我正在Apache CentOS上运行一个网站,上周有人通过打随机URL或试图猜测管理页面来使我烦恼。
该网页是用php构建的,在我的课程中,我将每个错误都记录到txt文件中。
在过去的几周里,我看到有人在打随机的URL或试图通过打乱随机的字符串作为网站URL后面的永久链接来猜测管理页面。
现在,我想知道如何找到试图访问这些页面的访客的IP地址。我已经尝试查看var / log / acces_log和error_log,但无法理解也无法成功找到尝试访问这些页面的IP。
这是今天早上我的日志的一部分:
[21.10.2018 10:09][2] require(pages/wp-login.php.php): failed to open stream: No such file or directory in /home/jeremy/domains/mysite.com/public_html/order/index.php on line 303
[21.10.2018 10:26][2] require(pages/delicious.php): failed to open stream: No such file or directory in /home/jeremy/domains/mysite.com/public_html/order/index.php on line 303
[21.10.2018 10:36][2] require(pages/javascript;.php): failed to open stream: No such file or directory in /home/jeremy/domains/mysite.com/public_html/order/index.php on line 303
[21.10.2018 10:46][2] require(pages/user.php): failed to open stream: No such file or directory in /home/jeremy/domains/mysite.com/public_html/order/index.php on line 303
[21.10.2018 10:46][2] require(pages/xmlrpc.php): failed to open stream: No such file or directory in /home/jeremy/domains/mysite.com/public_html/order/index.php on line 303
[21.10.2018 10:52][2] require(pages/contact.asp.php): failed to open stream: No such file or directory in /home/jeremy/domains/mysite.com/public_html/order/index.php on line 303
为清楚起见,当您尝试访问的页面不存在时,会发生这些错误,例如: mysite.com/stackoverflow将导致require(pages / stackoverflow);无法打开流。...
该网站未运行Wordpress btw,而是全部用php编写。