Как могут ломать ваш сайт

Мастер · 02 Янв., 2025, 11:58

Добрый день в добром новом году!

Сто лет в логи не заглядывал, но стоит это делать почаще - там бывает интересно.
Вот, например, как на-шару пытаются изъять что-то с вашего сайта

Код: log

20.236.249.81 - - [02/Jan/2025:01:26:34 +0500] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 196
92.255.57.58 - - [02/Jan/2025:06:59:47 +0500] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 1687
92.255.57.58 - - [02/Jan/2025:07:27:06 +0500] "GET /actuator/gateway/routes HTTP/1.1" 404 196
66.249.81.169 - - [02/Jan/2025:00:21:24 +0500] "GET /.well-known/traffic-advice HTTP/1.1" 404 196
208.110.70.42 - - [02/Jan/2025:01:00:22 +0500] "GET /restore.php HTTP/1.1" 404 196
213.180.203.234 - - [02/Jan/2025:09:29:13 +0500] "GET /forum/cron.php?ts=1735792140 HTTP/1.1" 301 244
146.70.108.62 - - [02/Jan/2025:03:51:00 +0500] "GET /.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:00 +0500] "GET /akl.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:00 +0500] "GET /akl.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:00 +0500] "GET /akl.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:00 +0500] "GET /akl.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:00 +0500] "GET /akl.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /akl.sytes.net.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /akl.sytes.net.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /akl.sytes.net.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /akl.sytes.net.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /akl.sytes.net.rar HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /akl.sytes.net.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /akl.sytes.net.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /akl.sytes.net.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /sytes.net.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /sytes.net.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /sytes.net.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /sytes.net.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /sytes.net.rar HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /sytes.net.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /sytes.net.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:01 +0500] "GET /sytes.net.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:02 +0500] "GET /akl.sytes.net.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:02 +0500] "GET /akl.sytes.net.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:02 +0500] "GET /akl.sytes.net.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:02 +0500] "GET /akl.sytes.net.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:02 +0500] "GET /akl.sytes.net.rar HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:02 +0500] "GET /akl.sytes.net.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:02 +0500] "GET /akl.sytes.net.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /.rar HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /1.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /akl.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /akl.rar HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /akl.sytes.net.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /akl.sytes.net.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /akl.sytes.net_db.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /akl.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /backup.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /data.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /database.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /db_backup.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /dbdump.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /dump.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /localhost.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /mysql.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /site.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /sql.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /temp.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:03 +0500] "GET /translate.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:04 +0500] "GET /.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:04 +0500] "GET /.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:04 +0500] "GET /db.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:04 +0500] "GET /mysqldump.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:04 +0500] "GET /users.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:04 +0500] "GET /wp-content/mysql.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:04 +0500] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:51:04 +0500] "GET /www.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:36 +0500] "GET /anklab.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:36 +0500] "GET /anklab.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:37 +0500] "GET /anklab.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:37 +0500] "GET /anklab.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.rar HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.rar HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.ru.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:38 +0500] "GET /anklab.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /1.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /anklab.ru.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /anklab.ru_db.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /backup.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /data.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /database.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /db.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /db_backup.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /dbdump.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /dump.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /localhost.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /mysql.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /mysqldump.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /site.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /sql.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /temp.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /translate.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /users.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /wp-content/mysql.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:39 +0500] "GET /www.sql HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:40 +0500] "GET /anklab.rar HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /ru.7z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /ru.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /ru.db HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /ru.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /ru.rar HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /ru.tar.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /ru.tar.z HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:48 +0500] "GET /ru.zip HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:49 +0500] "GET /.bz2 HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:49 +0500] "GET /.gz HTTP/1.1" 404 196
146.70.108.62 - - [02/Jan/2025:03:59:49 +0500] "GET /.rar HTTP/1.1" 404 196

Код: c

185.224.128.43 - - [02/Jan/2025:03:55:31 +0500] "GET /_profiler/phpinfo.php HTTP/1.1" 404 196
185.224.128.43 - - [02/Jan/2025:03:55:37 +0500] "GET /_profiler/phpinfo HTTP/1.1" 404 196
185.224.128.43 - - [02/Jan/2025:04:21:28 +0500] "GET /_profiler/phpinfo HTTP/1.1" 404 196
185.224.128.43 - - [02/Jan/2025:04:21:28 +0500] "GET /_profiler/phpinfo.php HTTP/1.1" 404 196

Код: php

185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env.prod HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env.backup HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env.stage HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env.old HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env_sample HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env. HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env.dev.local HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env.prod.local HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env.development.local HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env.production HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:55:59 +0500] "GET /.env.example HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env_1 HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env.live HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /api/.env HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env.local HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env.anklab HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env.www HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env.bak HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env.save HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env.production.local HTTP/1.1" 404 196
185.196.9.220 - - [02/Jan/2025:14:56:00 +0500] "GET /.env.dev HTTP/1.1" 404 196

