互联网上有很多游荡的恶意蜘蛛,这些程序流窜在各个网站,试图挖取点它们觉得有价值的文件。它们这样做是因为很多站长图方便,习惯把网站或者数据库压缩下,简单取个名字就直接丢网站服务器上了,以为没有公开链接,别人不知道。这些恶意爬虫程序就是针对这样的粗心大意的站长的。爬虫会大量发出Http请求,试探遍历各种常见的文件名,试图下载可能的压缩包。如果真的搞到了这些压缩包,一般来说,网站或者数据库的密码就暴露了,黑客们就可以攻入你的网站做各种坏事。这些恶意蜘蛛在爬取的时候,为了快速遍历,会多线程并发访问一个网站,请看IP是45.76.105.207的这个蜘蛛的疯狂表演:
[28/Apr/2019:03:25:32 +0800] 45.76.105.207 - 873 "http://www.egesckx.cn/db.zip" "HEAD http://www.egesckx.cn/db.zip" 404 235 892 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:33 +0800] 45.76.105.207 - 79 "http://www.egesckx.cn/db.tar.gz" "HEAD http://www.egesckx.cn/db.tar.gz" 403 241 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:35 +0800] 45.76.105.207 - 82 "http://www.egesckx.cn/data.rar" "HEAD http://www.egesckx.cn/data.rar" 403 239 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:35 +0800] 45.76.105.207 - 89 "http://www.egesckx.cn/data.tar.gz" "HEAD http://www.egesckx.cn/data.tar.gz" 403 245 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:36 +0800] 45.76.105.207 - 886 "http://www.egesckx.cn/data.tgz" "HEAD http://www.egesckx.cn/data.tgz" 404 239 894 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:37 +0800] 45.76.105.207 - 816 "http://www.egesckx.cn/web.zip" "HEAD http://www.egesckx.cn/web.zip" 404 237 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:37 +0800] 45.76.105.207 - 28 "http://www.egesckx.cn/web.rar" "HEAD http://www.egesckx.cn/web.rar" 403 237 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:37 +0800] 45.76.105.207 - 29 "http://www.egesckx.cn/web.tar.gz" "HEAD http://www.egesckx.cn/web.tar.gz" 403 243 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:39 +0800] 45.76.105.207 - 899 "http://www.egesckx.cn/wwwroot.zip" "HEAD http://www.egesckx.cn/wwwroot.zip" 404 245 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:39 +0800] 45.76.105.207 - 73 "http://www.egesckx.cn/wwwroot.rar" "HEAD http://www.egesckx.cn/wwwroot.rar" 403 245 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:40 +0800] 45.76.105.207 - 23 "http://www.egesckx.cn/wwwroot.tar.gz" "HEAD http://www.egesckx.cn/wwwroot.tar.gz" 403 251 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:42 +0800] 45.76.105.207 - 64 "http://www.egesckx.cn/database.rar" "HEAD http://www.egesckx.cn/database.rar" 403 247 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:42 +0800] 45.76.105.207 - 79 "http://www.egesckx.cn/database.tar.gz" "HEAD http://www.egesckx.cn/database.tar.gz" 403 253 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:43 +0800] 45.76.105.207 - 1159 "http://www.egesckx.cn/database.tgz" "HEAD http://www.egesckx.cn/database.tgz" 404 247 896 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:44 +0800] 45.76.105.207 - 1079 "http://www.egesckx.cn/www.zip" "HEAD http://www.egesckx.cn/www.zip" 404 237 897 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:44 +0800] 45.76.105.207 - 32 "http://www.egesckx.cn/www.rar" "HEAD http://www.egesckx.cn/www.rar" 403 237 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:45 +0800] 45.76.105.207 - 25 "http://www.egesckx.cn/www.tar.gz" "HEAD http://www.egesckx.cn/www.tar.gz" 403 243 703 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:47 +0800] 45.76.105.207 - 893 "http://www.egesckx.cn/code.zip" "HEAD http://www.egesckx.cn/code.zip" 404 239 894 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:47 +0800] 45.76.105.207 - 63 "http://www.egesckx.cn/code.rar" "HEAD http://www.egesckx.cn/code.rar" 403 239 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:47 +0800] 45.76.105.207 - 77 "http://www.egesckx.cn/code.tar.gz" "HEAD http://www.egesckx.cn/code.tar.gz" 403 245 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:50 +0800] 45.76.105.207 - 912 "http://www.egesckx.cn/htdocs.tgz" "HEAD http://www.egesckx.cn/htdocs.tgz" 404 243 894 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:56 +0800] 45.76.105.207 - 859 "http://www.egesckx.cn/public.tgz" "HEAD