql/index.php HTTP/1.1",   
request: "GET /admin/mysql2/index.php HTTP/1.1",   
request: "GET /admin/phpmyadmin/index.php HTTP/1.1",   
request: "GET /admin/phpMyAdmin/index.php HTTP/1.1",   
request: "GET /admin/phpmyadmin2/index.php HTTP/1.1",   
request: "GET /mysqladmin/index.php HTTP/1.1",   
request: "GET /mysql-admin/index.php HTTP/1.1",   
request: "GET /mysql\_admin/index.php HTTP/1.1",   
request: "GET /phpadmin/index.php HTTP/1.1",   
request: "GET /phpAdmin/index.php HTTP/1.1",   
request: "GET /phpmyadmin0/index.php HTTP/1.1",   
request: "GET /phpmyadmin1/index.php HTTP/1.1",   
request: "GET /phpmyadmin2/index.php HTTP/1.1",   
request: "GET /phpMyAdmin-4.4.0/index.php HTTP/1.1",   
request: "GET /phpMyAdmin4.8.0/index.php HTTP/1.1",   
request: "GET /phpMyAdmin4.8.1/index.php HTTP/1.1",   
request: "GET /phpMyAdmin4.8.2/index.php HTTP/1.1",   
request: "GET /phpMyAdmin4.8.3/index.php HTTP/1.1",   
request: "GET /phpMyAdmin4.8.4/index.php HTTP/1.1",   
request: "GET /phpMyAdmin4.8.5/index.php HTTP/1.1",   
request: "GET /myadmin/index.php HTTP/1.1",   
request: "GET /myadmin2/index.php HTTP/1.1",   
request: "GET /xampp/phpmyadmin/index.php HTTP/1.1",   
request: "GET /phpMyadmin\_bak/index.php HTTP/1.1",   
request: "GET /www/phpMyAdmin/index.php HTTP/1.1",   
request: "GET /tools/phpMyAdmin/index.php HTTP/1.1",   
request: "GET /phpmyadmin-old/index.php HTTP/1.1",   
request: "GET /phpMyAdminold/index.php HTTP/1.1",   
request: "GET /phpMyAdmin.old/index.php HTTP/1.1",   
request: "GET /pma-old/index.php HTTP/1.1",   
request: "GET /claroline/phpMyAdmin/index.php HTTP/1.1",   
request: "GET /typo3/phpmyadmin/index.php HTTP/1.1",   
request: "GET /phpma/index.php HTTP/1.1",   
request: "GET /phpmyadmin/phpmyadmin/index.php HTTP/1.1",   
request: "GET /phpMyAdmin/phpMyAdmin/index.php HTTP/1.1",   
request: "GET /phpMyAbmin/index.php HTTP/1.1",   
request: "GET /phpMyAdmin\_\_/index.php HTTP/1.1",   
request: "GET /phpMyAdmin+++---/index.php HTTP/1.1",   
request: "GET /v/index.php HTTP/1.1",   
request: "GET /phpmyadm1n/index.php HTTP/1.1",   
request: "GET /phpMyAdm1n/index.php HTTP/1.1",   
request: "GET /shaAdmin/index.php HTTP/1.1",   
request: "GET /phpMyadmi/index.php HTTP/1.1",   
request: "GET /phpMyAdmion/index.php HTTP/1.1",   
request: "GET /s/index.php HTTP/1.1",   
request: "GET /MyAdmin/index.php HTTP/1.1",   
request: "GET /phpMyAdmin1/index.php HTTP/1.1",   
request: "GET /phpMyAdmin123/index.php HTTP/1.1",   
request: "GET /pwd/index.php HTTP/1.1",   
request: "GET /phpMyAdmina/index.php HTTP/1.1",   
request: "GET /phpMydmin/index.php HTTP/1.1",   
request: "GET /phpMyAdmins/index.php HTTP/1.1",   
request: "GET /phpMyAdmin.\_/index.php HTTP/1.1",   
request: "GET /phpMyAdmin.\_2/index.php HTTP/1.1",   
request: "GET /phpmyadmin2222/index.php HTTP/1.1",   
request: "GET /phpMyAdmin333/index.php HTTP/1.1",   
request: "GET /phpmyadmin3333/index.php HTTP/1.1",   
request: "GET /php2MyAdmin/index.php HTTP/1.1",   
request: "GET /phpiMyAdmin/index.php HTTP/1.1",   
request: "GET /phpNyAdmin/index.php HTTP/1.1",   
request: "GET /1/index.php HTTP/1.1",   
request: "GET /download/index.php HTTP/1.1",   
request: "GET /phpMyAdmin\_111/index.php HTTP/1.1",   
request: "GET /phpmadmin/index.php HTTP/1.1",   
request: "GET /321/index.php HTTP/1.1",   
request: "GET /123131/index.php HTTP/1.1",   
request: "GET /phpMyAdminn/index.php HTTP/1.1",   
request: "GET /phpMyAdminhf/index.php HTTP/1.1",   
request: "GET /sbb/index.php HTTP/1.1",   
request: "GET /WWW/phpMyAdmin/index.php HTTP/1.1",   
request: "GET /phpMyAdmln/index.php HTTP/1.1",   
request: "GET /phpMyAdmin\_ai/index.php HTTP/1.1",   
request: "GET /\_\_phpMyAdmin/index.php HTTP/1.1",   
request: "GET /program/index.php HTTP/1.1",   
request: "GET /shopdb/index.php HTTP/1.1",   
request: "GET /phppma/index.php HTTP/1.1",   
request: "GET /phpmy/index.php HTTP/1.1",   
request: "GET /mysql/admin/index.php HTTP/1.1",   
request: "GET /mysql/dbadmin/index.php HTTP/1.1",   
request: "GET /mysql/sqlmanager/index.php HTTP/1.1",   
request: "GET /mysql/mysqlmanager/index.php HTTP/1.1",   
request: "GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php HTTP/1.1",   
request: "GET /sqladmin/index.php HTTP/1.1",   
request: "GET /sql/index.php HTTP/1.1",   
request: "GET /SQL/index.php HTTP/1.1",   
request: "GET /websql/index.php HTTP/1.1",   
request: "GET /MySQLAdmin/index.php HTTP/1.1",   
request: "GET /manager/html HTTP/1.1",   
request: "POST /axis2/axis2-admin/login HTTP/1.1",

参考：

[https://superuser.com/questions/1504636/am-i-being-hacked][https_superuser.com_questions_1504636_am-i-being-hacked]

[http://www.networksystemssolutions.eu/webattackers.php?drilldown=132.232.86.91][http_www.networksystemssolutions.eu_webattackers.php_drilldown_132.232.86.91]

[https://jamesbrine.com.au/bruteforce-files-list-2020-07-20/][https_jamesbrine.com.au_bruteforce-files-list-2020-07-20]

[DOS]: https://en.wikipedia.org/wiki/Denial-of-service_attack
[https_superuser.com_questions_1504636_am-i-being-hacked]: https://superuser.com/questions/1504636/am-i-being-hacked
[http_www.networksystemssolutions.eu_webattackers.php_drilldown_132.232.86.91]: http://www.networksystemssolutions.eu/webattackers.php?drilldown=132.232.86.91
[https_jamesbrine.com.au_bruteforce-files-list-2020-07-20]: https://jamesbrine.com.au/bruteforce-files-list-2020-07-20/