В последнее время массово стали происходит попытки перехвата чужих сессий

Код: asm

100.28.118.16 - - [01/Jan/2025:23:34:34 +0500] "GET /forum/index.php?PHPSESSID=i545hm32vfp3jau1n0u7at5pfq&msg=968 HTTP/1.1" 302 20
100.28.133.214 - - [01/Jan/2025:23:26:46 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D54.0;attach%3D4286 HTTP/1.1" 404 38
100.28.204.82 - - [01/Jan/2025:23:22:34 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D72.0;attach%3D1471;image HTTP/1.1" 404 38
100.28.44.58 - - [02/Jan/2025:00:17:14 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D242.0;attach%3D6638 HTTP/1.1" 404 38
100.28.49.152 - - [01/Jan/2025:23:26:50 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D74.0;attach%3D1589;image HTTP/1.1" 404 38
100.28.57.133 - - [01/Jan/2025:23:23:34 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D9.0;attach%3D3925 HTTP/1.1" 404 38
100.29.107.38 - - [01/Jan/2025:23:43:47 +0500] "GET /forum/index.php?PHPSESSID=tc5f3ou9m505sh6m8a98l47rj0&action=dlattach;topic%3D54.0;attach%3D4265 HTTP/1.1" 404 38
100.29.128.75 - - [01/Jan/2025:23:23:02 +0500] "GET /forum/index.php?PHPSESSID=tc5f3ou9m505sh6m8a98l47rj0&action=dlattach;topic%3D54.0;attach%3D4279;image HTTP/1.1" 404 38
100.29.155.89 - - [01/Jan/2025:23:36:14 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D72.0;attach%3D1517;image HTTP/1.1" 404 38
100.29.160.53 - - [02/Jan/2025:00:41:10 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D49.0;attach%3D476 HTTP/1.1" 404 38
100.29.164.178 - - [02/Jan/2025:00:25:02 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D13.0;attach%3D1948;image HTTP/1.1" 404 38
100.29.34.97 - - [01/Jan/2025:23:39:10 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D80.0;attach%3D2186;image HTTP/1.1" 404 38
100.29.63.24 - - [01/Jan/2025:23:31:18 +0500] "GET /forum/index.php?PHPSESSID=jcar6r6c0u2m4rmh7fm71gct07&action=dlattach;topic%3D80.0;attach%3D1859;image HTTP/1.1" 404 38

проблема заключается в том, что софт, похоже, работает в одном месте, но вот IP подставляются на каждый запрос разные, из-за чего блокировка по IP скорее всего будет неэффективна.

Вот попытки сходу зарегистрироваться и залогиниться

Код: text

158.69.119.14 - - [02/Jan/2025:09:35:42 +0500] "GET /forum/index.php?action=verificationcode;vid=register;rand=793dfc8754d1ff7d35ddb85b6305fc43 HTTP/1.0" 200 1215
158.69.119.14 - - [02/Jan/2025:09:35:44 +0500] "POST /forum/index.php?action=signup2 HTTP/1.0" 200 15959
158.69.119.14 - - [02/Jan/2025:09:35:56 +0500] "GET /forum/index.php?action=verificationcode;vid=register;rand=5131fd421f0da91790b7f7e566d2dae6 HTTP/1.0" 200 1357
158.69.119.14 - - [02/Jan/2025:09:35:59 +0500] "POST /forum/index.php?action=signup2 HTTP/1.0" 200 16009
158.69.119.14 - - [02/Jan/2025:09:36:11 +0500] "GET /forum/index.php?action=verificationcode;vid=register;rand=792f4bd7a1bf7d7b8c3147ed69ccb1c8 HTTP/1.0" 200 1323
158.69.119.14 - - [02/Jan/2025:09:36:13 +0500] "POST /forum/index.php?action=signup2 HTTP/1.0" 200 15955
158.69.119.14 - - [02/Jan/2025:09:36:26 +0500] "GET /forum/index.php?action=verificationcode;vid=register;rand=eee28b9ebac5f89bf74d57d40c0847f4 HTTP/1.0" 200 1409
158.69.119.14 - - [02/Jan/2025:09:36:27 +0500] "POST /forum/index.php?action=signup2 HTTP/1.0" 200 15990
158.69.119.14 - - [02/Jan/2025:09:36:29 +0500] "GET /forum/index.php?action=login HTTP/1.0" 200 10475
158.69.119.14 - - [02/Jan/2025:09:36:30 +0500] "POST /forum/index.php?action=login2 HTTP/1.0" 200 10471
158.69.119.14 - - [02/Jan/2025:10:27:00 +0500] "GET /forum/?sslRedirect HTTP/1.0" 200 30058

На простой перебор можно подставлять какие-то мусорные файлы, но это по-любому будет тратой траффика.
На кое-что я сделал редирект на гугель, но понятия не имею, как оно на той стороне. Ну, траффик по крайней мере минимальный, сравним с простой ошибкой.
Ну а попытки редиректов - это уже старо как мир

Код: text

192.95.30.12 - - [02/Jan/2025:06:29:23 +0500] "GET /GuestBook//%22http://$url/%22 HTTP/1.1" 403 199
192.95.30.12 - - [02/Jan/2025:06:29:25 +0500] "GET /GuestBook//%22mailto:$mail/%22 HTTP/1.1" 403 199

А как вы выходите из таких ситуаций?

зы: То, что все эти запросы растут из одного места, говорит то, что PHPSESSID в движке не используется из-за лёгкости перехвата, сам хеш удивительно одинаковый для множества адресов из пулов как будто находящихся в разных странах, и самое главное - запросы иногда прекращаются на час-полтора, все сразу. Затем также начинаются, также все сразу.

Slabovik · 03 Янв., 2025, 23:04

А это не поисковики шалят?
Возможно, стоит глянуть на предмет, не поисковики ли это?
Вот здесь, например: https://ipinfo.io/ips/185.196.9.0/24
или вот: https://ip2whois.ru/ip_range/32085
Это я быстренько забил 185.196... гм... две разных базы предлагают два разных ответа... мутно, да...

146.70.108.62 - это vpn откуда-то из нидерландов...

