看起來像是中國的網軍想入侵網站。
在 Linux,由於 httpd 是用 apache 這個 uid,所以網頁的 .php 等 source 的 owner 絕對不要用 apache,以防止被更改。
如果真的要放重要資料如 backup 在裏面,backup file 的 mode 一定要是 600,這樣就可以防止 apache 去讀取。
inetnum: 27.184.0.0 - 27.191.255.255
netname: CHINANET-HE
descr: CHINANET hebei province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
27.189.197.58 - - [29/Dec/2011:09:05:58 0800] "HEAD /data/data.asp HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:05:59 0800] "HEAD /data/#data.asp HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:05:59 0800] "HEAD /zxrj/zxrj.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:05:59 0800] "HEAD /vip/shopbackup.mdb HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:05:59 0800] "HEAD /p57/vip/shopbackup.mdb HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:05:59 0800] "HEAD /hyperrate.com.7z HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:05:59 0800] "HEAD /hyperrate.com.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:00 0800] "HEAD /hyperrate.com.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
66.249.68.57 - - [29/Dec/2011:09:05:59 0800] "GET /thread.php?tid=13310 HTTP/1.1" 200 12967 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html)"
27.189.197.58 - - [29/Dec/2011:09:06:00 0800] "HEAD /hyperrate.7z HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:00 0800] "HEAD /hyperrate.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:00 0800] "HEAD /hyperrate.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:01 0800] "HEAD /hyperratecom.7z HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:01 0800] "HEAD /hyperratecom.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:01 0800] "HEAD /hyperratecom.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:01 0800] "HEAD /hyperrate.com.7z HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:02 0800] "HEAD /hyperrate.com.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:02 0800] "HEAD /hyperrate.com.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:02 0800] "HEAD //database/DB.mdb HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:02 0800] "HEAD /P57/vip/Edit/db/#ewebeditor.asp HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:03 0800] "HEAD /0.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:03 0800] "HEAD /000.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:03 0800] "HEAD /1.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:03 0800] "HEAD /10.1.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:03 0800] "HEAD /10.2.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:04 0800] "HEAD /10.3.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:04 0800] "HEAD /10.4.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:04 0800] "HEAD /10.5.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:04 0800] "HEAD /10.6.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:04 0800] "HEAD /10.7.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:05 0800] "HEAD /10.8.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:05 0800] "HEAD /10.9.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:05 0800] "HEAD /11.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:05 0800] "HEAD /111.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:05 0800] "HEAD /111111.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:06 0800] "HEAD /123.7z HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:06 0800] "HEAD /123.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:06 0800] "HEAD /123.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:06 0800] "HEAD /1234.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:06 0800] "HEAD /2.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:07 0800] "HEAD /360kafei.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:07 0800] "HEAD /360kafei.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:07 0800] "HEAD /a.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:07 0800] "HEAD /admin.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:07 0800] "HEAD /asp.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:08 0800] "HEAD /bak.7z HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:08 0800] "HEAD /bak.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:08 0800] "HEAD /coffee.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:08 0800] "HEAD /config.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:08 0800] "HEAD /data.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:08 0800] "HEAD /data/##baseData.mdb HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:09 0800] "HEAD /data/baseData.mdb HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:09 0800] "HEAD /data/Data.mdb HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:09 0800] "HEAD /data/db.mdb HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:09 0800] "HEAD /data/#Data.mdb HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:09 0800] "HEAD /data/#db.mdb HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:10 0800] "HEAD /data/data.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:10 0800] "HEAD /db.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:10 0800] "HEAD /dg.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:10 0800] "HEAD /dg.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:10 0800] "HEAD /dingdan.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:10 0800] "HEAD /dingdan.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:11 0800] "HEAD /dinggou.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:11 0800] "HEAD /dinggou.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:11 0800] "HEAD /ecshop.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:11 0800] "HEAD /ftp.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:11 0800] "HEAD /int.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:11 0800] "HEAD /int.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:12 0800] "HEAD /kafei.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:12 0800] "HEAD /kafei.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:12 0800] "HEAD /lukasu.7z HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:12 0800] "HEAD /lukasu.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:12 0800] "HEAD /lukasu.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:12 0800] "HEAD /maca.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:13 0800] "HEAD /maca.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:13 0800] "HEAD /maka.rar HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"
27.189.197.58 - - [29/Dec/2011:09:06:13 0800] "HEAD /maka.zip HTTP/1.1" 404 - "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)"