☰

这是由机器人攻击造成的吗？

tag-icon • tag-icon php security
这是由机器人攻击造成的吗？

我今天检查了error_log，发现了这个可疑的：

    [Mon Nov 27 01:18:36 2011] [error] [client omitted] 
    File does not exist: /var/www/domain.com/htdocs/robots.txt
    [Mon Nov 27 01:18:45 2011] [error] [client omitted] 
    File does not exist: /var/www/domain.com/htdocs/robots.txt
    [Mon Nov 27 01:24:38 2011] [error] [client ommited] 
    script '/var/www/domain.com/htdocs/proxy-1.php' 
    not found or unable to stat
    [Mon Nov 27 01:24:57 2011] [error] [client omitted] 
    script '/var/www/domain.com/htdocs/judge112233.php' 
    not found or unable to stat

我之所以说可疑，是因为目前只有我一个人在使用这个网站，所以我知道所有的页面，而且我永远不会访问上述页面。那么，这是机器人攻击吗？

答案1

对我来说看起来更像是一个网络爬虫。

答案2

前两个可能是搜索引擎的爬虫，试图从robots.txt

答案3

如果您正在查看用户代理，最好也检查一下您找到的 IP。我曾使用伪造的 googleBot 用户代理标头检测过 DOS 攻击。版本 6.66 有点暴露了，但并没有有到。

答案4

阅读 ipmillion 上的一些评论后，我发现：

 These machines are not Hackers/Crackers at all,they have merely been 
 Compromised.A scan of several of these ip blocks reveals that the 
 Machines are not Fire walled or running any kind of Security.
 They have basically been hijacked and are now being used as D
rones,ie BOTNETS. As for the people who have Compromised them!! 
They could be any were in the World.

所以我想你没什么可担心的。

相关内容