Я бы не особо пока волновался - раз движок игнорирует такие неправильные запросы - пусть дальше игнорирует.
А по поводу ботов-спамеров, возможно, CleanTalk поможет: https://cleantalk.org/ru/help/install-smf
Правда, они денежек за год хотят, хотя на мой взгляд вполне скромно.

Мастер · 06 Янв., 2025, 01:19

Может и поисковики. Только есть убеждение, что поисковики не должны так фривольно оперировать строкой запроса - она таки должна отражать реальное дерево сайта, а не как попало. Просто потому что сайт таки выдаст что-то, но это будет страница перенаправления, заглавная или что-то подобное. А это траффик. Вот иллюстрация

↓ спойлер ↓

[свернуть]

Здесь поставлен блок на пару адресов, делающих массово вот такие запросы

Код: log

4.227.36.2 - - [05/Jan/2025:21:26:49 +0500] "GET /forum/index.php?PHPSESSID=vsbnos5agbcto0jmnohurhjkkn&board=28.0%3Bsort%3Dreplies HTTP/1.1" 200 6175
4.227.36.2 - - [05/Jan/2025:21:26:50 +0500] "GET /forum/index.php?PHPSESSID=d0j4hslh2jn9e3ak16nt1gj4f4&amp%3Btopic=140.0 HTTP/1.1" 200 6449
4.227.36.2 - - [05/Jan/2025:21:26:51 +0500] "GET /forum/index.php?PHPSESSID=jcfpi9farv030psm41ivdspb43&board=22.0%3Bsort%3Dreplies HTTP/1.1" 200 4766
4.227.36.2 - - [05/Jan/2025:21:26:52 +0500] "GET /forum/index.php?PHPSESSID=f9okskqc3k8v520euuprhif6j5&board=21.0%3Bsort%3Dsubject HTTP/1.1" 200 4826
4.227.36.2 - - [05/Jan/2025:21:26:54 +0500] "GET /forum/index.php?PHPSESSID=e2ugir4p1l2r0r91oisujd20e9&amp%3Btopic=169.0 HTTP/1.1" 200 6413
4.227.36.2 - - [05/Jan/2025:21:26:55 +0500] "GET /forum/index.php?PHPSESSID=vkcmnescbtiv505i2ckm5c471h&amp%3Btopic=168.0 HTTP/1.1" 200 6430
4.227.36.2 - - [05/Jan/2025:21:26:56 +0500] "GET /forum/index.php?PHPSESSID=e2ugir4p1l2r0r91oisujd20e9&board=28.0%3Bsort%3Dstarter HTTP/1.1" 200 6146
4.227.36.2 - - [05/Jan/2025:21:26:57 +0500] "GET /forum/index.php?PHPSESSID=e2ugir4p1l2r0r91oisujd20e9&amp%3Btopic=201.0 HTTP/1.1" 200 6456
4.227.36.2 - - [05/Jan/2025:21:26:59 +0500] "GET /forum/index.php?PHPSESSID=2rv3m6u9tg45ia941bg1g9uvr1&amp%3Btopic=201.0 HTTP/1.1" 200 6460
4.227.36.2 - - [05/Jan/2025:21:27:00 +0500] "GET /forum/index.php?PHPSESSID=f9okskqc3k8v520euuprhif6j5&amp%3Btopic=172.0 HTTP/1.1" 200 6481
4.227.36.2 - - [05/Jan/2025:21:27:01 +0500] "GET /forum/index.php?PHPSESSID=62oes2ddrt5ggu59u12cc4e8s0&amp%3Btopic=122.0 HTTP/1.1" 200 6443
4.227.36.2 - - [05/Jan/2025:21:27:03 +0500] "GET /forum/index.php?PHPSESSID=un2u5sta64qv7cnb1hmk8lif0u&board=14.0%3Bsort%3Dsubject HTTP/1.1" 200 4346
4.227.36.2 - - [05/Jan/2025:21:27:05 +0500] "GET /forum/index.php?PHPSESSID=e2ugir4p1l2r0r91oisujd20e9&amp%3Btopic=246.0 HTTP/1.1" 200 6473
4.227.36.2 - - [05/Jan/2025:21:27:07 +0500] "GET /forum/index.php?PHPSESSID=nlmnarih7anbicqamvvlun79t1&amp%3Btopic=221.0 HTTP/1.1" 200 6428
4.227.36.2 - - [05/Jan/2025:21:27:08 +0500] "GET /forum/index.php?PHPSESSID=50jd8mptj7j7g3mppuqp02tpp6&amp%3Btopic=208.0 HTTP/1.1" 200 6452
4.227.36.2 - - [05/Jan/2025:21:27:09 +0500] "GET /forum/index.php?PHPSESSID=u0qn25akpe78e4drmivof6cf65&board=13.0%3Bsort%3Dstarter HTTP/1.1" 200 4247
4.227.36.2 - - [05/Jan/2025:21:27:10 +0500] "GET /forum/index.php?PHPSESSID=kg7a9tr7mlpchlm1er1t3ghha3&amp%3Btopic=220.0 HTTP/1.1" 200 6417
4.227.36.2 - - [05/Jan/2025:21:27:11 +0500] "GET /forum/index.php?PHPSESSID=r5v8bpr2jvc25d5dsap3mp2hk5&amp%3Btopic=174.0 HTTP/1.1" 200 6484
