Страница 1 из 1

Как узнать что мой сайт?

СообщениеДобавлено: 23 мар 2008, 15:35
User
Как узнать что мой сайт сканируют например XSpider

Re: Сканеры

СообщениеДобавлено: 23 мар 2008, 15:47
zk
Сканирование веб-сервера можно определить вручную просмотром его логов и поиском там ненормальных запросов.
Например там появляется нечто такое:
Код: Выделить всёРазвернуть
88.147.211.215 - - [06/Feb/2008:13:40:54 +0300] "GET /cgi-bin/viralator.cgi HTTP/1.0" 404 219
88.147.211.215 - - [06/Feb/2008:13:40:54 +0300] "GET /WEB-INF./web.xml HTTP/1.0" 404 214
88.147.211.215 - - [06/Feb/2008:13:40:54 +0300] "GET /sam._ HTTP/1.0" 404 203
88.147.211.215 - - [06/Feb/2008:13:40:54 +0300] "GET /....../autoexec.bat HTTP/1.0" 403 221
88.147.211.215 - - [06/Feb/2008:13:40:54 +0300] "GET /..../autoexec.bat HTTP/1.0" 403 219
88.147.211.215 - - [06/Feb/2008:13:40:54 +0300] "GET /....../etc/passwd HTTP/1.0" 403 219
88.147.211.215 - - [06/Feb/2008:13:40:54 +0300] "GET /cgi-bin/af.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd HTTP/1.0" 404 212
88.147.211.215 - - [06/Feb/2008:13:40:55 +0300] "GET /cgi-bin/alienform.cgi?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd HTTP/1.0" 404 219
88.147.211.215 - - [06/Feb/2008:13:40:55 +0300] "GET /cgi-bin/?_browser_out=.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2F.|.%2Fetc%2Fpasswd HTTP/1.0" 404 206
88.147.211.215 - - [06/Feb/2008:13:40:55 +0300] "GET /../../../../../../../../../etc/passwd HTTP/1.0" 400 226
88.147.211.215 - - [06/Feb/2008:13:40:55 +0300] "GET /../../../../../../../../../autoexec.bat HTTP/1.0" 400 226
88.147.253.175 - - [06/Feb/2008:13:40:55 +0300] "GET /images/games/pass.gif HTTP/1.1" 200 959
88.147.211.215 - - [06/Feb/2008:13:40:55 +0300] "GET /../../../../../../../../../boot.ini HTTP/1.0" 400 226
88.147.253.175 - - [06/Feb/2008:13:40:55 +0300] "GET /images/games/cs.gif HTTP/1.1" 200 1044
88.147.211.215 - - [06/Feb/2008:13:40:55 +0300] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/boot.ini HTTP/1.0" 400 226

Определять и блокировать сканирование можно например с помощью mod_security