http://www.egesckx.cn/public.tgz" 404 243 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:57 +0800] 45.76.105.207 - 844 "http://www.egesckx.cn/test.zip" "HEAD http://www.egesckx.cn/test.zip" 404 239 892 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:57 +0800] 45.76.105.207 - 60 "http://www.egesckx.cn/test.rar" "HEAD http://www.egesckx.cn/test.rar" 403 239 703 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:57 +0800] 45.76.105.207 - 70 "http://www.egesckx.cn/test.tar.gz" "HEAD http://www.egesckx.cn/test.tar.gz" 403 245 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:58 +0800] 45.76.105.207 - 994 "http://www.egesckx.cn/test.tgz" "HEAD http://www.egesckx.cn/test.tgz" 404 239 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:59 +0800] 45.76.105.207 - 883 "http://www.egesckx.cn/admin.zip" "HEAD http://www.egesckx.cn/admin.zip" 404 241 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:00 +0800] 45.76.105.207 - 23 "http://www.egesckx.cn/admin.rar" "HEAD http://www.egesckx.cn/admin.rar" 403 241 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:00 +0800] 45.76.105.207 - 31 "http://www.egesckx.cn/admin.tar.gz" "HEAD http://www.egesckx.cn/admin.tar.gz" 403 247 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:01 +0800] 45.76.105.207 - 855 "http://www.egesckx.cn/admin.tgz" "HEAD http://www.egesckx.cn/admin.tgz" 404 241 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:07 +0800] 45.76.105.207 - 872 "http://www.egesckx.cn/sql.tgz" "HEAD http://www.egesckx.cn/sql.tgz" 404 237 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:10 +0800] 45.76.105.207 - 821 "http://www.egesckx.cn/cp.zip" "HEAD http://www.egesckx.cn/cp.zip" 404 235 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:10 +0800] 45.76.105.207 - 69 "http://www.egesckx.cn/cp.rar" "HEAD http://www.egesckx.cn/cp.rar" 403 235 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:10 +0800] 45.76.105.207 - 40 "http://www.egesckx.cn/cp.tar.gz" "HEAD http://www.egesckx.cn/cp.tar.gz" 403 241 700 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:15 +0800] 45.76.105.207 - 932 "http://www.egesckx.cn/666.zip" "HEAD http://www.egesckx.cn/666.zip" 404 237 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:15 +0800] 45.76.105.207 - 61 "http://www.egesckx.cn/666.rar" "HEAD http://www.egesckx.cn/666.rar" 403 237 702 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:15 +0800] 45.76.105.207 - 74 "http://www.egesckx.cn/666.tar.gz" "HEAD http://www.egesckx.cn/666.tar.gz" 403 243 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:17 +0800] 45.76.105.207 - 928 "http://www.egesckx.cn/888.zip" "HEAD http://www.egesckx.cn/888.zip" 404 237 892 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:17 +0800] 45.76.105.207 - 25 "http://www.egesckx.cn/888.rar" "HEAD http://www.egesckx.cn/888.rar" 403 237 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:18 +0800] 45.76.105.207 - 88 "http://www.egesckx.cn/888.tar.gz" "HEAD http://www.egesckx.cn/888.tar.gz" 403 243 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:19 +0800] 45.76.105.207 - 943 "http://www.egesckx.cn/888.tgz" "HEAD http://www.egesckx.cn/888.tgz" 404 237 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:23 +0800] 45.76.105.207 - 831 "http://www.egesckx.cn/dabao.tgz" "HEAD http://www.egesckx.cn/dabao.tgz" 404 241 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:36 +0800] 45.76.105.207 - 1810 "http://www.egesckx.cn/3.zip" "HEAD http://www.egesckx.cn/3.zip" 404 233 897 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:36 +0800] 45.76.105.207 - 38 "http://www.egesckx.cn/3.rar" "HEAD http://www.egesckx.cn/3.rar" 403 233 706 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:36 +0800] 45.76.105.207 - 33 "http://www.egesckx.cn/3.tar.gz" "HEAD http://www.egesckx.cn/3.tar.gz" 403 239 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:38 +0800] 