4.227.36.2 - - [05/Jan/2025:21:27:12 +0500] "GET /forum/index.php?PHPSESSID=sr7tmqak1gtbuj8t228u99ri2k&amp%3Btopic=208.0 HTTP/1.1" 200 6434
4.227.36.2 - - [05/Jan/2025:21:27:14 +0500] "GET /forum/index.php?PHPSESSID=ng0pjbt37vmuj30o29j1p11k6p&amp%3Btopic=181.0 HTTP/1.1" 200 6433
4.227.36.2 - - [05/Jan/2025:21:27:14 +0500] "GET /forum/index.php?PHPSESSID=nlmnarih7anbicqamvvlun79t1&board=24.0%3Bsort%3Dreplies HTTP/1.1" 200 4937
4.227.36.2 - - [05/Jan/2025:21:27:15 +0500] "GET /forum/index.php?PHPSESSID=jm2l85e4tju5pacriv1im14uf3&board=10.0%3Bsort%3Dstarter HTTP/1.1" 200 5591
4.227.36.2 - - [05/Jan/2025:21:27:17 +0500] "GET /forum/index.php?PHPSESSID=cdlv9ofuud5uaqhohqlk68c5gq&board=16.0%3Bsort%3Dsubject HTTP/1.1" 200 6320
208.110.70.42 - - [05/Jan/2025:21:27:17 +0500] "GET /restore.php HTTP/1.1" 301 247
4.227.36.2 - - [05/Jan/2025:21:27:18 +0500] "GET /forum/index.php?PHPSESSID=e2ugir4p1l2r0r91oisujd20e9&board=16.0%3Bsort%3Dstarter HTTP/1.1" 200 6282
4.227.36.2 - - [05/Jan/2025:21:27:19 +0500] "GET /forum/index.php?PHPSESSID=nlmnarih7anbicqamvvlun79t1&board=15.0%3Bsort%3Dreplies HTTP/1.1" 200 4221
4.227.36.2 - - [05/Jan/2025:21:27:21 +0500] "GET /forum/index.php?PHPSESSID=2kcs16kb3q58aj62296m272vth&amp%3Btopic=138.0 HTTP/1.1" 200 6408
4.227.36.2 - - [05/Jan/2025:21:27:23 +0500] "GET /forum/index.php?PHPSESSID=u0qn25akpe78e4drmivof6cf65&amp%3Btopic=188.0 HTTP/1.1" 200 6405
4.227.36.2 - - [05/Jan/2025:21:27:25 +0500] "GET /forum/index.php?PHPSESSID=qldbrogb4t0cimn67midh4l0ac&amp%3Baction=profile%3Bu%3D25 HTTP/1.1" 200 6415
4.227.36.2 - - [05/Jan/2025:21:27:27 +0500] "GET /forum/index.php?PHPSESSID=kg7a9tr7mlpchlm1er1t3ghha3&board=13.0%3Bsort%3Dreplies HTTP/1.1" 200 4211
4.227.36.2 - - [05/Jan/2025:21:27:30 +0500] "GET /forum/index.php?PHPSESSID=jcfpi9farv030psm41ivdspb43&board=13.0%3Bsort%3Dsubject HTTP/1.1" 200 4187
4.227.36.2 - - [05/Jan/2025:21:27:33 +0500] "GET /forum/index.php?PHPSESSID=5su91bq3366gmtb4o0o3tavv7a&board=24.0%3Bsort%3Dstarter HTTP/1.1" 200 4928
4.227.36.2 - - [05/Jan/2025:21:27:34 +0500] "GET /forum/index.php?PHPSESSID=omhshnelsdtm1ucg0rqqnsuai3&amp%3Baction=profile%3Bu%3D12 HTTP/1.1" 200 6473
4.227.36.2 - - [05/Jan/2025:21:27:35 +0500] "GET /forum/index.php?PHPSESSID=u0qn25akpe78e4drmivof6cf65&amp%3Btopic=205.0 HTTP/1.1" 200 6427
4.227.36.2 - - [05/Jan/2025:21:27:36 +0500] "GET /forum/index.php?PHPSESSID=un2u5sta64qv7cnb1hmk8lif0u&board=20.0%3Bsort%3Dsubject HTTP/1.1" 200 4236
4.227.36.2 - - [05/Jan/2025:21:27:37 +0500] "GET /forum/index.php?PHPSESSID=2kcs16kb3q58aj62296m272vth&board=14.0%3Bsort%3Dreplies HTTP/1.1" 200 4298
4.227.36.2 - - [05/Jan/2025:21:27:38 +0500] "GET /forum/index.php?PHPSESSID=kg7a9tr7mlpchlm1er1t3ghha3&board=20.0%3Bsort%3Dstarter HTTP/1.1" 200 4266
4.227.36.2 - - [05/Jan/2025:21:27:39 +0500] "GET /forum/index.php?PHPSESSID=riid06ps5jtrsv9t759ehk6hvh&board=17.0%3Bsort%3Dsubject HTTP/1.1" 200 6202
4.227.36.2 - - [05/Jan/2025:21:27:40 +0500] "GET /forum/index.php?PHPSESSID=vsbnos5agbcto0jmnohurhjkkn&amp%3Btopic=115.0 HTTP/1.1" 200 6449
4.227.36.2 - - [05/Jan/2025:21:27:41 +0500] "GET /forum/index.php?PHPSESSID=aq8ra9uml8ettb0gssbf19l0eg&amp%3Baction=profile%3Bu%3D16 HTTP/1.1" 200 6483
