掃描網站(用寶塔面板免費防火墻屏蔽織夢掃描網站)

今天教大傢在免費的基礎上屏蔽織夢掃描,首先您要安裝寶塔面板,然後再安裝免費的防火墻插件,我用的是Nginx免費防火墻,然後打開這個插件。設置GET-URL過濾設置一條簡單的寶塔面板的正則規則就可以屏蔽織夢的規則掃描,代碼如下圖^/(data\/admin|include\/data|include\/helpers|plus|member|templets\/default)/(\w+).(php|txt|dat|jpg|inc|htm|html)$2.設置user-agent過濾同樣道理,user-agent也可做一下過濾(GRequests|Firefox/7.0.1|MJ12bot|PhantomJS|ThinkChaos|YisouSpider|YandexBot|HTTrack|libcurl-agent|Go-http-client|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf|bench|AhrefsBot|SemrushBot| SF/)註意上面這條我是直接編輯的規則,所以前後會有括號和/再添加一條規則,復制下面的代碼,點添加按鈕,重新添加一些過濾user-agent的規則CheckMarkNetwork|Synapse|Nimbostratus-Bot|Dark|scraper|LMAO|Hakai|Gemini|Wappalyzer|masscan|crawler4j|Mappy|Center|eright|aiohttp|MauiBot|Crawler|researchscan|Dispatch|AlphaBot|Census|ips-agent|NetcraftSurveyAgent|ToutiaoSpider|EasyHttp|Iframely|sysscan|fasthttp|muhstik|DeuSu|mstshash|HTTP_Request|ExtLinksBot|package|SafeDNSBot|CPython|SiteExplorer|SSH|MegaIndex|BUbiNG|CCBot|NetTrack|Digincore|aiHitBot|SurdotlyBot|null|Test|Copied|ltx71|Nmap|DotBot|AdsBot|InetURL|Pcore-HTTP|PocketParser|Wotbox|newspaper|DnyzBot|redback|PiplBot|SMTBot|WinHTTP|Auto Spider 1.0|GrabNet|TurnitinBot|Go-Ahead-Got-It|Download Demon|Go!Zilla|GetWeb!|GetRight|libwww-perl|Cliqzbot|MailChimp|SMTBot|Dataprovider|XoviBot|linkdexbot|SeznamBot|Qwantify|spbot|evc-batch|zgrab|Go-http-client|FeedDemon|JikeSpider|Indy Library|Alexa Toolbar|AskTbFXTV|AhrefsBot|CrawlDaddy|CoolpadWebkit|Java|UniversalFeedParser|ApacheBench|Microsoft URL Control|Swiftbot|ZmEu|jaunty|Python-urllib|lightDeckReports Bot|YYSpider|DigExt|HttpClient|EasouSpider|LinkpadBot|Ezooms這是我已知的user-agent,請分析網站日志,如果還有其它的,請找我的聯系方式,告訴我,分享給我好嗎?替換織夢代碼中退出代碼包含的if(!defined('DEDEINC')) exit('dedecms');像下圖這樣替換就ok,全站代碼都要做這樣的替換,如果不做替換就有一定風險性。目錄改名這步驟其它剛才用免費防火墻已經設置過瞭,如果您還不放心,請執行下面的操作,就是那幾個目錄都要改一下名字plus,data,dede,templates。改名方法可以給我留言。images目錄,js目錄裡,css目錄裡沒用的文件刪除一下,別用install程序安裝織夢而是直接導入數據庫腳本,刪除install目錄,替換根目錄.ico文件,替換images目錄下的defaultpic.gif,別安裝織夢的擴展插件這樣基本可以在不花錢的基礎上防止掃描織夢漏洞的人掃描你的網站。


本文出自快速备案,转载时请注明出处及相应链接。

本文永久链接: https://www.xiaosb.com/beian/51432/