45.76.105.207 - 817 "http://www.egesckx.cn/4.zip" "HEAD http://www.egesckx.cn/4.zip" 404 233 892 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:38 +0800] 45.76.105.207 - 34 "http://www.egesckx.cn/4.rar" "HEAD http://www.egesckx.cn/4.rar" 403 233 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:38 +0800] 45.76.105.207 - 78 "http://www.egesckx.cn/4.tar.gz" "HEAD http://www.egesckx.cn/4.tar.gz" 403 239 703 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:39 +0800] 45.76.105.207 - 893 "http://www.egesckx.cn/4.tgz" "HEAD http://www.egesckx.cn/4.tgz" 404 233 892 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:40 +0800] 45.76.105.207 - 898 "http://www.egesckx.cn/5.zip" "HEAD http://www.egesckx.cn/5.zip" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:40 +0800] 45.76.105.207 - 23 "http://www.egesckx.cn/5.rar" "HEAD http://www.egesckx.cn/5.rar" 403 233 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:40 +0800] 45.76.105.207 - 41 "http://www.egesckx.cn/5.tar.gz" "HEAD http://www.egesckx.cn/5.tar.gz" 403 239 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:41 +0800] 45.76.105.207 - 840 "http://www.egesckx.cn/5.tgz" "HEAD http://www.egesckx.cn/5.tgz" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:42 +0800] 45.76.105.207 - 912 "http://www.egesckx.cn/6.zip" "HEAD http://www.egesckx.cn/6.zip" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:42 +0800] 45.76.105.207 - 37 "http://www.egesckx.cn/6.rar" "HEAD http://www.egesckx.cn/6.rar" 403 233 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:43 +0800] 45.76.105.207 - 77 "http://www.egesckx.cn/6.tar.gz" "HEAD http://www.egesckx.cn/6.tar.gz" 403 239 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:45 +0800] 45.76.105.207 - 823 "http://www.egesckx.cn/7.tgz" "HEAD http://www.egesckx.cn/7.tgz" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:46 +0800] 45.76.105.207 - 28 "http://www.egesckx.cn/8.rar" "HEAD http://www.egesckx.cn/8.rar" 403 233 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:46 +0800] 45.76.105.207 - 27 "http://www.egesckx.cn/8.tar.gz" "HEAD http://www.egesckx.cn/8.tar.gz" 403 239 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:47 +0800] 45.76.105.207 - 872 "http://www.egesckx.cn/8.tgz" "HEAD http://www.egesckx.cn/8.tgz" 404 233 892 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:51 +0800] 45.76.105.207 - 841 "http://www.egesckx.cn/111.zip" "HEAD http://www.egesckx.cn/111.zip" 404 237 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:51 +0800] 45.76.105.207 - 68 "http://www.egesckx.cn/111.rar" "HEAD http://www.egesckx.cn/111.rar" 403 237 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:54 +0800] 45.76.105.207 - 893 "http://www.egesckx.cn/q.tgz" "HEAD http://www.egesckx.cn/q.tgz" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:57 +0800] 45.76.105.207 - 898 "http://www.egesckx.cn/w.tgz" "HEAD http://www.egesckx.cn/w.tgz" 404 233 892 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:58 +0800] 45.76.105.207 - 871 "http://www.egesckx.cn/e.zip" "HEAD http://www.egesckx.cn/e.zip" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:26:58 +0800] 45.76.105.207 - 26 "http://www.egesckx.cn/e.rar" "HEAD http://www.egesckx.cn/e.rar" 403 233 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:58 +0800] 45.76.105.207 - 77 "http://www.egesckx.cn/e.tar.gz" "HEAD http://www.egesckx.cn/e.tar.gz" 403 239 706 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:26:59 +0800] 45.76.105.207 - 849 "http://www.egesckx.cn/e.tgz" "HEAD http://www.egesckx.cn/e.tgz" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:27:00 +0800] 45.76.105.207 - 71 "http://www.egesckx.cn/r.tar.gz" "HEAD http://www.egesckx.cn/r.tar.gz" 403 239 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:27:05 +0800] 45.76.105.207 - 858 "http://www.egesckx.cn/y.zip" "HEAD http://www.egesckx.cn/y.zip" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:27:05 +0800] 45.76.105.207 - 77 "http://www.egesckx.cn/y.rar" "HEAD http://www.egesckx.cn/y.rar" 403 233 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:27:07 +0800] 45.76.105.207 - 887 "http://www.egesckx.cn/u.zip" "HEAD http://www.egesckx.cn/u.zip" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:27:07 +0800] 45.76.105.207 - 66 "http://www.egesckx.cn/u.rar" "HEAD http://www.egesckx.cn/u.rar" 403 233 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:27:08 +0800] 45.76.105.207 - 75 "http://www.egesckx.cn/u.tar.gz" "HEAD http://www.egesckx.cn/u.tar.gz" 403 239 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:27:09 +0800] 45.76.105.207 - 912 "http://www.egesckx.cn/u.tgz" "HEAD http://www.egesckx.cn/u.tgz" 404 233 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:27:10 +0800] 45.76.105.207 - 905 "http://www.egesckx.cn/i.zip" "HEAD http://www.egesckx.cn/i.zip" 404 233 891 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:27:10 +0800] 45.76.105.207 - 37 "http://www.egesckx.cn/i.rar" "HEAD http://www.egesckx.cn/i.rar" 403 233 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:27:10 +0800] 45.76.105.207 - 26 "http://www.egesckx.cn/i.tar.gz" "HEAD http://www.egesckx.cn/i.tar.gz" 403 239 700 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:30 +0800] 45.76.105.207 - 73 "http://www.egesckx.cn/wap.rar" "HEAD http://www.egesckx.cn/wap.rar" 403 237 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:30 +0800] 45.76.105.207 - 27 "http://www.egesckx.cn/wap.tar.gz" "HEAD http://www.egesckx.cn/wap.tar.gz" 403 243 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:06 +0800] 45.76.105.207 - 882 "http://www.egesckx.cn/backup.tgz" "HEAD http://www.egesckx.cn/backup.tgz" 404 243 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:08 +0800] 45.76.105.207 - 76 "http://www.egesckx.cn/%wwwroot%.tar.gz" "HEAD http://www.egesckx.cn/%25wwwroot%25.tar.gz" 403 259 705 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:09 +0800] 45.76.105.207 - 928 "http://www.egesckx.cn/%wwwroot%.tgz" "HEAD http://www.egesckx.cn/%25wwwroot%25.tgz" 404 253 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:14 +0800] 45.76.105.207 - 924 "http://www.egesckx.cn/site.zip" "HEAD http://www.egesckx.cn/site.zip" 404 239 893 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:21 +0800] 45.76.105.207 - 2836 "http://www.egesckx.cn/public.zip" "HEAD http://www.egesckx.cn/public.zip" 404 243 897 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:21 +0800] 45.76.105.207 - 268 "http://www.egesckx.cn/public.rar" "HEAD http://www.egesckx.cn/public.rar" 403 243 709 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
[28/Apr/2019:03:25:27 +0800] 45.76.105.207 - 2027 "http://www.egesckx.cn/app.zip" "HEAD http://www.egesckx.cn/app.zip" 404 237 897 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:31 +0800] 45.76.105.207 - 1273 "http://www.egesckx.cn/wap.tgz" "HEAD http://www.egesckx.cn/wap.tgz" 404 237 897 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=UTF-8"
[28/Apr/2019:03:25:32 +0800] 45.76.105.207 - 66 "http://www.egesckx.cn/db.rar" "HEAD http://www.egesckx.cn/db.rar" 403 235 704 MISS "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" "text/html; charset=iso-8859-1"
看到了吗?有没有脑洞打开?这些文件名是不是普通人经常用的?如果不幸用了这些名字,压缩包就会被下载到黑客的手中。
有站长说,我反正没这些文件在服务器上,我不怕。但你想过没,这样高并发的http请求会造成大量404错误,并且,如果你用了CDN的话,CDN上没这些文件的缓存,会直接回源到你的Web服务器,配置差一点的网站会cpu或内存100%,造成网站宕机。
这些恶意游荡的蜘蛛来自于全世界,防不胜防,虽然不是竞争对手的恶意行为,但同样对网站的威胁巨大。我见过最变态的一个蜘蛛访问WorkWin网站,孜孜不倦的试探了16个小时,发出了5万多个请求。要想防住这样的攻击,站长一定要养成经??赐炯嗫厝罩镜南肮?,如果发现问题严重,要考虑使用Web防火墙,配置CC攻击或者404捕获等防护策略。
★关于WorkWin公司电脑监控软件★
WorkWin的使命是打造Work用途的Windows 电脑系统,有效规范员工上网行为,让老板知道员工每天在做什么(监控包括屏幕、上网在内的一举一动),限制员工不能做什么(禁止网购、游戏、优盘等)。
WorkWin基于纯软件设计,小巧易用,无需添加或改动任何硬件,使用一台管理机监控全部员工机电脑。历经南京网亚十余年精心打造,此时此刻每天都有成千上万企业电脑正在运行WorkWin,选择WorkWin选择“赢"。
版权所有,南京网亚计算机有限公司 。本文链接地址: 你的网站为何卡?谁在攻击网站(二)?