4.227.36.2 - - [05/Jan/2025:21:27:43 +0500] "GET /forum/index.php?PHPSESSID=1eto3anjeavt0uig6huj7eealn&board=17.0%3Bsort%3Dreplies HTTP/1.1" 200 6291
4.227.36.2 - - [05/Jan/2025:21:27:44 +0500] "GET /forum/index.php?PHPSESSID=f9okskqc3k8v520euuprhif6j5&amp%3Btopic=105.0 HTTP/1.1" 200 6409
4.227.36.2 - - [05/Jan/2025:21:27:45 +0500] "GET /forum/index.php?PHPSESSID=d0j4hslh2jn9e3ak16nt1gj4f4&amp%3Btopic=49.200 HTTP/1.1" 200 6462
4.227.36.2 - - [05/Jan/2025:21:27:46 +0500] "GET /forum/index.php?PHPSESSID=5me8q5ck0nltrdb09b8l4jrpl0&amp%3Btopic=222.0 HTTP/1.1" 200 6444
4.227.36.2 - - [05/Jan/2025:21:27:47 +0500] "GET /forum/index.php?PHPSESSID=50jd8mptj7j7g3mppuqp02tpp6&board=20.0%3Bsort%3Dsubject HTTP/1.1" 200 4326
4.227.36.2 - - [05/Jan/2025:21:27:48 +0500] "GET /forum/index.php?PHPSESSID=50jd8mptj7j7g3mppuqp02tpp6&board=17.0%3Bsort%3Dreplies HTTP/1.1" 200 6239
4.227.36.2 - - [05/Jan/2025:21:27:49 +0500] "GET /forum/index.php?PHPSESSID=9glumeu1fmffggl99nkjc5mamf&amp%3Btopic=195.0 HTTP/1.1" 200 6446
4.227.36.2 - - [05/Jan/2025:21:27:50 +0500] "GET /forum/index.php?PHPSESSID=f9okskqc3k8v520euuprhif6j5&board=14.0%3Bsort%3Dstarter HTTP/1.1" 200 4272
4.227.36.2 - - [05/Jan/2025:21:27:51 +0500] "GET /forum/index.php?PHPSESSID=1eto3anjeavt0uig6huj7eealn&amp%3Btopic=244.0 HTTP/1.1" 200 6499
4.227.36.2 - - [05/Jan/2025:21:27:52 +0500] "GET /forum/index.php?PHPSESSID=fa0q92ct158gqkvbncpdunhvfs&amp%3Baction=profile%3Bu%3D15 HTTP/1.1" 200 6427
4.227.36.2 - - [05/Jan/2025:21:27:53 +0500] "GET /forum/index.php?PHPSESSID=6ms3mnjmv09k883k7lfat2uvn2&amp%3Btopic=70.msg639 HTTP/1.1" 200 6474
4.227.36.2 - - [05/Jan/2025:21:27:55 +0500] "GET /forum/index.php?PHPSESSID=vsbnos5agbcto0jmnohurhjkkn&board=16.0%3Bsort%3Dreplies HTTP/1.1" 200 6352
4.227.36.2 - - [05/Jan/2025:21:27:56 +0500] "GET /forum/index.php?PHPSESSID=2kcs16kb3q58aj62296m272vth&amp%3Btopic=120.0 HTTP/1.1" 200 6424
4.227.36.2 - - [05/Jan/2025:21:27:57 +0500] "GET /forum/index.php?PHPSESSID=vsbnos5agbcto0jmnohurhjkkn&board=24.0%3Bsort%3Dsubject HTTP/1.1" 200 4935
4.227.36.2 - - [05/Jan/2025:21:27:58 +0500] "GET /forum/index.php?PHPSESSID=e2ugir4p1l2r0r91oisujd20e9&amp%3Btopic=145.0 HTTP/1.1" 200 6421
4.227.36.2 - - [05/Jan/2025:21:27:59 +0500] "GET /forum/index.php?PHPSESSID=jm2l85e4tju5pacriv1im14uf3&board=11.0%3Bsort%3Dreplies HTTP/1.1" 200 4700
4.227.36.2 - - [05/Jan/2025:21:28:01 +0500] "GET /forum/index.php?PHPSESSID=vsbnos5agbcto0jmnohurhjkkn&amp%3Btopic=180.0 HTTP/1.1" 200 6450
4.227.36.2 - - [05/Jan/2025:21:28:01 +0500] "GET /forum/index.php?PHPSESSID=41rcfk143nvs70hfm52cactds2&amp%3Btopic=201.0 HTTP/1.1" 200 6433
4.227.36.2 - - [05/Jan/2025:21:28:03 +0500] "GET /forum/index.php?PHPSESSID=cdlv9ofuud5uaqhohqlk68c5gq&amp%3Btopic=163.0 HTTP/1.1" 200 6426
4.227.36.2 - - [05/Jan/2025:21:28:07 +0500] "GET /forum/index.php?PHPSESSID=k27jlo1ug06rtuiig0ubssch8m&board=28.0%3Bsort%3Dstarter HTTP/1.1" 200 6166
4.227.36.2 - - [05/Jan/2025:21:28:13 +0500] "GET /forum/index.php?PHPSESSID=j2b06ftui23pqcum32koihrb9v&board=14.0%3Bsort%3Dstarter HTTP/1.1" 200 4232
4.227.36.2 - - [05/Jan/2025:21:28:15 +0500] "GET /forum/index.php?PHPSESSID=nlmnarih7anbicqamvvlun79t1&board=17.0%3Bsort%3Dreplies HTTP/1.1" 200 6241
4.227.36.2 - - [05/Jan/2025:21:28:16 +0500] "GET /forum/index.php?PHPSESSID=j2b06ftui23pqcum32koihrb9v&amp%3Btopic=173.0 HTTP/1.1" 200 6464
