您的位置 首页 网站

“POST //xmlrpc.php HTTP/1.1” 200 (wordpress禁止访问)

 

今天看到网站被 “

"POST //xmlrpc.php HTTP/1.1" 200

给攻击了,

不明白为什么是 返回200 ,这个文件xmlrpc.php 我早就删除了。

””

139.59.127.180 - - [11/May/2023:13:34:58 +0800] "POST //xmlrpc.php HTTP/1.1" 200 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
139.59.127.180 - - [11/May/2023:13:34:58 +0800] "POST //xmlrpc.php HTTP/1.1" 200 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
139.59.127.180 - - [11/May/2023:13:34:59 +0800] "POST //xmlrpc.php HTTP/1.1" 200 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
139.59.127.180 - - [11/May/2023:13:35:00 +0800] "POST //xmlrpc.php HTTP/1.1" 200 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
139.59.127.180 - - [11/May/2023:13:35:01 +0800] "POST //xmlrpc.php HTTP/1.1" 200 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
139.59.127.180 - - [11/May/2023:13:35:01 +0800] "POST //xmlrpc.php HTTP/1.1" 200 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
139.59.127.180 - - [11/May/2023:13:35:02 +0800] "POST //xmlrpc.php HTTP/1.1" 200 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"

 

下午请教了一位大神,把我这个思路打通了:

我用postman 模仿对方的请求:

确实返回200, 但是解析错误:

faultCode -32700 faultString parse error. not well formed

欢迎来撩 : 汇总all

白眉大叔

关于白眉大叔linux云计算: 白眉大叔

热门文章