我在网站日志中看到许多这样子的代码,
H10008878 220.181.158.218 - - [22/Sep/2016:10:49:14 +0800] "GET ../../../../../windows/win.ini HTTP/1.1" 400 226 "http://www.joincircuit.com/news/6/../../../../../../../../windows/win.ini" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; .NET CLR 1.1.4322)"
这个是百度蜘蛛吗?可是据我所知,ini是配置文件,get配置文件做什么呢?这个IP 220.181.158.218 是北京的,日志中有很多这样子的代码,实在不明白这是在干吗,如果索取配置文件,是不是说明有人在窃取网站代码做配置,网站有被镜像的可能性?
可是这个IP究竟是啥呢?
额 再补充下,还有许多这样子的代码
H10008878 220.181.158.218 - - [22/Sep/2016:10:49:15 +0800] "GET /..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini HTTP/1.1" 404 2267 "http://www.joincircuit.com/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; .NET CLR 1.1.4322)"
H10008878 220.181.158.218 - - [22/Sep/2016:10:49:16 +0800] "GET /css/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini HTTP/1.1" 404 2267 "http://www.joincircuit.com/css/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; .NET CLR 1.1.4322)"
乱七八糟,有点看不懂,这是在干啥?
百度蜘蛛 都有标识 现在的标识是baiduspider/
本文来自投稿,不代表微盟圈立场,如若转载,请注明出处:https://www.vm7.com/a/ask/43576.html