4.227.36.2 - - [05/Jan/2025:21:28:18 +0500] "GET /forum/index.php?PHPSESSID=jm2l85e4tju5pacriv1im14uf3&amp%3Btopic=209.0 HTTP/1.1" 200 6426
4.227.36.2 - - [05/Jan/2025:21:28:19 +0500] "GET /forum/index.php?PHPSESSID=jtcb7mp0ovick5vinur2fea1gv&amp%3Btopic=55.25 HTTP/1.1" 200 6453
4.227.36.2 - - [05/Jan/2025:21:28:21 +0500] "GET /forum/index.php?PHPSESSID=62oes2ddrt5ggu59u12cc4e8s0&amp%3Btopic=55.25 HTTP/1.1" 200 6483
4.227.36.2 - - [05/Jan/2025:21:28:23 +0500] "GET /forum/index.php?PHPSESSID=e2ugir4p1l2r0r91oisujd20e9&amp%3Btopic=129.0 HTTP/1.1" 200 6479
4.227.36.2 - - [05/Jan/2025:21:28:25 +0500] "GET /forum/index.php?PHPSESSID=vsbnos5agbcto0jmnohurhjkkn&board=28.0%3Bsort%3Dsubject HTTP/1.1" 200 6217
4.227.36.2 - - [05/Jan/2025:21:28:26 +0500] "GET /forum/index.php?PHPSESSID=d0j4hslh2jn9e3ak16nt1gj4f4&board=21.0%3Bsort%3Dsubject HTTP/1.1" 200 4824
4.227.36.2 - - [05/Jan/2025:21:28:28 +0500] "GET /forum/index.php?PHPSESSID=jtcb7mp0ovick5vinur2fea1gv&amp%3Btopic=145.0 HTTP/1.1" 200 6439
4.227.36.2 - - [05/Jan/2025:21:28:49 +0500] "GET /forum/index.php?PHPSESSID=jm2l85e4tju5pacriv1im14uf3&amp%3Btopic=77.0 HTTP/1.1" 200 6501
4.227.36.2 - - [05/Jan/2025:21:28:51 +0500] "GET /forum/index.php?PHPSESSID=ugr39gohljnir0safmd3f430mn&amp%3Baction=profile%3Bu%3D3 HTTP/1.1" 200 6427
4.227.36.2 - - [05/Jan/2025:21:28:54 +0500] "GET /forum/index.php?PHPSESSID=kg7a9tr7mlpchlm1er1t3ghha3&board=4.0%3Bsort%3Dstarter HTTP/1.1" 200 7047
4.227.36.2 - - [05/Jan/2025:21:28:57 +0500] "GET /forum/index.php?PHPSESSID=2kcs16kb3q58aj62296m272vth&amp%3Btopic=52.0 HTTP/1.1" 200 6473
4.227.36.2 - - [05/Jan/2025:21:28:59 +0500] "GET /forum/index.php?PHPSESSID=kg7a9tr7mlpchlm1er1t3ghha3&action=recent%3Bstart%3D90 HTTP/1.1" 404 2926
4.227.36.2 - - [05/Jan/2025:21:29:01 +0500] "GET /forum/index.php?PHPSESSID=ipfqoj1dlluq60inghkuhtttgg&amp%3Btopic=94.0 HTTP/1.1" 200 6450
4.227.36.2 - - [05/Jan/2025:21:29:03 +0500] "GET /forum/index.php?PHPSESSID=riid06ps5jtrsv9t759ehk6hvh&amp%3Btopic=68.0 HTTP/1.1" 200 6456
4.227.36.2 - - [05/Jan/2025:21:29:05 +0500] "GET /forum/index.php?PHPSESSID=kg7a9tr7mlpchlm1er1t3ghha3&amp%3Baction=profile%3Bu%3D7 HTTP/1.1" 200 6475
4.227.36.2 - - [05/Jan/2025:21:29:06 +0500] "GET /forum/index.php?PHPSESSID=6ms3mnjmv09k883k7lfat2uvn2&board=6.0%3Bsort%3Dreplies HTTP/1.1" 200 4217
4.227.36.2 - - [05/Jan/2025:21:29:08 +0500] "GET /forum/index.php?PHPSESSID=3uo4anmm4s304dq8koc75hin2f&amp%3Baction=profile%3Bu%3D2 HTTP/1.1" 200 6435
4.227.36.2 - - [05/Jan/2025:21:29:09 +0500] "GET /forum/index.php?PHPSESSID=un2u5sta64qv7cnb1hmk8lif0u&amp%3Btopic=87.0 HTTP/1.1" 200 6469
4.227.36.2 - - [05/Jan/2025:21:29:10 +0500] "GET /forum/index.php?PHPSESSID=d0j4hslh2jn9e3ak16nt1gj4f4&amp%3Btopic=88.0 HTTP/1.1" 200 6492
4.227.36.2 - - [05/Jan/2025:21:29:12 +0500] "GET /forum/index.php?PHPSESSID=6ms3mnjmv09k883k7lfat2uvn2&board=4.0%3Bsort%3Dstarter HTTP/1.1" 200 7103
4.227.36.2 - - [05/Jan/2025:21:29:13 +0500] "GET /forum/index.php?PHPSESSID=62oes2ddrt5ggu59u12cc4e8s0&board=2.0%3Bsort%3Dsubject HTTP/1.1" 200 4782
4.227.36.2 - - [05/Jan/2025:21:29:15 +0500] "GET /forum/index.php?PHPSESSID=d0j4hslh2jn9e3ak16nt1gj4f4&amp%3Btopic=93.0 HTTP/1.1" 200 6469
4.227.36.2 - - [05/Jan/2025:21:29:16 +0500] "GET /forum/index.php?PHPSESSID=jtcb7mp0ovick5vinur2fea1gv&board=1.0%3Bsort%3Dstarter HTTP/1.1" 200 4447
4.227.36.2 - - [05/Jan/2025:21:29:18 +0500] "GET /forum/index.php?PHPSESSID=50jd8mptj7j7g3mppuqp02tpp6&board=9.0%3Bsort%3Dstarter HTTP/1.1" 200 4254
4.227.36.2 - - [05/Jan/2025:21:29:20 +0500] "GET /forum/index.php?PHPSESSID=5su91bq3366gmtb4o0o3tavv7a&amp%3Btopic=47.0 HTTP/1.1" 200 6462
4.227.36.2 - - [05/Jan/2025:21:29:22 +0500] "GET /forum/index.php?PHPSESSID=q1sn8epbfv86tdokcji0ui1hq4&amp%3Btopic=12.0 HTTP/1.1" 200 6417
4.227.36.2 - - [05/Jan/2025:21:29:24 +0500] "GET /forum/index.php?PHPSESSID=6ms3mnjmv09k883k7lfat2uvn2&board=3.0%3Bsort%3Dstarter HTTP/1.1" 200 5211
4.227.36.2 - - [05/Jan/2025:21:29:27 +0500] "GET /forum/index.php?PHPSESSID=khrokiqd80dvigtep1mm2ddr37&board=8.0%3Bsort%3Dsubject HTTP/1.1" 200 4351
4.227.36.2 - - [05/Jan/2025:21:29:30 +0500] "GET /forum/index.php?PHPSESSID=j2b06ftui23pqcum32koihrb9v&board=4.0%3Bsort%3Dsubject HTTP/1.1" 200 7062
4.227.36.2 - - [05/Jan/2025:21:29:33 +0500] "GET /forum/index.php?PHPSESSID=cdlv9ofuud5uaqhohqlk68c5gq&board=9.0%3Bsort%3Dsubject HTTP/1.1" 200 4274
4.227.36.2 - - [05/Jan/2025:21:29:34 +0500] "GET /forum/index.php?PHPSESSID=f9okskqc3k8v520euuprhif6j5&amp%3Btopic=10.0 HTTP/1.1" 200 6500
4.227.36.2 - - [05/Jan/2025:21:29:36 +0500] "GET /forum/index.php?PHPSESSID=d0j4hslh2jn9e3ak16nt1gj4f4&board=4.0%3Bsort%3Dsubject HTTP/1.1" 200 7145
4.227.36.2 - - [05/Jan/2025:21:29:37 +0500] "GET /forum/index.php?PHPSESSID=6ms3mnjmv09k883k7lfat2uvn2&board=5.0%3Bsort%3Dreplies HTTP/1.1" 200 5091
4.227.36.2 - - [05/Jan/2025:21:29:37 +0500] "GET /forum/index.php?PHPSESSID=ipfqoj1dlluq60inghkuhtttgg&amp%3Btopic=89.0 HTTP/1.1" 200 6407
4.227.36.2 - - [05/Jan/2025:21:29:39 +0500] "GET /forum/index.php?PHPSESSID=50jd8mptj7j7g3mppuqp02tpp6&board=8.0%3Bsort%3Dstarter HTTP/1.1" 200 4468
4.227.36.2 - - [05/Jan/2025:21:29:40 +0500] "GET /forum/index.php?PHPSESSID=jm2l85e4tju5pacriv1im14uf3&amp%3Btopic=95.0 HTTP/1.1" 200 6450
4.227.36.2 - - [05/Jan/2025:21:29:41 +0500] "GET /forum/index.php?PHPSESSID=5me8q5ck0nltrdb09b8l4jrpl0&board=5.0%3Bsort%3Dsubject HTTP/1.1" 200 5135
4.227.36.2 - - [05/Jan/2025:21:29:42 +0500] "GET /forum/index.php?PHPSESSID=jtcb7mp0ovick5vinur2fea1gv&board=8.0%3Bsort%3Dstarter HTTP/1.1" 200 4378
4.227.36.2 - - [05/Jan/2025:21:29:43 +0500] "GET /forum/index.php?PHPSESSID=kg7a9tr7mlpchlm1er1t3ghha3&board=4.0%3Bsort%3Dsubject HTTP/1.1" 200 7099
4.227.36.2 - - [05/Jan/2025:21:29:44 +0500] "GET /forum/index.php?PHPSESSID=bcuucou5t9f9vd3lvl9skjn7pk&amp%3Baction=profile%3Bu%3D1 HTTP/1.1" 200 6438
4.227.36.2 - - [05/Jan/2025:21:29:45 +0500] "GET /forum/index.php?PHPSESSID=2kcs16kb3q58aj62296m272vth&board=9.0%3Bsort%3Dreplies HTTP/1.1" 200 4330
4.227.36.2 - - [05/Jan/2025:21:29:46 +0500] "GET /forum/index.php?PHPSESSID=d0j4hslh2jn9e3ak16nt1gj4f4&amp%3Baction=profile%3Bu%3D8 HTTP/1.1" 200 6444
4.227.36.2 - - [05/Jan/2025:21:29:47 +0500] "GET /forum/index.php?PHPSESSID=j2vnp19op93ru9pvu44dnk98g8&amp%3Baction=profile%3Bu%3D1 HTTP/1.1" 200 6441
4.227.36.2 - - [05/Jan/2025:21:29:48 +0500] "GET /forum/index.php?PHPSESSID=3l0sh10s494j981mcuei2ev7jl&amp%3Baction=profile%3Bu%3D3 HTTP/1.1" 200 6458
4.227.36.2 - - [05/Jan/2025:21:29:49 +0500] "GET /forum/index.php?PHPSESSID=cdlv9ofuud5uaqhohqlk68c5gq&action=recent%3Bstart%3D40 HTTP/1.1" 404 2921
4.227.36.2 - - [05/Jan/2025:21:29:50 +0500] "GET /forum/index.php?PHPSESSID=cdlv9ofuud5uaqhohqlk68c5gq&amp%3Btopic=97.0 HTTP/1.1" 200 6475
4.227.36.2 - - [05/Jan/2025:21:29:52 +0500] "GET /forum/index.php?PHPSESSID=d0j4hslh2jn9e3ak16nt1gj4f4&amp%3Btopic=95.0 HTTP/1.1" 200 6514
4.227.36.2 - - [05/Jan/2025:21:29:53 +0500] "GET /forum/index.php?PHPSESSID=rg5litijvo874f15odjegk2270&amp%3Btopic=30.0 HTTP/1.1" 200 6423
4.227.36.2 - - [05/Jan/2025:21:29:54 +0500] "GET /forum/index.php?PHPSESSID=2kcs16kb3q58aj62296m272vth&amp%3Btopic=41.0 HTTP/1.1" 200 6475
4.227.36.2 - - [05/Jan/2025:21:29:55 +0500] "GET /forum/index.php?PHPSESSID=f9okskqc3k8v520euuprhif6j5&board=4.0%3Bsort%3Dreplies HTTP/1.1" 200 7064
4.227.36.2 - - [05/Jan/2025:21:29:56 +0500] "GET /forum/index.php?PHPSESSID=riid06ps5jtrsv9t759ehk6hvh&board=3.0%3Bsort%3Dsubject HTTP/1.1" 200 5245
4.227.36.2 - - [05/Jan/2025:21:29:57 +0500] "GET /forum/index.php?PHPSESSID=2kcs16kb3q58aj62296m272vth&amp%3Btopic=47.0 HTTP/1.1" 200 6428
4.227.36.2 - - [05/Jan/2025:21:29:58 +0500] "GET /forum/index.php?PHPSESSID=q1sn8epbfv86tdokcji0ui1hq4&amp%3Btopic=5.75 HTTP/1.1" 200 6457
4.227.36.2 - - [05/Jan/2025:21:29:59 +0500] "GET /forum/index.php?PHPSESSID=omhshnelsdtm1ucg0rqqnsuai3&board=5.0%3Bsort%3Dstarter HTTP/1.1" 200 5139
4.227.36.2 - - [05/Jan/2025:21:30:00 +0500] "GET /forum/index.php?PHPSESSID=rg5litijvo874f15odjegk2270&board=9.0%3Bsort%3Dstarter HTTP/1.1" 200 4258
4.227.36.2 - - [05/Jan/2025:21:30:02 +0500] "GET /forum/index.php?PHPSESSID=ngs42q5dphf5cbmp182cfmassv&amp%3Btopic=68.0 HTTP/1.1" 200 6499
4.227.36.2 - - [05/Jan/2025:21:30:03 +0500] "GET /forum/index.php?PHPSESSID=un2u5sta64qv7cnb1hmk8lif0u&amp%3Btopic=91.0 HTTP/1.1" 200 6424
4.227.36.2 - - [05/Jan/2025:21:30:05 +0500] "GET /forum/index.php?PHPSESSID=q1sn8epbfv86tdokcji0ui1hq4&board=9.0%3Bsort%3Dsubject HTTP/1.1" 200 4216
4.227.36.2 - - [05/Jan/2025:21:30:07 +0500] "GET /forum/index.php?PHPSESSID=kg7a9tr7mlpchlm1er1t3ghha3&amp%3Btopic=40.0 HTTP/1.1" 200 6450
4.227.36.2 - - [05/Jan/2025:21:30:09 +0500] "GET /forum/index.php?PHPSESSID=6ms3mnjmv09k883k7lfat2uvn2&action=recent%3Bstart%3D60 HTTP/1.1" 404 2919
4.227.36.2 - - [05/Jan/2025:21:30:12 +0500] "GET /forum/index.php?PHPSESSID=f9okskqc3k8v520euuprhif6j5&amp%3Btopic=93.0 HTTP/1.1" 200 6448
4.227.36.2 - - [05/Jan/2025:21:30:14 +0500] "GET /forum/index.php?PHPSESSID=739cblkv3v6ffqg915b54f3r6d&amp%3Baction=profile%3Bu%3D4 HTTP/1.1" 200 6432
4.227.36.2 - - [05/Jan/2025:21:30:15 +0500] "GET /forum/index.php?PHPSESSID=qnc0vlvqma1nnn0b0q8n9nk4c8&amp%3Baction=profile%3Bu%3D7 HTTP/1.1" 200 6502

Обратите внимание на идентификатор сессии. С одного адреса это никак не нормально, тем более, что таких открытых сессий в базе нет - я это проверял. В итоге по запросу отдаётся начальная страница, относительно маленькая, килобайт шесть всего. Однако зацените объём траффика на графике! Один столбик - это 25 минут. Для нашего сайта с его считанными пользователями траффик, генерируемый роботами просто запредельный $:-\$

Slabovik · 09 Янв., 2025, 13:34

Не, у меня всё работает... вроде...

AK Laboratory

Как могут ломать ваш сайт

Мастер

Slabovik

Мастер

Slabovik